$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bccde0d7-5711-35f4-ab23-72b6c4de3c52.roa File: bccde0d7-5711-35f4-ab23-72b6c4de3c52.roa (raw, json) Hash identifier: aOzWsvppBirn6fq6jXse4KE9XJYMSG7c5BICLo+E2ho= Subject key identifier: 61:FB:B4:89:61:FF:EF:A4:5F:BA:F4:6E:BD:F6:B8:57:29:E9:D0:29 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584B2A2C55379529CBF3F3335420 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bccde0d7-5711-35f4-ab23-72b6c4de3c52.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 152868 IP address blocks: 199.101.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:55:37:95:29:cb:f3:f3:33:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d7143b5b-4a2e-4527-aecc-64bb72018b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:94:00:e2:ec:bf:47:0e:73:78:9c:3b:9d: 4a:37:e2:65:5d:d5:7b:96:62:3f:97:61:1f:c7:71: 70:30:2d:a0:e6:82:19:2c:39:ca:e5:c3:0e:71:68: b9:a7:66:b7:96:60:4e:28:c1:f8:ce:6e:17:d1:2a: 56:86:d3:06:3f:70:ad:0d:5e:7e:69:c4:44:c9:a2: 4b:26:0e:e9:d9:07:d6:3e:c7:0d:9f:5f:99:34:63: a3:1a:40:8b:39:e6:0d:67:41:78:fd:1b:79:56:9c: 05:ff:fc:06:b9:d3:3f:5c:cc:39:96:1a:6a:33:33: 73:ba:a9:a1:2c:05:90:6d:07:0a:1b:92:11:07:bc: 79:1f:b7:b4:d7:3b:bc:e0:88:dd:ee:d1:92:cb:e9: e9:af:d1:3f:c6:84:d4:85:6c:ba:93:1f:83:a6:c3: ec:3e:8f:9f:f7:20:36:37:90:de:95:97:1d:c6:e0: 19:be:3c:12:5d:e9:88:8c:7a:fd:3c:83:54:a4:e4: b2:a7:14:10:0d:30:ab:a7:48:0e:6e:90:1c:cc:41: 0a:5c:8d:12:d3:75:5b:9f:91:6e:ac:5c:6e:5c:b2: 5f:aa:fa:9f:3b:8e:be:6e:48:24:43:2d:4a:5d:cc: c4:0c:ac:45:a4:12:1d:8b:53:f0:4b:a8:2a:9e:d2: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FB:B4:89:61:FF:EF:A4:5F:BA:F4:6E:BD:F6:B8:57:29:E9:D0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bccde0d7-5711-35f4-ab23-72b6c4de3c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d3:b4:30:4b:cb:10:1c:c2:29:9c:3c:ef:1d:7f:4d:b7:e0: ca:72:20:ae:ca:0c:ca:bc:34:43:93:e7:1a:1f:37:6e:1b:1f: 42:b4:fd:b0:a5:a1:44:10:73:b0:84:9a:db:80:fe:c4:a2:b8: 14:89:4d:34:27:33:45:de:74:30:65:89:35:2a:86:c9:62:80: a3:61:05:17:b1:76:ea:81:42:3b:7c:32:a7:8c:ab:5d:63:84: 08:70:88:28:df:38:dd:a1:7c:f2:81:f6:d5:70:1b:b8:2d:11: 81:8a:83:8f:26:3b:37:d6:46:9f:58:06:83:d2:32:e2:18:1e: 2f:02:04:76:57:d1:ed:72:15:24:4f:34:67:4c:df:bd:82:2a: 6c:08:04:d3:e5:4c:e7:2a:2c:05:d7:d0:fb:bb:7d:10:b7:e4: 72:36:88:8e:7e:37:fb:3a:9c:49:a6:56:f3:ce:8f:64:75:52: 72:11:3e:2d:c5:3b:49:71:f2:f4:a0:ba:cf:ea:47:f4:03:fb: be:f6:d4:88:a2:d1:89:ae:02:d2:4d:4f:6c:88:f1:20:ed:10: 39:af:c7:c5:78:ef:d4:fd:a3:3e:eb:56:06:80:88:00:f1:61: 85:3b:72:79:28:b6:c3:06:7b:63:03:fc:d6:cd:c9:20:e4:66: e0:3d:e7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLFU3lSnL8/MzVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDcxNDNiNWItNGEyZS00NTI3LWFlY2MtNjRiYjcyMDE4YjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszeUAOLsv0cOc3icO51KN+JlXdV7lmI/l2Ef x3FwMC2g5oIZLDnK5cMOcWi5p2a3lmBOKMH4zm4X0SpWhtMGP3CtDV5+acREyaJL Jg7p2QfWPscNn1+ZNGOjGkCLOeYNZ0F4/Rt5VpwF//wGudM/XMw5lhpqMzNzuqmh LAWQbQcKG5IRB7x5H7e01zu84Ijd7tGSy+npr9E/xoTUhWy6kx+DpsPsPo+f9yA2 N5DelZcdxuAZvjwSXemIjHr9PINUpOSypxQQDTCrp0gObpAczEEKXI0S03Vbn5Fu rFxuXLJfqvqfO46+bkgkQy1KXczEDKxFpBIdi1PwS6gqntJJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH7tIlh/++kX7r0br32uFcp6dApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYmNjZGUwZDctNTcxMS0z NWY0LWFiMjMtNzJiNmM0ZGUzYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/TtDBLyxAcwimcPO8df0234MpyIK7KDMq8NEOT5xofN24bH0K0/bCl oUQQc7CEmtuA/sSiuBSJTTQnM0XedDBliTUqhsligKNhBRexduqBQjt8MqeMq11j hAhwiCjfON2hfPKB9tVwG7gtEYGKg48mOzfWRp9YBoPSMuIYHi8CBHZX0e1yFSRP NGdM372CKmwIBNPlTOcqLAXX0Pu7fRC35HI2iI5+N/s6nEmmVvPOj2R1UnIRPi3F O0lx8vSgus/qR/QD+7721Iii0YmuAtJNT2yI8SDtEDmvx8V479T9oz7rVgaAiADx YYU7cnkotsMGe2MD/NbNySDkZuA95wQ= -----END CERTIFICATE-----Generated at Thu Oct 9 06:19:22 2025 by rpki-client