$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json) Hash identifier: wcnpNMAvNDDRn9DGT9MjZLYuuxk6vXjWPYwWqBU3mCM= Subject key identifier: 4A:BB:6F:44:A3:02:B2:6D:2E:09:59:96:F4:86:F1:D6:9C:4A:75:FB Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584B328C317F0A1B77E95ED56640 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 13660 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:31:7f:0a:1b:77:e9:5e:d5:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=06ff52c4-7acd-42ac-8f01-b4f4022dc660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:4a:5e:91:f8:fc:e4:ed:54:73:0b:4f:b3: 2d:40:91:51:62:06:58:2e:59:cc:bc:e5:5f:41:2f: bd:af:94:ad:1a:c3:35:84:91:05:64:7b:93:2f:9a: 64:65:16:80:26:3c:5a:ff:6c:22:c9:2a:d3:f4:87: f6:64:86:be:35:f2:4e:dd:8c:8b:84:b1:9b:aa:c1: 68:94:60:7f:dd:81:01:b7:13:2d:65:08:86:ac:c4: 56:0a:63:c7:27:22:54:9a:dd:3a:bb:e5:4d:17:79: e2:28:88:09:a5:52:6b:83:88:69:83:44:4f:f2:63: 86:0b:9c:d7:62:70:79:04:7b:f3:d4:ab:c5:70:8a: 18:2d:e5:56:a4:c7:5b:df:ff:8c:31:af:eb:15:a6: fb:9a:80:23:48:8d:d0:f9:08:98:a2:74:70:40:33: 56:1b:b2:76:de:e4:08:d7:3b:4f:88:1d:a1:8a:9d: 3f:74:3e:3f:49:78:86:57:9d:4b:0d:ce:bf:56:d5: 87:bd:e2:0b:00:b1:68:68:ec:ee:5e:7a:1e:ff:77: 3a:7b:56:cd:5d:43:e7:be:c9:1e:a0:d4:e2:a9:53: d5:9d:83:bd:7a:40:df:e9:60:93:04:f9:b6:a5:3a: 79:7c:98:93:70:f4:9f:00:33:19:ca:32:5d:70:44: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BB:6F:44:A3:02:B2:6D:2E:09:59:96:F4:86:F1:D6:9C:4A:75:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ab:ec:49:19:40:d9:f2:a6:b0:59:e8:fd:ab:6d:53:69:da: 5e:5c:d9:7f:2a:04:09:53:d7:3b:ce:75:1a:d4:a8:da:73:f4: d3:5a:c8:5a:64:2b:cb:94:76:f9:07:15:27:6f:63:56:73:2d: 44:9e:a7:04:d2:4f:46:39:ec:f1:9e:6a:42:10:f3:42:3c:e2: 36:56:98:c5:d2:ed:d9:df:40:85:72:10:44:5f:fa:88:03:8d: e3:98:52:3f:ac:21:b0:70:08:15:f5:8c:32:7d:7c:da:58:35: 6e:ab:8d:5b:ea:d4:54:8b:81:88:bb:31:a8:08:1c:e9:8b:1c: 95:a0:5c:27:83:6d:85:b1:77:18:94:98:48:a9:25:fb:96:7d: bd:e6:1d:4f:9e:19:f2:b3:af:ca:43:b1:c6:7f:77:df:86:5c: 1a:68:03:a3:b0:14:48:f4:eb:a2:02:0f:a3:14:0d:3c:22:08: d3:84:97:af:55:ea:39:98:ae:aa:2d:3c:fa:84:08:30:1d:af: 24:3e:09:95:c6:17:f8:53:65:44:ad:ae:f7:73:9c:4c:65:ee: 78:fb:e2:be:4b:61:84:5b:69:57:c4:79:1b:12:8b:e7:61:10: 39:a2:58:39:da:b6:5c:ea:ee:ee:e7:0e:9b:58:bf:88:0e:68: ae:8e:a6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDF/Cht36V7VZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MDZmZjUyYzQtN2FjZC00MmFjLThmMDEtYjRmNDAyMmRjNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43lKXpH4/OTtVHMLT7MtQJFRYgZYLlnMvOVf QS+9r5StGsM1hJEFZHuTL5pkZRaAJjxa/2wiySrT9If2ZIa+NfJO3YyLhLGbqsFo lGB/3YEBtxMtZQiGrMRWCmPHJyJUmt06u+VNF3niKIgJpVJrg4hpg0RP8mOGC5zX YnB5BHvz1KvFcIoYLeVWpMdb3/+MMa/rFab7moAjSI3Q+QiYonRwQDNWG7J23uQI 1ztPiB2hip0/dD4/SXiGV51LDc6/VtWHveILALFoaOzuXnoe/3c6e1bNXUPnvske oNTiqVPVnYO9ekDf6WCTBPm2pTp5fJiTcPSfADMZyjJdcETCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq7b0SjArJtLglZlvSG8dacSnX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyr7EkZQNnyprBZ6P2rbVNp2l5c2X8qBAlT1zvOdRrUqNpz9NNayFpk K8uUdvkHFSdvY1ZzLUSepwTST0Y57PGeakIQ80I84jZWmMXS7dnfQIVyEERf+ogD jeOYUj+sIbBwCBX1jDJ9fNpYNW6rjVvq1FSLgYi7MagIHOmLHJWgXCeDbYWxdxiU mEipJfuWfb3mHU+eGfKzr8pDscZ/d9+GXBpoA6OwFEj066ICD6MUDTwiCNOEl69V 6jmYrqotPPqECDAdryQ+CZXGF/hTZUStrvdznExl7nj74r5LYYRbaVfEeRsSi+dh EDmiWDnatlzq7u7nDptYv4gOaK6Opo4= -----END CERTIFICATE-----Generated at Tue Oct 28 01:22:02 2025 by rpki-client