$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa File: d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa (raw, json) Hash identifier: 0/gwwsDB1/w/VoBa2jdHKY5Ru0DdUCubfWsP8YpqNHs= Subject key identifier: D0:63:ED:95:A8:25:BA:B2:1D:56:72:33:E9:2C:85:1B:7B:90:DF:A3 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584B328C43D0C00C8837510D8D40 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 399045 IP address blocks: 199.204.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:43:d0:c0:0c:88:37:51:0d:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=6af3855f-271f-4263-a0d2-0e232a90b24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b8:db:6a:79:52:aa:05:80:4d:8e:9b:e2:28: d4:59:6b:c0:97:f6:b3:1e:9e:86:2d:cf:f3:f3:6d: 65:b8:f8:2d:87:7b:91:87:35:3d:5c:a2:02:00:d4: 7a:1a:b7:7a:22:e1:52:b9:23:6e:24:7f:21:77:45: c8:bc:c0:39:e0:17:44:91:39:cd:d7:50:10:8b:97: 01:ce:9b:0d:54:27:02:64:7a:ff:38:ae:fc:ed:00: f3:d2:cc:8c:0e:be:5a:d5:3e:7f:8a:77:c5:5b:19: 00:bd:33:91:c7:03:e5:d6:3b:15:91:a1:ed:64:38: 8d:bb:9c:90:27:91:1d:79:c3:b3:f6:56:06:b7:2c: 5c:2a:37:eb:95:03:41:dd:ab:4d:f7:27:8f:4c:c2: 27:2c:e2:a8:93:cd:cf:7a:ef:65:f3:d5:78:bc:60: bf:87:54:17:d6:d6:05:95:af:79:66:1a:6b:63:f2: 23:92:63:17:29:37:97:ca:06:74:3e:8f:21:9b:e3: 14:03:3c:20:42:6e:df:51:66:45:10:cf:bc:f1:0f: 00:33:21:a4:d9:26:9e:b5:af:42:f6:ca:15:66:83: 16:b4:42:ef:81:6b:3c:65:77:57:12:05:f9:2b:df: 7e:88:60:d6:fa:0e:17:21:ae:34:e2:79:cd:a0:f7: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:63:ED:95:A8:25:BA:B2:1D:56:72:33:E9:2C:85:1B:7B:90:DF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 199.204.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:09:d1:9d:ba:b9:ae:25:fa:cf:af:c4:56:18:b2:e1:23:ea: 7a:c9:af:7b:69:ac:e1:d9:e7:a3:7c:b9:67:af:90:2c:cb:06: dc:5e:c9:44:43:2a:04:cf:b5:79:7f:6e:33:58:fa:a1:71:df: 84:1c:d0:17:b0:8a:98:fc:30:e6:4a:f3:a0:e2:70:2a:e1:f4: 1c:73:04:e1:3b:3e:7a:bd:9a:cc:99:3b:12:18:08:7d:fc:ab: e1:0a:7f:62:3c:5c:aa:53:73:e5:2a:f2:da:ec:8c:d9:8d:18: e8:2e:b2:9e:58:a7:ac:66:59:84:44:e1:87:dc:f0:f3:6f:32: f4:48:04:ad:1f:a2:b6:5f:d0:0e:8a:c4:31:4b:34:2b:c2:64: d3:24:2c:e9:9d:40:51:81:dd:80:dd:21:c9:40:50:5f:66:b0: 10:62:3d:9a:a6:32:12:f2:22:ef:6b:d2:e9:27:01:0e:d6:7d: 73:ca:ab:02:15:30:ca:db:3f:e0:b8:99:40:74:85:76:4d:08: 6d:79:81:09:5c:dc:84:bb:ed:ee:52:88:1a:21:1f:97:0b:6f: 26:d4:cc:e7:35:27:8a:0a:a4:c8:c9:dd:98:ff:5c:e5:a0:10: 3c:6e:08:6e:0d:b8:59:c8:d1:35:87:de:bf:98:b3:d2:c4:3f: 3e:73:bc:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEPQwAyIN1ENjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NmFmMzg1NWYtMjcxZi00MjYzLWEwZDItMGUyMzJhOTBiMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbjbanlSqgWATY6b4ijUWWvAl/azHp6GLc/z 821luPgth3uRhzU9XKICANR6Grd6IuFSuSNuJH8hd0XIvMA54BdEkTnN11AQi5cB zpsNVCcCZHr/OK787QDz0syMDr5a1T5/infFWxkAvTORxwPl1jsVkaHtZDiNu5yQ J5EdecOz9lYGtyxcKjfrlQNB3atN9yePTMInLOKok83Peu9l89V4vGC/h1QX1tYF la95ZhprY/IjkmMXKTeXygZ0Po8hm+MUAzwgQm7fUWZFEM+88Q8AMyGk2Saeta9C 9soVZoMWtELvgWs8ZXdXEgX5K99+iGDW+g4XIa404nnNoPeMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBj7ZWoJbqyHVZyM+kshRt7kN+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvZDkzYmIxZjAtZWU3Ni0z NDEyLWE4NzgtN2VjZjRiZWM4ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgJ0Z26ua4l+s+vxFYYsuEj6nrJr3tprOHZ56N8uWevkCzLBtxeyURD KgTPtXl/bjNY+qFx34Qc0Bewipj8MOZK86DicCrh9BxzBOE7Pnq9msyZOxIYCH38 q+EKf2I8XKpTc+Uq8trsjNmNGOgusp5Yp6xmWYRE4Yfc8PNvMvRIBK0forZf0A6K xDFLNCvCZNMkLOmdQFGB3YDdIclAUF9msBBiPZqmMhLyIu9r0uknAQ7WfXPKqwIV MMrbP+C4mUB0hXZNCG15gQlc3IS77e5SiBohH5cLbybUzOc1J4oKpMjJ3Zj/XOWg EDxuCG4NuFnI0TWH3r+Ys9LEPz5zvFo= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:33 2025 by rpki-client