$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/3ee2c767-f1ef-3b7b-bb24-670f14156d00.roa File: 3ee2c767-f1ef-3b7b-bb24-670f14156d00.roa (raw, json) Hash identifier: kvovJ+Xsi2LG3acBQHhOn2TsNS6YoMF3JzCnKXJDGMQ= Subject key identifier: 3C:4E:CA:AC:9C:4A:97:4A:87:3A:78:27:A2:14:58:F0:9B:5C:75:C3 Certificate issuer: /CN=a32aa006-ef22-4905-8c82-2651c19859b9 Certificate serial: 010D0C9F4328584B2066D838B4696337F24FED40 Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/3ee2c767-f1ef-3b7b-bb24-670f14156d00.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 19350 IP address blocks: 199.212.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d8:38:b4:69:63:37:f2:4f:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b2af3cad-dcb1-4b2f-ba80-a326c4f14c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:84:f6:f8:27:08:f1:6e:c5:65:33:15:3d: ba:3c:56:53:5a:2b:7e:05:06:14:e5:00:4f:86:78: 3e:0f:ca:40:ec:f0:8d:f2:21:c3:42:ae:77:6e:99: 4c:d0:9c:7f:e2:00:a6:2e:ed:5d:9b:75:58:f3:ad: 7e:f6:b0:fb:cb:f3:d9:58:72:23:02:aa:4e:1c:48: 03:67:17:28:61:6d:e2:f8:e2:77:0e:b4:a9:77:59: 4f:b5:5c:d5:b4:7b:64:e0:83:19:ec:bc:d5:db:95: 13:66:f9:af:d8:d4:ab:73:f4:ac:0f:29:a0:9e:eb: b1:cd:54:c6:8d:ef:47:b1:52:8b:cb:1b:45:50:fb: 99:69:c4:16:f5:dc:34:1d:f0:d5:06:a9:50:76:2f: 9b:76:d8:c5:4c:55:3b:c8:65:22:e8:ac:95:4a:95: 93:eb:0b:50:f4:fd:ca:a7:a1:38:1d:df:4a:d6:0d: e1:fb:85:76:86:0e:a0:38:62:cf:7d:75:1a:2f:e1: 9f:96:b5:1b:bc:c5:bf:cc:0a:20:4d:68:d8:0e:2d: 4c:f1:31:1e:f5:11:ff:00:8f:f0:b0:a7:20:9b:73: 69:27:74:ef:f0:4a:cf:28:4a:09:1f:4f:31:5e:38: 7e:f5:43:60:7f:ab:41:64:53:cf:0d:34:71:55:4b: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:CA:AC:9C:4A:97:4A:87:3A:78:27:A2:14:58:F0:9B:5C:75:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/3ee2c767-f1ef-3b7b-bb24-670f14156d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl X509v3 Authority Key Identifier: keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer sbgp-ipAddrBlock: critical IPv4: 199.212.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:22:7c:51:d5:59:2b:25:7b:7b:92:0f:3b:0a:88:88:0e:6e: c2:ac:34:77:84:ef:16:da:17:96:02:6f:3f:57:98:ff:dc:63: 44:0f:8a:42:89:07:45:01:68:f2:51:df:c3:6f:9f:92:d3:e3: a3:35:83:be:7d:27:f7:d5:75:77:ba:37:19:e9:15:fa:14:f5: b6:65:c7:6c:4e:e8:5c:85:79:49:16:65:71:60:d3:64:10:89: 8f:ac:1c:bc:88:d5:a5:37:cf:b4:a5:b7:6d:1b:11:fb:3e:4d: 2d:91:a0:b5:4d:3d:81:59:8e:c0:24:f2:19:4e:12:92:bc:0e: a3:56:8c:84:ea:2a:9e:06:3f:5c:8a:f8:0a:97:92:8d:c6:0e: 25:30:f3:e5:f6:80:5c:75:ce:57:b8:5c:59:de:ae:55:cb:72: ca:c5:a9:0c:16:ae:d0:03:a4:68:68:00:1f:24:31:3c:a9:73: ee:02:9e:83:24:08:bd:52:5f:2c:56:9d:2f:2b:fd:e2:6d:0e: 82:34:7b:29:15:80:77:a0:af:b0:8d:72:1e:82:52:10:d4:5f: 4a:39:ec:f8:2e:d9:a0:fc:43:35:f1:af:8d:0a:50:ba:55:3a: 9f:dc:33:ce:31:c7:19:2d:c5:6c:41:27:2d:c0:21:d3:22:cb: df:ae:48:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtg4tGljN/JP7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYWEwMDYtZWYyMi00OTA1LThjODItMjY1MWMxOTg1 OWI5MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjJhZjNjYWQtZGNiMS00YjJmLWJhODAtYTMyNmM0ZjE0YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0geE9vgnCPFuxWUzFT26PFZTWit+BQYU5QBP hng+D8pA7PCN8iHDQq53bplM0Jx/4gCmLu1dm3VY861+9rD7y/PZWHIjAqpOHEgD ZxcoYW3i+OJ3DrSpd1lPtVzVtHtk4IMZ7LzV25UTZvmv2NSrc/SsDymgnuuxzVTG je9HsVKLyxtFUPuZacQW9dw0HfDVBqlQdi+bdtjFTFU7yGUi6KyVSpWT6wtQ9P3K p6E4Hd9K1g3h+4V2hg6gOGLPfXUaL+GflrUbvMW/zAogTWjYDi1M8TEe9RH/AI/w sKcgm3NpJ3Tv8ErPKEoJH08xXjh+9UNgf6tBZFPPDTRxVUuJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxOyqycSpdKhzp4J6IUWPCbXHXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJh YTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5ODU5YjkvM2VlMmM3NjctZjFlZi0z YjdiLWJiMjQtNjcwZjE0MTU2ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTMyYWEwMDYtZWYyMi00OTA1LThj ODItMjY1MWMxOTg1OWI5L2EzMmFhMDA2LWVmMjItNDkwNS04YzgyLTI2NTFjMTk4 NTliOS5jcmwwHwYDVR0jBBgwFoAUGrFG1onIkxMYcuWM1qGomay6nk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUx YzE5ODU5YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkifFHVWSsle3uSDzsKiIgObsKsNHeE7xbaF5YCbz9XmP/cY0QPikKJ B0UBaPJR38Nvn5LT46M1g759J/fVdXe6NxnpFfoU9bZlx2xO6FyFeUkWZXFg02QQ iY+sHLyI1aU3z7Slt20bEfs+TS2RoLVNPYFZjsAk8hlOEpK8DqNWjITqKp4GP1yK +AqXko3GDiUw8+X2gFx1zle4XFnerlXLcsrFqQwWrtADpGhoAB8kMTypc+4CnoMk CL1SXyxWnS8r/eJtDoI0eykVgHegr7CNch6CUhDUX0o57Pgu2aD8QzXxr40KULpV Op/cM84xxxktxWxBJy3AIdMiy9+uSLY= -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:08 2025 by rpki-client