$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: R4VpgrDk5cFZZwhkPnt68ETgFEydbI5Y8vUXG49VcAY= Subject key identifier: 55:9E:83:65:55:B6:BF:AC:83:D7:C1:F4:8C:35:EB:C9:ED:D1:18:57 Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584B33F1A576C73767DDC8C436C0 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a5:76:c7:37:67:dd:c8:c4:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=da6f7611-c071-4d6f-8f84-87740855c16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:35:ad:fa:ee:8d:e8:e6:1e:48:33:8f:21: ee:39:ca:cf:55:ec:54:03:ac:c6:ea:a6:a8:1b:2e: 37:fd:b2:31:2b:1b:0b:49:be:33:7d:14:b8:1a:7f: 20:03:a1:e6:78:b4:e3:d3:2c:4e:c5:bf:1d:c7:b8: 27:8a:42:bb:bd:91:f7:53:d2:0f:e5:0e:40:e0:94: b5:18:4e:1b:a0:c8:45:63:6b:a8:93:72:9e:b2:00: 2d:58:8d:27:76:10:09:5b:a1:12:58:ce:b1:f7:eb: f3:2a:ac:38:11:fc:e6:b7:df:41:5c:22:69:6d:37: 97:94:ff:e6:3a:94:67:d7:41:52:a3:c6:55:12:08: a1:0a:1a:5c:b0:7f:b2:d2:83:5f:59:9a:42:d2:a7: 70:8e:f5:9e:0e:80:51:88:5e:cd:d6:df:92:53:4b: 2a:b0:ca:39:d4:6b:03:29:a9:11:04:07:94:ff:52: 45:df:a8:b8:3d:b0:fd:35:1d:af:76:99:d4:10:dd: 16:0a:26:9c:be:7c:a8:48:93:b1:c8:44:22:90:e2: df:e0:e6:86:89:f4:3f:d9:37:a3:d9:99:08:6e:2c: 74:a7:b4:7b:9c:ef:fb:c4:17:88:7b:a0:6f:80:12: 18:6a:d7:5f:28:8d:bf:68:da:4b:77:e6:8b:fd:f9: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:83:65:55:B6:BF:AC:83:D7:C1:F4:8C:35:EB:C9:ED:D1:18:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:65:2d:be:c5:a7:ef:83:b9:56:4e:ea:26:0f:ab:6e:96:c3: fd:1e:71:0b:1e:f9:09:af:27:9a:3c:0a:fe:7d:d7:69:e8:40: 76:0f:cb:6d:f9:fb:9d:55:30:e3:cb:9b:09:8e:c6:35:ac:09: c6:fd:1d:4a:60:9e:d7:1e:c9:73:91:53:35:f3:7e:9a:4b:d3: 6e:5d:8b:fa:82:b0:7e:dd:b1:46:6f:a3:eb:a3:63:70:28:39: 49:10:62:04:9a:28:61:1a:5f:c1:da:66:71:d0:d6:64:69:25: 94:c5:e9:d3:ea:33:1f:46:69:96:ec:e8:df:9b:2d:a2:f1:60: f2:88:87:01:35:e6:31:aa:26:31:fa:95:9b:b2:c0:cd:86:94: 91:a5:39:ab:2b:fc:0e:1b:0b:d8:c3:3b:41:8f:cb:f9:be:0d: 20:2f:74:78:27:cf:a8:df:15:1c:89:d0:d2:4a:84:9f:fd:fa: 1f:09:a9:6d:49:5e:8a:b0:8d:c2:6f:eb:56:d6:18:b6:9a:60: 3e:f7:5d:d6:be:20:0a:98:a7:47:50:54:44:02:37:02:d1:3b: 39:81:d3:5d:56:a7:4b:d5:d9:71:09:bc:74:48:65:4b:37:1e: 5d:2e:74:7b:98:19:24:dd:fa:ff:b0:f7:6f:bf:a5:6b:8d:72: 6f:7b:47:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aV2xzdn3cjENsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZGE2Zjc2MTEtYzA3MS00ZDZmLThmODQtODc3NDA4NTVjMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaY1rfrujejmHkgzjyHuOcrPVexUA6zG6qao Gy43/bIxKxsLSb4zfRS4Gn8gA6HmeLTj0yxOxb8dx7gnikK7vZH3U9IP5Q5A4JS1 GE4boMhFY2uok3KesgAtWI0ndhAJW6ESWM6x9+vzKqw4Efzmt99BXCJpbTeXlP/m OpRn10FSo8ZVEgihChpcsH+y0oNfWZpC0qdwjvWeDoBRiF7N1t+SU0sqsMo51GsD KakRBAeU/1JF36i4PbD9NR2vdpnUEN0WCiacvnyoSJOxyEQikOLf4OaGifQ/2Tej 2ZkIbix0p7R7nO/7xBeIe6BvgBIYatdfKI2/aNpLd+aL/fmoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWeg2VVtr+sg9fB9Iw168nt0RhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhlLb7Fp++DuVZO6iYPq26Ww/0ecQse+QmvJ5o8Cv5912noQHYPy235 +51VMOPLmwmOxjWsCcb9HUpgntceyXORUzXzfppL025di/qCsH7dsUZvo+ujY3Ao OUkQYgSaKGEaX8HaZnHQ1mRpJZTF6dPqMx9GaZbs6N+bLaLxYPKIhwE15jGqJjH6 lZuywM2GlJGlOasr/A4bC9jDO0GPy/m+DSAvdHgnz6jfFRyJ0NJKhJ/9+h8JqW1J XoqwjcJv61bWGLaaYD73Xda+IAqYp0dQVEQCNwLROzmB011Wp0vV2XEJvHRIZUs3 Hl0udHuYGSTd+v+w92+/pWuNcm97R0s= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:25 2025 by rpki-client