$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa File: ff3090a6-0365-3319-a5db-b97f2065e36d.roa (raw, json) Hash identifier: Lzo6EKs9zfZLDLqci/ylpzWDGrfMtORH9YnbffbIMCc= Subject key identifier: D2:04:B7:13:A8:02:BB:76:39:49:F2:B4:16:D6:3C:7F:A3:AF:7F:32 Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F4328584B609C8D3A9966DF77C5503A80 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 26677 IP address blocks: 172.99.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8d:3a:99:66:df:77:c5:50:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=b4b82a47-4a19-4f9f-8d52-394e434c8230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:8a:90:b4:e7:3d:b2:eb:e2:75:65:92:be: 69:13:a0:1c:ed:bf:fe:94:ef:70:3b:46:3c:3f:7a: d5:d6:27:9e:e8:44:fc:39:cd:c1:1c:52:23:37:a8: 5a:c5:4f:7a:90:7b:fa:cc:97:de:fc:08:0a:d4:1a: 70:75:53:56:c8:53:ed:35:b9:a3:96:e5:67:f0:9b: 01:1a:31:d5:54:d9:e3:2d:0e:6b:6a:f7:c0:4a:f4: 74:78:92:bb:49:67:f5:da:ee:b6:8a:44:22:7f:8b: 25:7a:7f:ba:e5:a6:1f:bc:20:59:4e:8f:7c:78:8e: 8a:40:83:c0:e1:38:32:a8:23:a7:26:15:e5:8e:86: 82:b4:d5:df:2c:10:08:2e:c7:27:5b:c6:f4:89:3f: 1f:45:08:ab:c2:f7:98:25:3c:4b:ea:80:ac:e2:f9: 2e:3a:6c:b3:05:10:74:a1:4a:07:e7:be:67:a9:86: b4:4f:83:50:fd:39:7b:f5:70:ae:14:2b:af:94:06: ed:51:4e:3e:ec:92:79:0a:4a:0d:b6:9d:62:3e:3c: d1:1c:08:7b:93:cb:f3:af:ff:f5:71:e0:41:ea:50: de:23:df:96:1c:13:3d:ab:3f:73:9a:b9:58:26:f1: 3a:13:7b:f0:0f:b1:bb:21:a9:b6:36:97:10:ac:6e: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:B7:13:A8:02:BB:76:39:49:F2:B4:16:D6:3C:7F:A3:AF:7F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv4: 172.99.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6c:9a:76:7a:db:3a:60:6f:f5:ad:d4:93:6b:83:ec:2c:d4: da:73:76:9c:cc:9c:4f:a7:74:1b:0e:38:93:c8:a2:5f:56:e7: bf:57:37:9e:38:ad:78:69:ee:4f:51:d5:8a:91:03:f4:8b:ef: d5:11:32:f9:85:d1:cd:5b:0d:eb:5c:98:ff:9d:d9:3d:3c:b0: 22:82:dd:60:fa:bb:4b:74:d3:0d:f3:50:ee:f7:13:0a:2b:f0: 9a:93:ac:d8:4f:7f:df:f0:04:9b:50:55:f7:4a:7c:2c:da:d7: a9:e8:4e:82:01:6e:08:9f:b6:47:11:6b:81:7f:0c:3e:48:05: 65:f8:fd:e7:74:67:5a:93:d9:90:5b:2a:ec:d6:a1:7d:c2:29: f8:e8:25:9b:67:df:33:40:23:2f:4c:cb:a2:c0:15:68:d7:40: 78:40:52:9f:1a:08:44:57:af:3f:f6:7f:48:8d:c1:26:70:62: f0:a2:f6:97:84:42:72:dd:f0:41:d2:3e:a9:0a:d0:a2:5b:26: ca:ec:94:de:36:16:31:1a:a5:71:64:1b:25:65:31:1e:8e:46: 91:71:ce:48:74:6a:df:1b:3d:b4:a4:eb:36:42:81:cc:df:98: ab:d5:53:36:ab:76:68:51:81:d8:46:e2:f1:30:c4:cc:0e:4b: 87:bf:9f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI06mWbfd8VQOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YjRiODJhNDctNGExOS00ZjlmLThkNTItMzk0ZTQzNGM4MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUaKkLTnPbLr4nVlkr5pE6Ac7b/+lO9wO0Y8 P3rV1iee6ET8Oc3BHFIjN6haxU96kHv6zJfe/AgK1BpwdVNWyFPtNbmjluVn8JsB GjHVVNnjLQ5ravfASvR0eJK7SWf12u62ikQif4slen+65aYfvCBZTo98eI6KQIPA 4TgyqCOnJhXljoaCtNXfLBAILscnW8b0iT8fRQirwveYJTxL6oCs4vkuOmyzBRB0 oUoH575nqYa0T4NQ/Tl79XCuFCuvlAbtUU4+7JJ5CkoNtp1iPjzRHAh7k8vzr//1 ceBB6lDeI9+WHBM9qz9zmrlYJvE6E3vwD7G7Iam2NpcQrG5BOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIEtxOoArt2OUnytBbWPH+jr38yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZmYzMDkwYTYtMDM2NS0z MzE5LWE1ZGItYjk3ZjIwNjVlMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpsmnZ62zpgb/Wt1JNrg+ws1NpzdpzMnE+ndBsOOJPIol9W579XN544 rXhp7k9R1YqRA/SL79URMvmF0c1bDetcmP+d2T08sCKC3WD6u0t00w3zUO73Ewor 8JqTrNhPf9/wBJtQVfdKfCza16noToIBbgiftkcRa4F/DD5IBWX4/ed0Z1qT2ZBb KuzWoX3CKfjoJZtn3zNAIy9My6LAFWjXQHhAUp8aCERXrz/2f0iNwSZwYvCi9peE QnLd8EHSPqkK0KJbJsrslN42FjEapXFkGyVlMR6ORpFxzkh0at8bPbSk6zZCgczf mKvVUzardmhRgdhG4vEwxMwOS4e/n6A= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:38 2025 by rpki-client