$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa File: c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa (raw, json) Hash identifier: gIceHWxW5I3bEuv7Kn0jBnI6/aMu3sVZgikrRQFTcQs= Subject key identifier: 46:DF:38:7C:9D:FF:66:95:E6:00:B5:4D:C3:4B:2C:CE:79:6A:AB:7E Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B567EFD1516B3BA013F4AA800 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa Signing time: Sat 27 Sep 2025 22:03:05 +0000 ROA not before: Sat 27 Sep 2025 22:03:05 +0000 ROA not after: Fri 26 Dec 2025 23:03:05 +0000 asID: 400615 IP address blocks: 199.58.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:7e:fd:15:16:b3:ba:01:3f:4a:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:03:05 2025 GMT Not After : Dec 26 23:03:05 2025 GMT Subject: CN=e0033442-7ff4-4c39-aeb7-fb1bcb277f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:72:54:6c:3e:05:84:de:27:19:d3:2d:83: 22:43:87:6c:87:aa:76:eb:a6:98:15:b3:81:8f:11: fd:f1:71:55:af:2c:c6:ce:09:82:1d:a4:ca:8c:87: bd:67:a7:c3:72:2f:91:a2:c9:2d:68:bb:03:93:89: 63:6a:f1:db:cb:77:88:e3:0b:b8:fd:02:d4:fa:e5: 26:e1:51:5f:1c:c9:6f:c3:25:0d:9b:1d:2c:83:92: 00:c0:64:ec:3f:4a:e5:c9:43:3b:bd:4a:0b:91:8a: 6e:52:37:5f:e9:01:aa:ea:ce:87:9d:c6:24:9a:88: 87:8a:43:8f:51:93:18:ab:fe:bc:cf:64:2b:ac:e4: d0:2b:4f:ec:8f:3e:0f:88:3e:58:5c:3a:2e:bf:ee: 0d:39:c9:d2:c5:36:a5:73:b3:b0:d1:3a:2f:23:ca: 9d:34:8c:88:3e:12:71:7a:e1:54:30:a2:0a:90:ab: e4:97:8e:0c:04:0d:89:ed:72:69:14:f5:ff:7c:37: e2:4f:66:5c:1c:80:0b:93:0b:2e:9c:ac:1b:5a:99: 90:f8:0e:d4:c7:6c:13:8b:56:4d:a5:a9:d2:c3:80: 7c:91:c8:59:3c:ae:ab:3c:c8:92:ce:ab:4c:cd:92: 9a:7d:51:bb:4c:95:fb:7a:6d:cc:3c:ed:76:73:cc: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:38:7C:9D:FF:66:95:E6:00:B5:4D:C3:4B:2C:CE:79:6A:AB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:94:6b:89:a5:22:94:73:44:e3:90:95:17:74:2b:b9:ca:a0: 18:a1:49:5f:7a:f8:ff:2e:ea:16:84:f5:73:0c:1b:b8:b7:f8: a7:d7:5d:e2:31:56:fc:22:dc:75:d3:56:45:37:09:44:e5:f7: 8b:3e:ec:2a:d8:c5:db:01:c2:ca:f7:a2:04:9f:9a:e9:af:81: db:31:4d:02:a1:9a:47:b6:06:2f:0e:4b:57:74:de:9f:8f:ad: 6f:fe:bc:39:87:86:e5:58:c7:d6:fe:4b:e4:01:26:02:3a:07: 7d:15:35:a9:3e:f4:73:f2:22:5c:71:3d:95:d7:23:4d:8d:ee: d7:74:e0:2d:16:3c:4e:bf:c0:1c:4b:04:36:b7:9c:4f:71:d8: a8:35:4a:e2:09:b2:0f:b2:05:8b:2e:da:ea:a9:06:62:72:bf: c9:50:67:5f:84:8d:08:a2:72:66:2d:ef:28:e1:a5:e2:2c:56: 41:02:db:e4:66:62:33:8e:77:83:e1:53:24:e7:5b:2f:66:90: 79:ae:f0:6a:4b:66:81:35:4c:07:aa:3b:d9:28:b7:10:71:68: 83:41:dd:ff:fe:c6:dd:29:2c:f8:2f:c7:65:fa:83:1f:c3:7f: 1f:fc:4a:63:49:d4:9e:20:fa:d8:2f:bb:cc:b7:57:8e:04:07: c4:9f:e2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWfv0VFrO6AT9KqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyMDMwNVoXDTI1MTIyNjIzMDMwNVowLzEtMCsGA1UEAxMk ZTAwMzM0NDItN2ZmNC00YzM5LWFlYjctZmIxYmNiMjc3ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlyVGw+BYTeJxnTLYMiQ4dsh6p266aYFbOB jxH98XFVryzGzgmCHaTKjIe9Z6fDci+RosktaLsDk4ljavHby3eI4wu4/QLU+uUm 4VFfHMlvwyUNmx0sg5IAwGTsP0rlyUM7vUoLkYpuUjdf6QGq6s6HncYkmoiHikOP UZMYq/68z2QrrOTQK0/sjz4PiD5YXDouv+4NOcnSxTalc7Ow0TovI8qdNIyIPhJx euFUMKIKkKvkl44MBA2J7XJpFPX/fDfiT2ZcHIALkwsunKwbWpmQ+A7Ux2wTi1ZN panSw4B8kchZPK6rPMiSzqtMzZKafVG7TJX7em3MPO12c8yoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbfOHyd/2aV5gC1TcNLLM55aqt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYzAwZjlhYzUtNDEzMS0z MDFlLWFhNzctYjdmN2UzNWNmZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOUa4mlIpRzROOQlRd0K7nKoBihSV96+P8u6haE9XMMG7i3+KfXXeIx Vvwi3HXTVkU3CUTl94s+7CrYxdsBwsr3ogSfmumvgdsxTQKhmke2Bi8OS1d03p+P rW/+vDmHhuVYx9b+S+QBJgI6B30VNak+9HPyIlxxPZXXI02N7td04C0WPE6/wBxL BDa3nE9x2Kg1SuIJsg+yBYsu2uqpBmJyv8lQZ1+EjQiicmYt7yjhpeIsVkEC2+Rm YjOOd4PhUyTnWy9mkHmu8GpLZoE1TAeqO9kotxBxaINB3f/+xt0pLPgvx2X6gx/D fx/8SmNJ1J4g+tgvu8y3V44EB8Sf4s0= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:10 2025 by rpki-client