$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cc3239c5-1de9-3caf-911f-36a34a4e88e8.roa File: cc3239c5-1de9-3caf-911f-36a34a4e88e8.roa (raw, json) Hash identifier: 8JTOsCaKSc9lR4+a9uKPQNAtmvDET7BRhGmQm/IQnaE= Subject key identifier: 35:8A:56:0A:12:E8:D5:31:1D:48:FF:C9:E6:9A:D7:1F:49:22:96:16 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F4328584B2AE07DB7F734914125755C80 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cc3239c5-1de9-3caf-911f-36a34a4e88e8.roa Signing time: Fri 12 Sep 2025 07:03:58 +0000 ROA not before: Fri 12 Sep 2025 07:03:58 +0000 ROA not after: Thu 11 Dec 2025 08:03:58 +0000 asID: 400556 IP address blocks: 199.119.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:e0:7d:b7:f7:34:91:41:25:75:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Sep 12 07:03:58 2025 GMT Not After : Dec 11 08:03:58 2025 GMT Subject: CN=645bdb7d-3d47-4d58-9054-dc1f6bd14e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:cf:05:34:b1:dd:c2:71:62:34:14:8b:3f: 96:f5:e6:ef:55:16:24:35:e1:50:ea:0d:2b:07:4f: d1:4a:9d:e1:2e:d6:cb:61:71:3f:5f:d5:20:da:da: 7a:e8:a2:fd:b3:91:b4:9d:89:56:89:bf:a0:d5:ca: 3e:4e:c6:97:26:89:9a:d2:cd:61:c4:7d:7c:30:11: e4:52:e1:7f:f9:b2:d3:84:31:8f:63:e7:9f:d9:82: f3:51:bf:dc:99:04:01:6e:33:72:cf:56:1f:cf:e3: fa:e7:3a:ca:d0:05:cc:e7:26:ca:79:4c:df:c8:bf: 20:1a:86:c8:a8:af:81:4e:ca:ef:89:c2:00:7b:17: de:38:e7:5c:4c:ab:4c:eb:e2:e4:5a:3c:5e:f8:4f: 1b:ed:67:bb:1f:a0:b4:ab:8f:3d:81:b3:a3:87:2e: 39:7f:be:00:af:ea:f0:d0:ff:c9:aa:5c:c4:38:20: 0b:b3:23:92:53:80:cf:a6:50:29:53:53:01:7a:8f: f9:7c:e3:0a:84:15:d2:99:c4:b6:6d:3f:43:c0:19: a4:39:75:37:f3:85:9b:6a:98:84:46:eb:fd:13:fb: fb:d4:bc:16:e0:75:ae:af:80:bd:7f:08:d6:53:16: f5:5c:f9:bf:ca:f7:7e:b6:ef:66:3c:78:fc:5f:a6: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8A:56:0A:12:E8:D5:31:1D:48:FF:C9:E6:9A:D7:1F:49:22:96:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cc3239c5-1de9-3caf-911f-36a34a4e88e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 199.119.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1a:36:ec:18:d9:37:c2:76:94:ea:57:dd:bd:f4:85:a2:88: 28:39:d7:41:a9:d1:5b:c1:82:b2:0f:4c:76:75:12:e3:a2:94: 84:cc:f3:88:c5:1f:b6:b1:21:5d:ba:a8:92:a9:56:28:33:76: 4d:44:1d:53:dc:5b:a6:4a:29:ed:3e:ba:50:e9:eb:4d:da:39: a0:72:62:b0:44:7a:08:67:26:c4:6b:0e:a7:1c:6e:71:de:84: 0f:5d:81:2f:80:7a:42:45:db:8a:56:83:a8:96:58:b0:df:7d: f8:2f:66:cb:3e:eb:df:03:f6:4e:b2:09:52:73:59:ef:10:90: 6f:99:7f:ac:7c:97:ee:7f:dd:58:d0:5a:48:8d:04:5e:49:a8: 7e:0a:97:ed:48:9e:a7:08:72:c4:39:4c:b3:4d:2a:b7:1e:7b: 48:08:3b:45:86:fd:a7:96:1d:b4:af:0c:08:37:23:c5:c0:88: 5e:3e:c8:c8:b1:fe:c8:0e:7c:94:cf:46:12:3e:fd:4a:72:4a: 70:a1:0c:35:3e:aa:24:ab:d7:52:be:93:21:b2:f8:c6:2d:2b: 37:e9:31:84:e7:a7:de:14:90:1c:c7:50:65:a2:2f:d3:74:5c: 73:ac:d1:a0:68:a2:15:27:b2:ae:ca:60:04:0a:33:58:2d:27: ba:05:cc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsq4H239zSRQSV1XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDkxMjA3MDM1OFoXDTI1MTIxMTA4MDM1OFowLzEtMCsGA1UEAxMk NjQ1YmRiN2QtM2Q0Ny00ZDU4LTkwNTQtZGMxZjZiZDE0ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn83PBTSx3cJxYjQUiz+W9ebvVRYkNeFQ6g0r B0/RSp3hLtbLYXE/X9Ug2tp66KL9s5G0nYlWib+g1co+TsaXJoma0s1hxH18MBHk UuF/+bLThDGPY+ef2YLzUb/cmQQBbjNyz1Yfz+P65zrK0AXM5ybKeUzfyL8gGobI qK+BTsrvicIAexfeOOdcTKtM6+LkWjxe+E8b7We7H6C0q489gbOjhy45f74Ar+rw 0P/JqlzEOCALsyOSU4DPplApU1MBeo/5fOMKhBXSmcS2bT9DwBmkOXU384WbapiE Ruv9E/v71LwW4HWur4C9fwjWUxb1XPm/yvd+tu9mPHj8X6ZDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWKVgoS6NUxHUj/yeaa1x9JIpYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvY2MzMjM5YzUtMWRlOS0z Y2FmLTkxMWYtMzZhMzRhNGU4OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEaNuwY2TfCdpTqV9299IWiiCg510Gp0VvBgrIPTHZ1EuOilITM84jF H7axIV26qJKpVigzdk1EHVPcW6ZKKe0+ulDp603aOaByYrBEeghnJsRrDqccbnHe hA9dgS+AekJF24pWg6iWWLDfffgvZss+698D9k6yCVJzWe8QkG+Zf6x8l+5/3VjQ WkiNBF5JqH4Kl+1InqcIcsQ5TLNNKrcee0gIO0WG/aeWHbSvDAg3I8XAiF4+yMix /sgOfJTPRhI+/UpySnChDDU+qiSr11K+kyGy+MYtKzfpMYTnp94UkBzHUGWiL9N0 XHOs0aBoohUnsq7KYAQKM1gtJ7oFzKE= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:57 2025 by rpki-client