$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa File: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (raw, json) Hash identifier: J8ckVhtPmAOf9vd5gI9gClukXYPshDJq6NCxBdxnS/4= Subject key identifier: 00:1F:51:C8:44:26:BC:66:E4:13:2C:DD:E4:2D:40:52:9C:61:07:83 Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Certificate serial: 010D0C9F4328584B0746C55C4C5B283E7FDDC470 Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 271 IP address blocks: 199.9.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:5c:4c:5b:28:3e:7f:dd:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=bbb6e512-7f56-4090-879d-86e0929d5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:c2:96:0e:24:a9:8e:93:29:c1:8f:a5:f5: 2d:4b:70:bf:5a:20:a5:bb:63:98:7c:01:74:89:f1: 9e:73:63:50:0e:1f:d5:d2:d5:d4:91:e5:26:c9:73: 86:ea:d0:15:63:ef:25:39:43:6b:bb:55:13:5f:9e: 65:50:69:29:17:4e:14:e9:a8:eb:af:ce:72:8b:59: cd:86:9f:5b:b7:93:d9:d3:76:76:6c:d8:e4:92:22: 48:45:52:a6:7a:c0:ab:5e:76:d2:24:4e:61:a2:6f: c6:15:6d:b3:02:c9:88:d0:eb:e6:0b:55:e9:eb:34: f2:b8:16:b3:7a:71:40:ca:6c:08:77:93:bc:1e:99: f0:55:22:09:1d:6c:98:5b:06:5a:e5:84:c7:7f:b2: 86:31:e7:ba:75:de:b4:da:95:a0:20:4c:c5:d3:bb: e3:db:c8:42:7c:40:5e:a2:cc:7d:8e:25:2f:32:a7: 10:91:79:f9:f1:26:67:c9:c2:80:ac:5a:3f:8b:6f: e8:e4:bf:a7:5c:9f:02:6d:75:86:8a:8c:d9:d1:6f: a2:cb:70:39:24:6f:21:37:11:ca:cf:91:a4:c9:f0: 12:ef:2f:6d:86:1f:e2:d9:ee:20:51:f6:a1:d3:e2: 02:91:59:b5:5e:26:96:37:d8:43:7a:93:4d:ac:01: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1F:51:C8:44:26:BC:66:E4:13:2C:DD:E4:2D:40:52:9C:61:07:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl X509v3 Authority Key Identifier: keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer sbgp-ipAddrBlock: critical IPv4: 199.9.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6d:d9:85:8e:75:a7:42:1e:d4:20:54:f6:d6:4b:6b:65:02: 3d:44:8f:07:14:ff:a0:02:72:26:25:b7:0a:90:40:b6:d1:72: 76:e8:9a:4e:32:b2:ea:18:d8:50:c5:b5:c2:56:66:37:c9:70: c9:90:be:df:3f:b0:a1:ab:68:ae:e1:0a:e5:19:2f:92:33:9c: ca:df:84:99:65:69:00:85:47:1a:1d:74:1f:46:10:a2:fb:f4: 4c:f8:ce:44:86:17:6e:e1:e6:be:60:7f:b0:34:68:9a:18:a9: 26:05:e5:5e:99:0b:47:65:f4:b9:a6:58:c7:e5:bc:01:49:70: 18:47:e2:a9:bc:81:a9:2b:d6:39:88:a5:70:3a:c1:b2:dc:1f: d5:6e:c5:dc:e6:ed:03:f7:f7:73:df:88:a0:26:ac:62:63:fa: 39:d0:db:f4:37:6c:b6:8c:73:4b:0c:87:06:35:f5:86:b7:07: b6:87:d2:1f:d9:9f:ba:7a:96:5f:23:a7:7e:66:8d:ec:60:63: 96:c8:c5:66:f2:a8:b8:1f:44:92:37:31:db:db:be:db:77:45: 6f:ec:7c:b9:37:95:11:3d:ad:3c:cd:72:12:e3:1b:55:d0:1d: 00:96:b9:1c:05:26:e2:bf:f6:3c:e3:9c:13:d9:96:ef:29:5f: b2:4f:9a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsVcTFsoPn/dxHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJm NGQ3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YmJiNmU1MTItN2Y1Ni00MDkwLTg3OWQtODZlMDkyOWQ1YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9LClg4kqY6TKcGPpfUtS3C/WiClu2OYfAF0 ifGec2NQDh/V0tXUkeUmyXOG6tAVY+8lOUNru1UTX55lUGkpF04U6ajrr85yi1nN hp9bt5PZ03Z2bNjkkiJIRVKmesCrXnbSJE5hom/GFW2zAsmI0OvmC1Xp6zTyuBaz enFAymwId5O8HpnwVSIJHWyYWwZa5YTHf7KGMee6dd602pWgIEzF07vj28hCfEBe osx9jiUvMqcQkXn58SZnycKArFo/i2/o5L+nXJ8CbXWGiozZ0W+iy3A5JG8hNxHK z5GkyfAS7y9thh/i2e4gUfah0+ICkVm1XiaWN9hDepNNrAH67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAfUchEJrxm5BMs3eQtQFKcYQeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMWIx ZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvNTg5MTBjOGMtZDBmYS0z MGU5LWEyZmQtMThlMWI4MGIxMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTFiMWZiNDMtZGIwYy00MmU0LWFk NjItNGUwODZjYTJmNGQ3L2ExYjFmYjQzLWRiMGMtNDJlNC1hZDYyLTRlMDg2Y2Ey ZjRkNy5jcmwwHwYDVR0jBBgwFoAUcpexTjDO2X4uuA6LlYq3HTddRdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4 NmNhMmY0ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFht2YWOdadCHtQgVPbWS2tlAj1EjwcU/6ACciYltwqQQLbRcnbomk4y suoY2FDFtcJWZjfJcMmQvt8/sKGraK7hCuUZL5IznMrfhJllaQCFRxoddB9GEKL7 9Ez4zkSGF27h5r5gf7A0aJoYqSYF5V6ZC0dl9LmmWMflvAFJcBhH4qm8gakr1jmI pXA6wbLcH9Vuxdzm7QP393PfiKAmrGJj+jnQ2/Q3bLaMc0sMhwY19Ya3B7aH0h/Z n7p6ll8jp35mjexgY5bIxWbyqLgfRJI3Mdvbvtt3RW/sfLk3lRE9rTzNchLjG1XQ HQCWuRwFJuK/9jzjnBPZlu8pX7JPmvc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:46:01 2025 by rpki-client