$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa File: 5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa (raw, json) Hash identifier: uqxXvj4OgNibJL/MzYncID9hRedIHogRnxrj2GFzhwE= Subject key identifier: 23:2D:5D:58:70:13:E2:5A:B2:9F:B6:5F:02:64:C0:0F:BD:96:C2:3A Certificate issuer: /CN=e268af9f-122d-49b0-8f39-22b20b9bb857 Certificate serial: 010D0C9F4328584B6E91F8C0220A5602ADE40A00 Authority key identifier: 9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 54975 IP address blocks: 199.66.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f8:c0:22:0a:56:02:ad:e4:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e268af9f-122d-49b0-8f39-22b20b9bb857 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=61005a57-0e80-4e7f-ba9b-d753d432d1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:af:31:80:1f:06:01:25:8c:2d:41:77:2a: 65:46:16:e4:96:79:c4:b4:61:7e:57:85:8f:05:81: 74:58:3d:ce:bd:86:ae:22:b3:2f:7c:01:dc:c0:76: 0b:85:58:80:0e:2d:48:63:63:8c:b2:10:e0:1d:27: 7e:8e:b9:81:20:8e:79:05:cb:9b:e8:2f:69:0c:fc: e5:6c:80:aa:ab:eb:96:e6:99:06:38:35:5a:ea:4a: 9d:6d:3a:df:e0:3a:04:a6:a4:48:2e:80:59:37:80: 38:0b:19:f9:a0:55:17:c4:fb:47:ef:55:57:c8:9b: d6:9e:49:ea:5d:c4:4f:9e:f4:6a:e4:f2:1f:73:8c: f2:dc:40:53:f3:7a:4a:41:d9:b7:1f:b1:6f:e5:27: 10:2c:2c:17:d3:ae:74:91:e2:77:8c:71:39:4b:1f: 77:20:21:cf:d8:e6:b7:42:ee:55:e0:f7:b7:a7:ba: aa:eb:ce:15:91:41:6d:cb:3c:fd:02:ee:fc:de:3c: 41:4a:65:67:07:1f:d4:2f:5b:35:3d:ed:e7:ba:a2: 00:41:01:4d:f2:f7:fd:6d:e9:31:88:a8:ae:ef:a3: 07:6e:ca:50:81:f4:8b:d0:20:93:63:d1:73:21:a4: bb:bf:96:e2:92:90:97:e4:db:c1:73:26:b5:63:52: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:5D:58:70:13:E2:5A:B2:9F:B6:5F:02:64:C0:0F:BD:96:C2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl X509v3 Authority Key Identifier: keyid:9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer sbgp-ipAddrBlock: critical IPv4: 199.66.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e7:9d:b2:66:6d:24:28:75:5b:d9:e2:45:8f:91:3f:64:12: 69:fe:d8:56:3d:79:96:96:ef:f9:e6:65:2b:6a:98:c7:8b:f9: 9b:f2:c0:d8:ab:bf:07:a8:4a:64:2c:0d:44:7f:a4:b7:c4:69: 55:74:b1:ad:17:81:aa:23:5c:98:b9:51:e4:97:33:2e:a4:a6: 55:e2:f0:34:5c:0f:f5:10:ab:b3:3a:5a:62:d3:47:4a:aa:d6: 4d:02:f4:10:6e:29:71:e5:44:bc:2c:b8:14:ab:ab:a3:69:33: 65:a0:41:58:12:79:35:26:c0:af:69:7b:d5:3f:5f:d3:fe:5b: 26:8e:cf:7b:78:3b:4d:33:b3:27:91:37:11:8d:6d:dd:b9:1c: b6:a1:a8:c2:43:e3:b4:73:c0:0e:2f:b3:1e:d0:9b:ef:8b:05: ad:ac:32:25:d4:51:7f:31:b9:c2:62:3d:40:5f:b4:6e:f4:7b: f7:00:7c:9c:23:2d:99:9c:13:b7:15:d5:bc:31:32:ee:55:26: 3d:d4:5b:a2:87:c2:ca:48:1a:ed:6e:a9:d1:11:c7:d9:56:0b: ac:40:86:6d:11:08:a6:d7:09:db:96:9a:d3:03:e3:70:09:31: b4:7d:72:5e:39:b1:32:38:f2:91:29:61:38:fc:ee:9e:9f:fb: 46:ca:d7:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfjAIgpWAq3kCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTI2OGFmOWYtMTIyZC00OWIwLThmMzktMjJiMjBiOWJi ODU3MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjEwMDVhNTctMGU4MC00ZTdmLWJhOWItZDc1M2Q0MzJkMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsWvMYAfBgEljC1BdyplRhbklnnEtGF+V4WP BYF0WD3OvYauIrMvfAHcwHYLhViADi1IY2OMshDgHSd+jrmBII55Bcub6C9pDPzl bICqq+uW5pkGODVa6kqdbTrf4DoEpqRILoBZN4A4Cxn5oFUXxPtH71VXyJvWnknq XcRPnvRq5PIfc4zy3EBT83pKQdm3H7Fv5ScQLCwX0650keJ3jHE5Sx93ICHP2Oa3 Qu5V4Pe3p7qq684VkUFtyzz9Au783jxBSmVnBx/UL1s1Pe3nuqIAQQFN8vf9bekx iKiu76MHbspQgfSL0CCTY9FzIaS7v5bikpCX5NvBcya1Y1Ke9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMtXVhwE+Jasp+2XwJkwA+9lsI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMjY4 YWY5Zi0xMjJkLTQ5YjAtOGYzOS0yMmIyMGI5YmI4NTcvNWFhMmZhZDktNDFmZS0z NjkzLWE1ZGUtNmFjMGRlYjM5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTI2OGFmOWYtMTIyZC00OWIwLThm MzktMjJiMjBiOWJiODU3L2UyNjhhZjlmLTEyMmQtNDliMC04ZjM5LTIyYjIwYjli Yjg1Ny5jcmwwHwYDVR0jBBgwFoAUn1tIdcYrgoq6HlfOLWzZ5pkT9VowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMjY4YWY5Zi0xMjJkLTQ5YjAtOGYzOS0yMmIy MGI5YmI4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0LeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFznnbJmbSQodVvZ4kWPkT9kEmn+2FY9eZaW7/nmZStqmMeL+ZvywNir vweoSmQsDUR/pLfEaVV0sa0XgaojXJi5UeSXMy6kplXi8DRcD/UQq7M6WmLTR0qq 1k0C9BBuKXHlRLwsuBSrq6NpM2WgQVgSeTUmwK9pe9U/X9P+WyaOz3t4O00zsyeR NxGNbd25HLahqMJD47RzwA4vsx7Qm++LBa2sMiXUUX8xucJiPUBftG70e/cAfJwj LZmcE7cV1bwxMu5VJj3UW6KHwspIGu1uqdERx9lWC6xAhm0RCKbXCduWmtMD43AJ MbR9cl45sTI48pEpYTj87p6f+0bK110= -----END CERTIFICATE-----Generated at Fri Oct 10 03:56:58 2025 by rpki-client