$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa File: c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa (raw, json) Hash identifier: sv0Kwph9bQKGYDKy4tmz3hV1ezt98645MLY4YgX8a5k= Subject key identifier: 52:90:D1:8A:7E:B9:60:E9:82:90:62:A4:DC:F2:FB:8F:28:3F:85:E2 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584B3F1C57C985A2D819EB585620 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 46970 IP address blocks: 199.242.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:57:c9:85:a2:d8:19:eb:58:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=a5c29ab0-9315-475d-8fc0-a4ee0930d971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:51:0d:eb:2f:c0:ca:2c:83:f9:9f:d3:db: a0:b2:41:e9:b5:36:b2:d8:c0:29:d5:0f:22:38:07: 97:81:94:6c:4d:c2:7a:f5:17:7b:42:35:c8:05:43: 8f:eb:c3:fc:6f:d3:52:17:0b:70:21:ed:92:d3:36: e3:28:2b:27:fc:7d:75:5d:f4:91:68:35:bf:5d:bc: 63:58:2e:b4:35:2e:96:43:31:68:b2:ff:0e:e2:40: 0f:0c:60:3e:43:58:a8:b0:f2:8d:03:be:80:e8:29: 67:db:0a:5e:e9:0b:3b:1b:fe:35:2a:a7:e8:b8:5d: 99:04:e2:9a:b1:8a:eb:31:e6:51:26:4f:c4:5e:2c: c7:9f:16:d6:04:64:20:09:8d:7b:c0:61:80:dd:02: 56:14:17:04:79:4f:72:f7:86:90:bb:23:a6:59:97: 52:21:ee:68:ca:c9:1a:67:02:1d:9a:21:d3:3a:39: ad:69:23:16:49:d3:6e:84:f4:a1:47:f4:f5:79:5f: 8f:ec:ec:df:d4:c4:ba:57:0b:38:b5:ad:8e:86:bc: ea:6e:09:13:a2:24:56:f1:18:06:b8:1c:0f:af:84: 65:f5:57:75:61:50:f0:a3:6b:b4:d0:a3:4e:3b:06: e5:a2:fc:bf:2b:22:ee:0c:30:03:31:0e:db:c2:c3: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:D1:8A:7E:B9:60:E9:82:90:62:A4:DC:F2:FB:8F:28:3F:85:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 199.242.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:35:12:0c:fb:75:cf:f2:ef:7d:eb:5a:34:7a:09:d2:a1:9f: 90:a4:2a:fe:9b:5a:3c:6f:4d:55:63:6b:98:96:2e:6b:70:ba: 51:28:2c:3c:14:56:19:a0:a3:6a:17:0d:f4:1f:e1:c0:fd:bf: 47:06:b2:f6:99:dc:f4:a2:23:5a:4b:dd:5d:82:e4:40:18:eb: a3:ce:b7:4a:ef:aa:2f:64:a3:20:c5:b7:e9:35:63:2b:a4:74: ea:dd:85:62:d9:9e:0a:fc:4a:8c:d6:a0:bd:c8:48:ec:40:7c: 1d:53:87:ca:c8:1b:81:30:e3:30:49:45:8a:28:31:30:cd:32: 4d:52:21:a4:aa:d1:fd:1d:92:de:50:da:54:37:5d:26:78:71: 5f:c7:a1:f1:be:3b:40:53:80:36:e6:13:75:72:9a:6a:64:6f: a6:b6:67:a2:75:38:e7:c3:7e:9f:5a:a0:4e:fa:aa:03:5d:59: f6:9c:47:d4:ca:5d:a6:61:67:f3:3a:c1:c1:4f:6c:c8:47:62: 18:1d:f8:75:3d:f4:c1:aa:3b:d6:ac:0e:d5:50:5d:a6:a3:19: da:ab:95:14:b8:e9:78:aa:c7:26:70:2c:4c:05:ac:e7:2a:78: f3:e6:f1:7d:ad:97:92:2c:6d:3d:16:0d:9a:c3:d6:bc:d3:3d: 4c:b9:fa:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFfJhaLYGetYViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk YTVjMjlhYjAtOTMxNS00NzVkLThmYzAtYTRlZTA5MzBkOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaVRDesvwMosg/mf09ugskHptTay2MAp1Q8i OAeXgZRsTcJ69Rd7QjXIBUOP68P8b9NSFwtwIe2S0zbjKCsn/H11XfSRaDW/Xbxj WC60NS6WQzFosv8O4kAPDGA+Q1iosPKNA76A6Cln2wpe6Qs7G/41KqfouF2ZBOKa sYrrMeZRJk/EXizHnxbWBGQgCY17wGGA3QJWFBcEeU9y94aQuyOmWZdSIe5oyska ZwIdmiHTOjmtaSMWSdNuhPShR/T1eV+P7Ozf1MS6Vws4ta2OhrzqbgkToiRW8RgG uBwPr4Rl9Vd1YVDwo2u00KNOOwblovy/KyLuDDADMQ7bwsMKHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKQ0Yp+uWDpgpBipNzy+48oP4XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvYzhjMDZlZGItYjBjZi0z NDA1LTlkNjItOTEyMzNhMmJmY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw1Egz7dc/y733rWjR6CdKhn5CkKv6bWjxvTVVja5iWLmtwulEoLDwU Vhmgo2oXDfQf4cD9v0cGsvaZ3PSiI1pL3V2C5EAY66POt0rvqi9koyDFt+k1Yyuk dOrdhWLZngr8SozWoL3ISOxAfB1Th8rIG4Ew4zBJRYooMTDNMk1SIaSq0f0dkt5Q 2lQ3XSZ4cV/HofG+O0BTgDbmE3Vymmpkb6a2Z6J1OOfDfp9aoE76qgNdWfacR9TK XaZhZ/M6wcFPbMhHYhgd+HU99MGqO9asDtVQXaajGdqrlRS46XiqxyZwLEwFrOcq ePPm8X2tl5IsbT0WDZrD1rzTPUy5+nw= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:15 2025 by rpki-client