$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa File: 90774b9d-bc67-3fb5-969b-6254017ec651.roa (raw, json) Hash identifier: AYlugJcJr2eZyLndl/JJrajgyZlSZX+MVfAUAW4ilw4= Subject key identifier: F4:1C:4E:C9:34:70:E5:C5:B6:7E:90:4D:03:EB:73:39:B6:A8:81:21 Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584B2CF6E811778346349E9E9CC0 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 31972 IP address blocks: 199.101.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e8:11:77:83:46:34:9e:9e:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=1d3bfe9b-c744-4a67-b797-9fe9b2449495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:a9:89:30:98:1b:12:d4:4f:c0:3e:de:69: b4:2f:01:0d:ba:06:f0:5c:9c:29:bb:20:ed:79:f1: ed:b1:92:e0:54:82:fc:1d:83:9b:b6:89:7d:c7:d7: 39:4d:13:59:77:28:e7:29:b0:eb:72:87:5f:4c:07: 9c:3e:48:e8:1a:97:09:7b:9c:2a:3e:30:05:3c:d8: 8a:dd:2c:f5:74:5d:5c:6b:a7:04:90:1b:d9:63:f3: 76:2d:2a:3a:60:8c:5b:63:c0:c8:76:84:6e:7e:30: 1c:e1:82:f2:a5:c3:49:bb:ca:38:a9:83:28:0d:7c: ad:03:bf:82:7a:5f:ce:c9:6e:a4:f4:10:70:9f:48: a5:3a:a7:44:af:6f:61:e8:cb:0c:11:d3:bd:06:d4: 1a:d5:4c:fe:f5:8e:b3:e2:13:99:eb:e8:f0:ba:da: 5f:10:8b:1b:84:4f:30:89:5d:ff:0c:02:58:cf:06: f8:87:bb:6f:36:9c:1a:51:24:25:ec:d7:ac:8f:be: 19:ef:2a:e0:ca:1c:2a:39:81:d1:f2:d7:2c:77:5f: 3c:58:e2:6c:95:60:4a:95:69:86:31:3a:00:d1:de: 16:02:13:5f:96:c5:0e:07:6e:75:dd:44:8e:71:2d: b6:0a:99:91:97:a9:f4:4f:4a:72:25:6f:39:ac:1a: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:4E:C9:34:70:E5:C5:B6:7E:90:4D:03:EB:73:39:B6:A8:81:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv4: 199.101.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2d:cb:1e:a7:70:f7:25:a5:c6:1d:c5:71:96:c2:bd:44:a4: 8f:44:27:24:ec:65:4d:55:2e:c4:0f:94:03:36:ac:f0:14:7d: fd:1b:41:eb:3f:3a:2d:c3:cd:28:f9:24:12:0a:a7:fa:b9:2e: c0:c8:38:bb:2c:a0:b3:8d:37:46:06:ba:37:f4:c1:ca:c7:3e: 72:7a:40:7b:fb:96:11:0e:1c:1f:a7:10:83:1f:f6:54:17:c6: a5:00:fd:c3:bf:17:48:77:ae:74:86:1f:41:0e:55:74:29:78: 67:c4:f9:31:ca:19:fc:ae:f9:dc:12:7c:c7:c0:c0:1b:8b:e6: 9a:cd:7f:2a:c9:14:a5:e1:63:6e:51:6c:57:9f:fb:2a:2a:3e: 90:76:59:8e:ae:2d:e4:50:71:8c:c1:07:7d:38:f3:f0:71:21: 44:97:ef:c8:ae:a8:4e:98:f8:61:f2:ae:20:8c:20:3f:f9:f3: 0e:78:9b:c8:f9:56:b6:fe:89:da:4c:19:b4:73:3c:e6:8d:d2: d1:5a:81:dd:76:d6:b9:49:f6:2f:8b:52:17:46:5c:9e:05:3b: 66:4e:ad:2f:09:ba:3b:a8:87:f7:43:c9:39:bd:76:0d:fc:5c: db:fe:bc:eb:16:88:d9:da:68:88:ee:60:a6:6d:ed:c2:05:0a: 96:e2:24:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ugRd4NGNJ6enMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MWQzYmZlOWItYzc0NC00YTY3LWI3OTctOWZlOWIyNDQ5NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6piTCYGxLUT8A+3mm0LwENugbwXJwpuyDt efHtsZLgVIL8HYObtol9x9c5TRNZdyjnKbDrcodfTAecPkjoGpcJe5wqPjAFPNiK 3Sz1dF1ca6cEkBvZY/N2LSo6YIxbY8DIdoRufjAc4YLypcNJu8o4qYMoDXytA7+C el/OyW6k9BBwn0ilOqdEr29h6MsMEdO9BtQa1Uz+9Y6z4hOZ6+jwutpfEIsbhE8w iV3/DAJYzwb4h7tvNpwaUSQl7Nesj74Z7yrgyhwqOYHR8tcsd188WOJslWBKlWmG MToA0d4WAhNflsUOB2513USOcS22CpmRl6n0T0pyJW85rBo9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQcTsk0cOXFtn6QTQPrczm2qIEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvOTA3NzRiOWQtYmM2Ny0z ZmI1LTk2OWItNjI1NDAxN2VjNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQtyx6ncPclpcYdxXGWwr1EpI9EJyTsZU1VLsQPlAM2rPAUff0bQes/ Oi3DzSj5JBIKp/q5LsDIOLssoLONN0YGujf0wcrHPnJ6QHv7lhEOHB+nEIMf9lQX xqUA/cO/F0h3rnSGH0EOVXQpeGfE+THKGfyu+dwSfMfAwBuL5prNfyrJFKXhY25R bFef+yoqPpB2WY6uLeRQcYzBB3048/BxIUSX78iuqE6Y+GHyriCMID/58w54m8j5 Vrb+idpMGbRzPOaN0tFagd121rlJ9i+LUhdGXJ4FO2ZOrS8Jujuoh/dDyTm9dg38 XNv+vOsWiNnaaIjuYKZt7cIFCpbiJLM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:13:25 2025 by rpki-client