$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa File: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (raw, json) Hash identifier: a/yGd2SxKurIkGfQTwXHG8DN9VWL/pLDeh8Qc98J2Bg= Subject key identifier: E5:88:8F:01:EA:30:B1:C3:36:67:92:49:A8:BF:80:D8:0F:4F:53:BF Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584B0B76A90F306F99FD13C2BEA0 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 43685 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a9:0f:30:6f:99:fd:13:c2:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=6c4cd9f9-89d3-4c7a-909e-b46914c2f06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:33:8f:1b:4e:07:20:fc:7d:4e:30:ca:f4: 22:7b:3e:0e:90:34:81:26:16:ea:d5:2c:04:bf:79: a3:3f:97:da:cb:d4:a3:04:d1:a9:9f:6a:2f:9c:14: ad:09:ce:82:4a:72:c2:08:f0:8f:bd:ed:6c:be:31: d7:68:f1:50:bf:3f:56:37:76:af:39:24:cb:38:c8: 2e:82:19:66:07:fd:65:89:76:8b:cb:25:ab:2f:60: 39:de:98:ad:05:ec:be:04:ff:95:35:e4:71:fd:ee: 5f:a7:4d:0e:6d:ce:0d:31:9b:4e:06:46:c7:5b:2c: e4:97:42:7a:8d:87:46:6a:ba:3e:4a:ec:ae:91:4d: 51:c4:06:9f:e0:d3:63:7a:96:d4:04:20:e1:b7:fe: 52:bf:b5:15:39:bb:94:60:8a:d3:54:6d:bc:33:e9: 69:ce:c4:ae:0c:8c:58:22:85:e7:11:3c:04:4d:2c: e1:48:7e:e8:e2:ab:7f:f6:bc:49:b3:06:e7:45:18: fe:95:b1:e0:c2:a5:d5:65:6d:41:29:22:2a:8e:9f: 27:b8:61:28:ef:2e:85:6c:b7:63:3c:44:7d:f6:ed: 0f:40:bd:f1:2f:6b:e4:77:48:24:c0:94:33:f8:db: 87:77:86:cb:f5:c1:4a:2e:17:aa:e8:70:77:f6:ee: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:8F:01:EA:30:B1:C3:36:67:92:49:A8:BF:80:D8:0F:4F:53:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:90:bc:8a:b8:8d:6b:2e:16:d8:6a:54:53:41:f3:2f:e1:ed: 15:d8:3c:48:41:1d:ab:6e:b2:81:92:ac:b9:b5:35:8b:04:f9: e4:97:45:27:46:7c:7f:df:c8:e8:7e:d2:b7:c0:77:56:ac:0f: 78:e1:89:a5:f4:60:3e:1a:d6:00:fd:d9:04:bc:65:0e:d0:95: 6c:e1:57:db:17:98:46:86:79:e7:76:3e:aa:91:92:da:21:3f: 4d:29:0b:97:ea:39:61:50:a6:8f:f0:2b:b2:0d:73:49:e0:dd: a5:ba:40:01:5c:f4:8f:c8:63:f4:3a:e5:e8:7b:fe:14:cb:46: ab:08:63:f2:fa:ad:2a:0e:6b:e2:0e:74:34:4f:26:8d:93:a3: 26:63:d7:be:d8:4a:dc:ce:54:22:99:0a:dc:79:90:9b:f7:de: cf:fb:0e:54:0c:b1:80:ce:ac:1e:f0:0f:74:ce:03:51:6e:08: 20:67:67:fb:ad:7a:c3:40:e8:39:e3:1d:04:6e:1d:84:f9:a0: be:a9:7d:09:a7:8a:4c:0e:18:97:40:cc:0c:da:dd:3e:dc:91: 1e:32:64:43:ff:5b:18:5b:44:9d:1d:44:25:da:10:84:53:c2: 3f:19:17:5d:24:a8:5e:68:8a:39:06:f6:2a:00:39:54:67:ec: a2:b7:cb:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqkPMG+Z/RPCvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NmM0Y2Q5ZjktODlkMy00YzdhLTkwOWUtYjQ2OTE0YzJmMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvszjxtOByD8fU4wyvQiez4OkDSBJhbq1SwE v3mjP5fay9SjBNGpn2ovnBStCc6CSnLCCPCPve1svjHXaPFQvz9WN3avOSTLOMgu ghlmB/1liXaLyyWrL2A53pitBey+BP+VNeRx/e5fp00Obc4NMZtOBkbHWyzkl0J6 jYdGaro+SuyukU1RxAaf4NNjepbUBCDht/5Sv7UVObuUYIrTVG28M+lpzsSuDIxY IoXnETwETSzhSH7o4qt/9rxJswbnRRj+lbHgwqXVZW1BKSIqjp8nuGEo7y6FbLdj PER99u0PQL3xL2vkd0gkwJQz+NuHd4bL9cFKLheq6HB39u5ZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWIjwHqMLHDNmeSSai/gNgPT1O/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvZDY4OTNkMmUtNmU0MS0z MWRiLThjNmQtMjdjYTZmYzViZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmQvIq4jWsuFthqVFNB8y/h7RXYPEhBHatusoGSrLm1NYsE+eSXRSdG fH/fyOh+0rfAd1asD3jhiaX0YD4a1gD92QS8ZQ7QlWzhV9sXmEaGeed2PqqRktoh P00pC5fqOWFQpo/wK7INc0ng3aW6QAFc9I/IY/Q65eh7/hTLRqsIY/L6rSoOa+IO dDRPJo2ToyZj177YStzOVCKZCtx5kJv33s/7DlQMsYDOrB7wD3TOA1FuCCBnZ/ut esNA6DnjHQRuHYT5oL6pfQmnikwOGJdAzAza3T7ckR4yZEP/WxhbRJ0dRCXaEIRT wj8ZF10kqF5oijkG9ioAOVRn7KK3y8g= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:02 2025 by rpki-client