$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa File: 0d519aad-61ef-3c40-81b7-0d8eb879746d.roa (raw, json) Hash identifier: QRCGVbOF+iVFVKPDrRFw+O5wF9CIWZBR1P91uu1x58c= Subject key identifier: 21:06:27:3D:0A:F3:17:CC:3F:54:BD:49:47:A4:74:A4:C3:A2:AA:75 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B3DB7025D0CF07F240A064600 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 32764 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:02:5d:0c:f0:7f:24:0a:06:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=23398e2c-b2fe-4773-96cd-72fbe4a8d5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:e2:da:8c:d9:a0:ea:9f:fc:ec:b8:d0:f4: 8e:41:82:c1:7f:e0:27:f3:e6:99:8d:cb:20:8d:f9: fa:2a:b7:39:ee:85:18:11:64:c8:19:e6:d7:42:e0: e7:44:f9:b3:63:fb:5b:7b:2d:e4:a2:c0:76:5c:99: af:b6:66:df:73:e8:69:e3:ba:62:27:4d:a2:df:6f: 9f:63:24:a2:97:5d:28:75:66:e0:29:f3:71:ef:63: d7:83:ea:6f:21:ee:03:4d:ab:ae:2a:32:8d:1e:0c: 48:ad:62:af:0f:40:38:de:0e:33:44:02:34:b8:18: 3a:a0:eb:96:4e:c8:dc:9c:71:ee:69:36:c0:c3:de: 84:ee:34:ea:d8:93:37:df:8d:da:16:b1:e6:94:1e: 30:8a:a8:d6:9a:7f:c9:24:cf:7f:7d:3e:f5:1d:94: f9:db:1d:45:22:e8:3a:3a:bd:3d:59:c9:f0:72:a2: a0:05:24:a9:15:ff:ec:d3:ae:4e:df:53:fa:53:f6: 27:38:71:db:a7:77:86:b1:1c:b9:58:50:21:f6:a8: 38:a9:8e:9b:c4:62:11:25:72:5a:f5:20:0e:4f:ca: a1:51:b0:da:1e:10:5e:f9:e3:45:c0:52:69:0c:eb: a0:82:97:9e:ac:ee:f6:dc:a4:34:d5:59:61:56:38: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:27:3D:0A:F3:17:CC:3F:54:BD:49:47:A4:74:A4:C3:A2:AA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6d:7b:b8:4a:46:74:18:8b:8a:bd:6c:bf:20:b5:27:82:af: af:15:14:35:b4:a3:f7:f8:64:8a:1e:11:bd:54:e0:33:7f:ce: c5:62:7a:1e:dc:cd:66:a8:bb:14:ba:51:2f:b0:d0:03:c3:b3: c7:66:0a:9c:63:fc:e8:5d:fd:6b:26:72:69:4b:4a:b4:29:c6: 0d:df:bc:f8:2c:93:50:82:50:65:ed:72:87:e9:dc:40:49:e1: fd:22:ac:6e:96:a8:b4:94:e0:0d:0a:08:44:84:1c:b8:d2:a0: ed:a0:51:3f:e3:f5:6d:cd:b9:12:66:1f:d6:60:15:62:f0:25: 0e:bd:c8:1e:f7:34:b9:b6:01:8a:f0:60:ae:1a:08:f3:fd:84: b8:cc:b1:d2:36:86:b5:7f:a4:36:92:2a:13:d7:42:a3:f4:61: 98:d9:5e:bd:19:88:d4:97:c5:3b:3c:2a:6c:ff:ae:10:17:ae: 32:e3:b3:a4:d6:e1:0f:94:a1:1b:2e:b2:23:c9:64:f6:31:de: 6b:ef:0e:69:43:08:f6:72:f5:42:c4:b3:b5:19:67:25:57:20: e2:b2:a0:6d:f8:63:82:69:40:e8:80:ed:ee:3f:85:2d:ed:3d: 8a:da:02:d1:37:87:4d:67:a8:ab:f3:ad:c4:04:97:de:cb:33: 55:39:3a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twJdDPB/JAoGRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjMzOThlMmMtYjJmZS00NzczLTk2Y2QtNzJmYmU0YThkNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KPi2ozZoOqf/Oy40PSOQYLBf+An8+aZjcsg jfn6Krc57oUYEWTIGebXQuDnRPmzY/tbey3kosB2XJmvtmbfc+hp47piJ02i32+f YySil10odWbgKfNx72PXg+pvIe4DTauuKjKNHgxIrWKvD0A43g4zRAI0uBg6oOuW TsjcnHHuaTbAw96E7jTq2JM3343aFrHmlB4wiqjWmn/JJM9/fT71HZT52x1FIug6 Or09WcnwcqKgBSSpFf/s065O31P6U/YnOHHbp3eGsRy5WFAh9qg4qY6bxGIRJXJa 9SAOT8qhUbDaHhBe+eNFwFJpDOuggpeerO723KQ01VlhVjh52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEGJz0K8xfMP1S9SUekdKTDoqp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMGQ1MTlhYWQtNjFlZi0z YzQwLTgxYjctMGQ4ZWI4Nzk3NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRte7hKRnQYi4q9bL8gtSeCr68VFDW0o/f4ZIoeEb1U4DN/zsVieh7c zWaouxS6US+w0APDs8dmCpxj/Ohd/WsmcmlLSrQpxg3fvPgsk1CCUGXtcofp3EBJ 4f0irG6WqLSU4A0KCESEHLjSoO2gUT/j9W3NuRJmH9ZgFWLwJQ69yB73NLm2AYrw YK4aCPP9hLjMsdI2hrV/pDaSKhPXQqP0YZjZXr0ZiNSXxTs8Kmz/rhAXrjLjs6TW 4Q+UoRsusiPJZPYx3mvvDmlDCPZy9ULEs7UZZyVXIOKyoG34Y4JpQOiA7e4/hS3t PYraAtE3h01nqKvzrcQEl97LM1U5OvA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:59 2025 by rpki-client