$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa File: 5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json) Hash identifier: CJYnLkaH0wvK+fK3kvJOE+ujhFmIe0aVNcslnXvQ0Ys= Subject key identifier: C4:76:92:6A:8B:91:89:4B:C2:6C:C4:07:00:D2:DC:68:5D:8E:28:A2 Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584B3986F6ADAAAA7CB19AD6D180 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 31942 IP address blocks: 199.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f6:ad:aa:aa:7c:b1:9a:d6:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=b5c15c82-e5e0-4887-ab43-b94156de3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:66:1e:52:d0:ae:4b:14:56:07:9a:13:69:43: 07:7e:af:71:67:c9:9c:71:54:2d:ed:70:31:89:ea: d5:3b:ce:4b:0f:e0:42:d2:01:ee:90:d1:30:3d:62: 2e:01:b7:cd:8a:a5:dc:67:01:4b:15:3e:dc:16:12: f0:fa:32:eb:e4:83:c0:2b:f7:62:1f:62:e8:c8:60: 26:8b:6d:ec:81:e8:49:1c:a1:81:c3:06:a0:08:73: fc:27:c6:f5:54:b2:89:8d:3f:cf:17:a9:77:db:02: 01:3d:42:ec:7d:84:7e:b9:c0:00:13:55:0c:6e:c4: 2c:67:b2:7f:42:a6:53:32:dd:3f:69:00:cd:7c:50: 8e:14:cf:1a:48:db:ea:a3:bc:a7:6b:83:48:96:a4: 13:7a:f8:93:14:89:fd:81:cf:9e:ab:55:71:28:9e: 79:7a:61:63:d9:d3:95:b8:c5:0f:c3:cd:ea:21:cf: 46:f1:71:f4:f2:58:fe:a0:eb:03:51:7d:38:61:1d: 60:7d:9c:43:a1:8e:6f:f7:cb:ea:b9:cd:cd:97:94: 5c:32:c4:21:02:a1:ef:13:72:13:6b:a3:f2:15:1a: bb:47:d4:40:96:63:46:cb:a2:76:0e:58:c4:60:33: f2:ae:36:3b:05:65:fc:f4:ec:fe:c0:6c:75:ea:fc: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:92:6A:8B:91:89:4B:C2:6C:C4:07:00:D2:DC:68:5D:8E:28:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 199.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:27:df:58:62:1e:35:29:59:d4:33:5d:4a:b8:63:61:fe:54: cc:11:69:bc:f3:a6:94:68:de:e2:58:56:bc:c2:dd:f4:e4:2c: 9d:5e:2e:f6:18:90:7b:3a:12:bc:e5:58:23:57:ad:57:d1:78: 67:d6:38:61:c3:77:d1:7d:d2:02:66:27:b7:87:e9:ff:2a:e3: 0f:0f:63:5d:9e:3c:a8:94:aa:e4:91:bd:01:d6:73:5f:3f:3e: 8c:1a:1a:fa:06:35:d3:7e:15:89:39:91:14:82:9e:34:87:90: dc:a5:cc:f0:3a:55:36:93:3a:1c:29:84:61:d9:db:cd:40:35: 64:eb:29:9b:93:12:ca:d0:0a:d1:31:fb:4f:79:7a:14:51:3f: 30:de:86:1c:a4:e6:39:bf:3a:1f:6d:79:54:f0:34:2c:8d:15: 4a:2e:7e:e0:76:a1:f8:b0:0e:69:3f:16:8e:ad:09:0f:92:0a: 08:b9:39:ef:ae:3a:9c:9f:e5:7b:cd:d9:9d:fc:92:03:7f:2b: ff:b7:ab:76:3d:67:e0:f1:bd:c3:b2:5f:60:85:80:13:ad:b5: 51:f1:b4:44:a4:13:59:2e:92:36:d6:5a:03:2d:f9:71:c0:fc: c1:69:b8:d8:bf:31:89:82:fc:6e:e0:78:dc:02:cf:f5:e3:19: 35:66:68:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hvatqqp8sZrW0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YjVjMTVjODItZTVlMC00ODg3LWFiNDMtYjk0MTU2ZGUzMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGYeUtCuSxRWB5oTaUMHfq9xZ8mccVQt7XAx ierVO85LD+BC0gHukNEwPWIuAbfNiqXcZwFLFT7cFhLw+jLr5IPAK/diH2LoyGAm i23sgehJHKGBwwagCHP8J8b1VLKJjT/PF6l32wIBPULsfYR+ucAAE1UMbsQsZ7J/ QqZTMt0/aQDNfFCOFM8aSNvqo7yna4NIlqQTeviTFIn9gc+eq1VxKJ55emFj2dOV uMUPw83qIc9G8XH08lj+oOsDUX04YR1gfZxDoY5v98vquc3Nl5RcMsQhAqHvE3IT a6PyFRq7R9RAlmNGy6J2DljEYDPyrjY7BWX89Oz+wGx16vyHHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR2kmqLkYlLwmzEBwDS3GhdjiiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNWQzMjE5MDctMzgxZC0z MmFmLWFkNzYtYjNmZDFiOTg0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwn31hiHjUpWdQzXUq4Y2H+VMwRabzzppRo3uJYVrzC3fTkLJ1eLvYY kHs6ErzlWCNXrVfReGfWOGHDd9F90gJmJ7eH6f8q4w8PY12ePKiUquSRvQHWc18/ PowaGvoGNdN+FYk5kRSCnjSHkNylzPA6VTaTOhwphGHZ281ANWTrKZuTEsrQCtEx +095ehRRPzDehhyk5jm/Oh9teVTwNCyNFUoufuB2ofiwDmk/Fo6tCQ+SCgi5Oe+u Opyf5XvN2Z38kgN/K/+3q3Y9Z+DxvcOyX2CFgBOttVHxtESkE1kukjbWWgMt+XHA /MFpuNi/MYmC/G7geNwCz/XjGTVmaCU= -----END CERTIFICATE-----Generated at Wed Oct 8 19:43:00 2025 by rpki-client