$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa File: 5ca2880a-38cd-32ae-8559-16deb6384003.roa (raw, json) Hash identifier: DhjvW1w5vDdHOal7DT9b0q3lqqn6Elq4C+5/OVM3J7A= Subject key identifier: EC:6B:D3:D6:7A:1B:53:A5:58:BA:DF:5E:74:7E:1D:0E:5B:7F:4A:52 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B569FA79B069A90CFE00E0660 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa Signing time: Sat 27 Sep 2025 23:08:54 +0000 ROA not before: Sat 27 Sep 2025 23:08:54 +0000 ROA not after: Sat 27 Dec 2025 00:08:54 +0000 asID: 397325 IP address blocks: 199.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:9f:a7:9b:06:9a:90:cf:e0:0e:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 23:08:54 2025 GMT Not After : Dec 27 00:08:54 2025 GMT Subject: CN=1948455f-3dfd-4101-b70a-3213c5840033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:aa:db:d0:67:ce:a3:41:45:4c:d2:cd:c5: ad:7f:91:5d:19:6a:6d:f5:29:2b:de:bd:af:84:0c: 1d:82:1b:4d:84:4d:6b:7f:e8:22:57:50:c4:94:b6: fc:19:55:2e:8d:eb:39:a1:e0:93:5a:8d:75:56:34: f3:83:15:e6:bb:0b:16:b7:71:cb:bc:2d:af:72:c7: d9:68:2c:3a:01:0f:e0:8a:f1:0c:c1:05:8e:f7:05: 9f:b9:01:86:1b:e0:f3:05:58:c8:19:6b:96:10:e3: 81:71:ce:ff:3a:31:a1:ac:0a:dc:92:a6:5c:92:d4: 23:7b:6b:2a:bc:e7:c0:9c:27:92:43:d1:45:42:f7: 8d:97:11:5c:3c:03:b8:2c:8b:ae:cb:a3:85:8d:72: 76:59:fd:a7:eb:fd:ab:71:9c:ea:59:90:13:57:82: a1:58:4a:15:6d:2e:09:44:93:b1:33:d1:25:ea:72: 5c:14:ca:11:92:f6:0f:57:23:f7:6d:0a:fb:d9:1c: 36:2f:0d:69:85:52:fe:1a:23:83:66:72:1c:0d:98: 21:46:72:00:e4:6f:81:3b:dc:36:28:07:dc:53:a1: 3e:cf:22:cc:bf:7a:08:78:a5:e4:5d:d7:54:fa:ea: b0:9e:f5:b5:b3:2f:2d:f9:56:6d:86:d1:28:63:2b: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:D3:D6:7A:1B:53:A5:58:BA:DF:5E:74:7E:1D:0E:5B:7F:4A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8e:e0:83:68:0c:0f:f6:1b:2d:05:3d:2e:6d:e9:be:8c:f9: e5:64:94:5f:ee:bc:6f:df:c7:95:53:d7:4d:94:3c:5a:0b:c0: 0a:8a:d3:a2:1e:d9:34:d7:68:b7:0a:b6:27:81:6e:b1:97:7d: af:0c:81:97:2b:d5:d4:e4:de:e6:90:bd:9d:45:34:be:da:1f: 8b:f7:1d:4a:70:0f:00:03:ec:78:ed:b8:a3:fe:59:d6:9c:8d: f0:44:67:57:1d:b9:0d:18:a7:d2:0b:8f:b8:3a:4a:a8:c3:9b: 7c:10:25:0c:0f:dd:88:11:14:a4:b6:2b:89:eb:c3:82:30:67: b5:0d:d1:21:6a:49:6b:0f:91:6e:b4:70:80:fe:f8:e7:84:64: 12:c0:02:ca:61:5c:78:6b:6d:c5:b5:82:0d:ae:9b:fa:e1:62: b6:37:63:e7:06:90:e7:50:e0:f1:b0:c5:98:a4:94:f4:10:6b: ef:ef:0b:a2:33:b2:d1:3e:fa:2d:53:f3:d2:6f:46:3a:5b:7b: 1e:50:52:1e:cb:97:80:da:75:f4:9a:41:16:79:b5:6e:6c:aa: d0:48:be:13:29:90:0f:5f:0e:44:cb:35:86:89:fa:7c:bc:61: 15:28:55:fb:f2:a6:d7:0f:3c:9b:0c:b9:cb:3e:51:13:ee:8f: 83:bf:11:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWn6ebBpqQz+AOBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIzMDg1NFoXDTI1MTIyNzAwMDg1NFowLzEtMCsGA1UEAxMk MTk0ODQ1NWYtM2RmZC00MTAxLWI3MGEtMzIxM2M1ODQwMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloWq29BnzqNBRUzSzcWtf5FdGWpt9Skr3r2v hAwdghtNhE1rf+giV1DElLb8GVUujes5oeCTWo11VjTzgxXmuwsWt3HLvC2vcsfZ aCw6AQ/givEMwQWO9wWfuQGGG+DzBVjIGWuWEOOBcc7/OjGhrArckqZcktQje2sq vOfAnCeSQ9FFQveNlxFcPAO4LIuuy6OFjXJ2Wf2n6/2rcZzqWZATV4KhWEoVbS4J RJOxM9El6nJcFMoRkvYPVyP3bQr72Rw2Lw1phVL+GiODZnIcDZghRnIA5G+BO9w2 KAfcU6E+zyLMv3oIeKXkXddU+uqwnvW1sy8t+VZthtEoYyuMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxr09Z6G1OlWLrfXnR+HQ5bf0pSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNWNhMjg4MGEtMzhjZC0z MmFlLTg1NTktMTZkZWI2Mzg0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOO4INoDA/2Gy0FPS5t6b6M+eVklF/uvG/fx5VT102UPFoLwAqK06Ie 2TTXaLcKtieBbrGXfa8MgZcr1dTk3uaQvZ1FNL7aH4v3HUpwDwAD7HjtuKP+Wdac jfBEZ1cduQ0Yp9ILj7g6SqjDm3wQJQwP3YgRFKS2K4nrw4IwZ7UN0SFqSWsPkW60 cID++OeEZBLAAsphXHhrbcW1gg2um/rhYrY3Y+cGkOdQ4PGwxZiklPQQa+/vC6Iz stE++i1T89JvRjpbex5QUh7Ll4DadfSaQRZ5tW5sqtBIvhMpkA9fDkTLNYaJ+ny8 YRUoVfvyptcPPJsMucs+URPuj4O/EX8= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:57 2025 by rpki-client