$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/3911522a-cd6c-31cf-b571-bacc39fadeaa.roa File: 3911522a-cd6c-31cf-b571-bacc39fadeaa.roa (raw, json) Hash identifier: rCaKm3jHFFve+2UmK5EVg1tXc3lnIIHdEWANMolEeog= Subject key identifier: BF:5A:24:F2:B5:DA:25:AA:32:56:A4:EF:F3:E3:FF:04:27:9E:B4:41 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B6631F0DB069EFCA792819140 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/3911522a-cd6c-31cf-b571-bacc39fadeaa.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 3356 IP address blocks: 199.0.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f0:db:06:9e:fc:a7:92:81:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=5fafd3f9-60ff-49d0-8457-004b7c61fe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:24:e6:80:b7:bc:9a:d2:c7:1e:be:41:a5: 4b:1c:a9:3c:49:f2:ad:c0:23:a1:98:99:94:f3:15: cd:43:10:e6:f0:98:33:9a:06:2a:fb:bb:81:eb:c3: a0:80:5e:c1:e5:88:55:78:58:43:e0:a1:eb:fc:ff: 5d:10:e6:de:24:fe:51:2a:10:04:aa:d5:72:85:a1: 39:1f:5b:24:82:11:f6:d4:da:57:4b:c0:8c:cf:96: 11:1a:06:48:64:9c:72:26:cc:88:e3:22:df:62:de: da:6e:28:10:c2:ae:39:1a:c7:a9:8b:5f:d9:b2:7e: 05:24:c9:6d:1c:8a:32:0e:47:b7:cf:8f:ba:94:3f: 49:8c:f6:02:44:ea:76:a1:ce:c4:e0:a1:1f:12:68: cc:1f:bc:ea:a2:30:86:e1:ef:4d:c5:cf:48:0c:41: 62:1b:f5:a5:96:3d:05:4d:93:15:cd:07:ee:79:49: 6f:a3:39:29:2a:3f:ef:71:aa:13:47:80:c6:69:9f: 14:64:10:49:7e:a3:82:e9:fc:8e:4b:7b:4f:79:14: bf:6a:cf:8c:f4:a7:cf:b8:44:8a:f2:c2:fc:65:4e: bf:64:61:e8:5d:c3:ba:e4:26:43:38:05:42:4d:c4: 22:79:cf:73:c7:81:ae:9a:60:0c:93:e9:a8:3b:ea: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5A:24:F2:B5:DA:25:AA:32:56:A4:EF:F3:E3:FF:04:27:9E:B4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/3911522a-cd6c-31cf-b571-bacc39fadeaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:76:24:1f:fd:ce:f0:f0:f0:57:c5:81:e3:fa:87:c5:70:ea: a2:97:56:24:2e:71:fb:fc:27:90:8f:d6:b7:51:4c:af:a2:f9: bd:cc:9f:b5:7e:69:15:e6:b9:c3:79:b6:66:b3:5f:de:1b:44: 01:85:65:d8:e1:a8:d5:46:29:78:cf:f2:3e:cf:a3:48:f0:67: 65:52:ee:67:3d:08:20:7a:f5:0b:fb:6a:13:06:46:30:22:d5: 3d:0b:2e:36:82:48:cc:d5:ab:ab:98:ad:dd:2d:5c:33:c2:23: 06:75:80:bd:42:97:69:58:6d:cc:da:55:65:9c:72:d9:27:44: 53:b4:68:9c:b4:db:89:b3:16:ad:95:75:22:bd:4f:b8:7b:02: 11:0d:75:67:5f:85:53:06:59:75:69:78:8b:89:6c:de:a2:b0: a5:6d:04:10:6c:45:67:73:47:2e:91:23:8f:53:ae:e5:63:2a: 28:3c:b1:99:69:f9:1a:ed:f0:79:9b:70:e8:ca:7a:2e:fb:3a: b0:3f:6d:9e:4f:72:4e:fc:8a:c8:16:e5:5c:a1:12:16:49:cd: 4d:45:fa:49:fe:ff:2d:ec:8e:9c:11:b7:a7:e6:05:a5:e4:42: 8c:cc:e8:0e:6e:a0:4e:4b:41:97:35:0e:14:8b:71:45:1e:21: 21:e0:b2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfDbBp78p5KBkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NWZhZmQzZjktNjBmZi00OWQwLTg0NTctMDA0YjdjNjFmZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoYk5oC3vJrSxx6+QaVLHKk8SfKtwCOhmJmU 8xXNQxDm8JgzmgYq+7uB68OggF7B5YhVeFhD4KHr/P9dEObeJP5RKhAEqtVyhaE5 H1skghH21NpXS8CMz5YRGgZIZJxyJsyI4yLfYt7abigQwq45Gsepi1/Zsn4FJMlt HIoyDke3z4+6lD9JjPYCROp2oc7E4KEfEmjMH7zqojCG4e9Nxc9IDEFiG/Wllj0F TZMVzQfueUlvozkpKj/vcaoTR4DGaZ8UZBBJfqOC6fyOS3tPeRS/as+M9KfPuESK 8sL8ZU6/ZGHoXcO65CZDOAVCTcQiec9zx4GummAMk+moO+rlqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9aJPK12iWqMlak7/Pj/wQnnrRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzkxMTUyMmEtY2Q2Yy0z MWNmLWI1NzEtYmFjYzM5ZmFkZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR2JB/9zvDw8FfFgeP6h8Vw6qKXViQucfv8J5CP1rdRTK+i+b3Mn7V+ aRXmucN5tmazX94bRAGFZdjhqNVGKXjP8j7Po0jwZ2VS7mc9CCB69Qv7ahMGRjAi 1T0LLjaCSMzVq6uYrd0tXDPCIwZ1gL1Cl2lYbczaVWWcctknRFO0aJy024mzFq2V dSK9T7h7AhENdWdfhVMGWXVpeIuJbN6isKVtBBBsRWdzRy6RI49TruVjKig8sZlp +Rrt8HmbcOjKei77OrA/bZ5Pck78isgW5VyhEhZJzU1F+kn+/y3sjpwRt6fmBaXk QozM6A5uoE5LQZc1DhSLcUUeISHgstE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:27:11 2025 by rpki-client