$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa File: daab233c-3584-3069-b9e0-933500bc4f22.roa (raw, json) Hash identifier: l9Yq3eCN7ISE6yl0F95F+fRmtoKOEker+ADrSYQWejE= Subject key identifier: C6:50:02:31:50:D5:09:38:0E:55:27:9A:98:82:48:FC:2C:46:BC:74 Certificate issuer: /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75 Certificate serial: 010D0C9F4328584B3126F21E6487734A75DFA980 Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 20371 IP address blocks: 199.202.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f2:1e:64:87:73:4a:75:df:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=17da229d-e9ef-4b8f-97fa-0ab5c61e5086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:ae:55:25:64:09:d4:95:31:45:fe:fb:a3: d1:6a:38:73:88:a2:8c:25:f1:2b:40:0a:4a:3c:ca: 9b:5c:44:2f:fa:ab:a5:8a:82:66:3b:bb:01:6b:1b: d8:6c:4f:1f:d5:8b:2f:25:b3:f2:37:22:62:21:0e: 4a:b5:1e:b5:5c:85:3c:3d:42:04:de:17:48:56:0b: 22:3f:8a:6f:7f:21:f9:c7:3a:80:3a:95:de:9d:be: 68:6d:6e:93:25:1f:90:bf:98:be:0e:63:1a:2a:12: 32:3f:97:a6:20:df:a9:fd:70:41:04:fe:21:4d:af: 8d:8c:a8:a1:28:b4:5c:99:ec:43:6f:3f:11:1a:8b: 47:f6:4e:81:8e:63:f9:0f:8b:1b:2c:7c:b2:cc:e5: d7:b1:98:05:c4:f7:8a:74:0b:22:66:9f:8c:db:be: 7e:59:f9:c1:1c:0b:1a:b5:04:ce:46:99:04:c4:32: 86:fa:8d:13:49:92:98:4b:99:63:35:90:5d:f2:a1: 92:ed:ec:06:1a:75:ae:fc:78:2f:f8:3a:05:f8:82: 64:0b:ec:f2:f7:ef:1d:55:5a:ad:b5:7a:64:ca:78: 48:24:c7:a7:2c:6f:0a:56:f3:db:e2:c7:cb:64:4a: 61:47:0a:e3:8e:94:45:1b:f1:50:b3:cd:a7:ca:c7: e9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:50:02:31:50:D5:09:38:0E:55:27:9A:98:82:48:FC:2C:46:BC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl X509v3 Authority Key Identifier: keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer sbgp-ipAddrBlock: critical IPv4: 199.202.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6f:c4:45:63:0a:5e:34:7f:ba:37:21:b1:f6:da:a2:9c:5d: e8:4f:41:e6:57:25:66:de:59:2e:37:b4:ae:43:20:71:c2:e7: 18:38:c8:1e:73:40:77:7d:34:93:84:bc:7e:a3:40:e3:ac:44: 60:18:00:2b:50:9d:f6:1d:f3:4c:8a:b0:6c:aa:01:07:3c:b3: ae:8a:6f:6a:50:ea:ca:75:09:7f:c6:6c:49:bd:06:1b:da:8a: 33:bd:16:ec:41:f2:c9:33:3b:50:ca:ac:ee:d8:b3:5e:38:ed: 28:c2:9e:2f:71:c0:3e:b3:c8:06:a3:1f:7f:23:cd:ca:d3:73: 06:55:45:42:cb:78:9a:d4:93:ec:40:14:19:97:47:e8:33:60: ed:5b:ee:12:82:0b:4f:52:20:07:58:4b:64:ce:de:8d:24:9c: 21:bd:39:c0:8a:99:44:96:c6:76:06:49:f3:11:e9:3f:4e:61: 33:81:7f:70:af:d8:8b:35:e5:62:fb:de:0c:c0:6c:dc:a0:55: 17:fd:cd:65:ef:16:08:b6:0f:b5:28:eb:21:9e:d0:69:68:15: af:41:a8:99:c4:76:ef:99:ac:67:ba:49:c1:46:ab:ab:50:c3: 96:6c:9d:df:c1:a4:82:e0:76:28:ac:79:aa:2f:d4:84:98:f7: 28:c8:3d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvIeZIdzSnXfqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdiMWI0NTgtNTI2MS00ZTRhLWEwZmMtMTc1N2ZlNDYx Zjc1MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MTdkYTIyOWQtZTllZi00YjhmLTk3ZmEtMGFiNWM2MWU1MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmmuVSVkCdSVMUX++6PRajhziKKMJfErQApK PMqbXEQv+qulioJmO7sBaxvYbE8f1YsvJbPyNyJiIQ5KtR61XIU8PUIE3hdIVgsi P4pvfyH5xzqAOpXenb5obW6TJR+Qv5i+DmMaKhIyP5emIN+p/XBBBP4hTa+NjKih KLRcmexDbz8RGotH9k6BjmP5D4sbLHyyzOXXsZgFxPeKdAsiZp+M275+WfnBHAsa tQTORpkExDKG+o0TSZKYS5ljNZBd8qGS7ewGGnWu/Hgv+DoF+IJkC+zy9+8dVVqt tXpkynhIJMenLG8KVvPb4sfLZEphRwrjjpRFG/FQs82nysfpuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZQAjFQ1Qk4DlUnmpiCSPwsRrx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wN2Ix YjQ1OC01MjYxLTRlNGEtYTBmYy0xNzU3ZmU0NjFmNzUvZGFhYjIzM2MtMzU4NC0z MDY5LWI5ZTAtOTMzNTAwYmM0ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDdiMWI0NTgtNTI2MS00ZTRhLWEw ZmMtMTc1N2ZlNDYxZjc1LzA3YjFiNDU4LTUyNjEtNGU0YS1hMGZjLTE3NTdmZTQ2 MWY3NS5jcmwwHwYDVR0jBBgwFoAUk25FftjJY+6Z6C8mGj0QzhSqtq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wN2IxYjQ1OC01MjYxLTRlNGEtYTBmYy0xNzU3 ZmU0NjFmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8rYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpvxEVjCl40f7o3IbH22qKcXehPQeZXJWbeWS43tK5DIHHC5xg4yB5z QHd9NJOEvH6jQOOsRGAYACtQnfYd80yKsGyqAQc8s66Kb2pQ6sp1CX/GbEm9Bhva ijO9FuxB8skzO1DKrO7Ys1447SjCni9xwD6zyAajH38jzcrTcwZVRULLeJrUk+xA FBmXR+gzYO1b7hKCC09SIAdYS2TO3o0knCG9OcCKmUSWxnYGSfMR6T9OYTOBf3Cv 2Is15WL73gzAbNygVRf9zWXvFgi2D7Uo6yGe0GloFa9BqJnEdu+ZrGe6ScFGq6tQ w5Zsnd/BpILgdiiseaov1ISY9yjIPQU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:41:42 2025 by rpki-client