$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa File: 5368e9b8-712e-3eaf-a366-757c94d5124e.roa (raw, json) Hash identifier: FJ7VBhNPNpwbbLAf//49uQRMO5mUJRpf8JanTseXSyU= Subject key identifier: 7D:95:31:FA:DD:9F:EB:91:72:54:3A:05:8B:B3:5D:6E:23:94:38:01 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B3126EE514BC876B9DB941BC0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 14618 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:ee:51:4b:c8:76:b9:db:94:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=2d9f312e-056a-4497-bd79-32e45f13d6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:91:07:71:cd:1e:43:ce:26:fe:f5:2e:d2: 23:b1:b4:10:ae:77:c0:e5:1c:29:fc:9a:30:a3:58: 2d:30:50:cc:a4:70:2f:82:18:e8:83:60:e2:a5:71: a0:9f:ff:17:d3:06:e0:60:ff:c9:da:a7:b9:0c:f4: af:73:7d:83:dc:eb:37:1b:93:0f:eb:ea:42:47:08: 5b:23:1f:8d:18:e0:4d:2e:5c:f8:e1:94:a2:8a:91: 19:21:bd:47:af:68:04:0d:df:0e:86:5c:90:ff:3e: 30:81:9c:44:ad:c8:52:39:96:d5:3d:b8:21:55:6b: 9d:d9:b9:b8:55:18:e5:74:8d:88:12:dc:88:22:39: 62:61:33:df:84:65:06:e0:27:f8:36:ec:cd:9c:db: b0:94:c7:83:c1:65:1f:89:5a:77:a8:82:9a:5d:35: 36:26:ff:35:55:ba:5b:d3:e4:2f:a7:30:f0:5d:ba: e5:d3:44:b5:d5:f3:26:5e:39:06:f6:81:f2:54:ef: 55:00:b8:6d:da:9a:a8:73:69:b5:c6:ab:96:68:f7: b4:30:90:c3:d5:1b:36:39:f2:6e:93:91:a9:b1:5e: 10:a0:57:00:c6:e3:bb:77:be:c3:68:a2:ce:e8:b0: 87:5e:d5:76:6f:5e:da:4d:0e:03:b6:1e:87:ae:e8: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:95:31:FA:DD:9F:EB:91:72:54:3A:05:8B:B3:5D:6E:23:94:38:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8d:86:e8:fc:be:c0:cb:3f:7d:a5:cf:5e:e1:d8:99:02:3d: 35:28:f6:28:df:57:6a:44:96:49:2b:80:20:92:aa:cc:8f:a8: 80:2e:ea:4b:58:91:03:e8:bd:1f:f5:8b:d0:aa:b2:5c:df:59: c9:76:97:9a:40:82:8f:ee:60:bb:35:ff:38:66:a1:d5:32:38: 83:f8:80:03:b3:19:14:80:e9:d2:05:82:1f:ce:d1:f1:dd:a7: f5:de:80:12:de:3d:2e:47:f9:fd:26:cd:93:03:a5:1b:f1:4d: 68:32:e9:91:6b:28:db:b9:cb:22:cc:76:85:0e:31:b9:b6:d8: 28:8e:95:46:b9:95:e2:9f:94:7d:4b:94:47:b3:37:07:68:7a: 71:4f:ae:9c:0d:ce:89:41:b5:a1:00:50:0d:fc:56:73:16:12: e0:40:db:b7:56:29:aa:13:44:fe:2a:2f:dc:df:ec:01:10:4a: c3:d9:78:cc:35:c7:5d:b5:a4:09:d1:34:6b:2a:86:e3:04:d9: c2:47:f0:72:a1:78:c3:c3:3f:74:41:85:7e:09:f3:77:e6:bf: 03:58:d2:59:9d:13:c6:cd:5e:71:53:4f:33:22:2e:6d:2f:2a: 55:85:58:dd:80:86:bf:c0:ce:8d:6d:e2:2c:43:2b:d3:8c:09: 22:a3:d3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJu5RS8h2uduUG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MmQ5ZjMxMmUtMDU2YS00NDk3LWJkNzktMzJlNDVmMTNkNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguqRB3HNHkPOJv71LtIjsbQQrnfA5Rwp/Jow o1gtMFDMpHAvghjog2DipXGgn/8X0wbgYP/J2qe5DPSvc32D3Os3G5MP6+pCRwhb Ix+NGOBNLlz44ZSiipEZIb1Hr2gEDd8OhlyQ/z4wgZxErchSOZbVPbghVWud2bm4 VRjldI2IEtyIIjliYTPfhGUG4Cf4NuzNnNuwlMeDwWUfiVp3qIKaXTU2Jv81Vbpb 0+QvpzDwXbrl00S11fMmXjkG9oHyVO9VALht2pqoc2m1xquWaPe0MJDD1Rs2OfJu k5GpsV4QoFcAxuO7d77DaKLO6LCHXtV2b17aTQ4Dth6HrujObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2VMfrdn+uRclQ6BYuzXW4jlDgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvNTM2OGU5YjgtNzEyZS0z ZWFmLWEzNjYtNzU3Yzk0ZDUxMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKNhuj8vsDLP32lz17h2JkCPTUo9ijfV2pElkkrgCCSqsyPqIAu6ktY kQPovR/1i9CqslzfWcl2l5pAgo/uYLs1/zhmodUyOIP4gAOzGRSA6dIFgh/O0fHd p/XegBLePS5H+f0mzZMDpRvxTWgy6ZFrKNu5yyLMdoUOMbm22CiOlUa5leKflH1L lEezNwdoenFPrpwNzolBtaEAUA38VnMWEuBA27dWKaoTRP4qL9zf7AEQSsPZeMw1 x121pAnRNGsqhuME2cJH8HKheMPDP3RBhX4J83fmvwNY0lmdE8bNXnFTTzMiLm0v KlWFWN2Ahr/Azo1t4ixDK9OMCSKj06Y= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:43 2025 by rpki-client