$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa File: 4b624e85-9ef9-359d-98f1-cb3f14c94516.roa (raw, json) Hash identifier: 4VG8i0KMc7a1Xk49DqIrbY0UYvCx5jg7HWpZVCQfcWQ= Subject key identifier: 23:2F:05:93:18:C0:D0:A2:22:2E:77:9C:F3:02:DF:C0:DC:25:16:32 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6FB95900B3ACBF5EB7A40 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 199.232.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fb:95:90:0b:3a:cb:f5:eb:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b12a8b63-b0ba-416b-8609-758856ab0e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:69:e7:92:a9:63:db:98:81:47:34:2a:32: 45:f6:66:66:1c:80:09:5d:9b:3a:11:35:f6:de:d2: ba:fc:77:8f:f2:ef:ec:fc:80:88:ee:ed:78:85:a2: c9:da:ff:dd:4e:fe:3a:8f:54:64:45:73:79:e7:dc: c9:25:a8:06:8e:1e:70:62:cd:d8:98:01:f9:a0:c7: 7d:e0:1d:8b:1d:82:98:62:0d:9e:20:c7:ba:a6:68: 8a:1f:96:7b:55:26:de:bc:f5:3d:88:e4:47:1e:f2: 5e:91:ed:58:bc:26:45:af:74:16:04:01:3e:f3:61: 7e:19:07:b0:a3:0b:c3:99:73:a2:b2:7c:66:40:b1: 19:83:20:b0:6a:ed:28:c9:fd:fd:d0:b3:d4:86:a4: 2b:21:c6:74:67:7f:8e:36:c7:59:46:13:48:8e:45: c8:fd:68:37:74:04:f0:ea:cd:4c:f2:dc:5c:54:72: 84:22:03:67:9a:bb:ac:49:14:6f:58:e9:05:e2:10: db:99:e8:b8:4a:f8:71:ad:b0:83:cc:2e:fb:74:7e: c6:85:06:97:46:94:18:c3:ef:6b:7d:29:54:40:29: c6:e2:44:f9:0d:f7:3b:f2:ae:2e:2e:e7:83:6e:64: eb:87:8c:16:12:57:de:12:a2:43:91:a2:5c:b4:f2: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:05:93:18:C0:D0:A2:22:2E:77:9C:F3:02:DF:C0:DC:25:16:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ec:63:f6:7d:a8:6a:92:98:1b:55:22:7d:02:1f:23:ba:50: 89:58:f7:e3:d2:a8:19:fd:50:a0:dd:f4:eb:49:9a:93:8f:bb: 49:7a:d2:49:4b:93:89:5f:a0:1e:24:a9:45:32:11:0c:fc:ec: f3:b1:b7:6b:32:c8:ef:2d:08:e5:f2:51:59:6c:42:44:f0:16: c3:d7:82:34:21:67:e0:01:bf:b5:69:53:b7:f4:c1:bc:41:01: 97:cc:b4:69:66:3e:9b:a7:1b:ce:3f:ab:46:a9:5c:df:f8:30: 08:49:39:ed:1c:f8:b5:08:68:ca:94:79:89:46:15:9d:98:ed: 6a:1f:a0:40:17:76:53:b1:b9:54:24:4d:bf:c1:da:aa:a0:0c: 83:e1:51:02:4d:ba:bf:db:05:d0:4b:a5:1f:88:f8:0a:c6:aa: 75:1c:c6:8c:03:4d:83:38:15:2a:59:b2:a8:b1:68:3a:f2:f9: 1f:cd:e8:17:19:71:1b:a0:e6:06:a5:c6:66:a4:70:99:ce:2d: 46:75:3a:1b:a5:9d:e4:79:9d:23:9e:86:7f:bc:8a:68:5f:f0: 8f:47:8e:72:8a:ea:9b:49:96:a3:97:e9:9e:19:ef:e3:51:5c: ab:1a:ba:77:8d:89:48:d3:33:6f:7a:03:0d:dc:42:a8:33:0e: 76:64:13:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vuVkAs6y/XrekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjEyYThiNjMtYjBiYS00MTZiLTg2MDktNzU4ODU2YWIwZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9p55KpY9uYgUc0KjJF9mZmHIAJXZs6ETX2 3tK6/HeP8u/s/ICI7u14haLJ2v/dTv46j1RkRXN559zJJagGjh5wYs3YmAH5oMd9 4B2LHYKYYg2eIMe6pmiKH5Z7VSbevPU9iORHHvJeke1YvCZFr3QWBAE+82F+GQew owvDmXOisnxmQLEZgyCwau0oyf390LPUhqQrIcZ0Z3+ONsdZRhNIjkXI/Wg3dATw 6s1M8txcVHKEIgNnmrusSRRvWOkF4hDbmei4SvhxrbCDzC77dH7GhQaXRpQYw+9r fSlUQCnG4kT5Dfc78q4uLueDbmTrh4wWElfeEqJDkaJctPLtpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMvBZMYwNCiIi53nPMC38DcJRYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGI2MjRlODUtOWVmOS0z NTlkLTk4ZjEtY2IzZjE0Yzk0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+jkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7sY/Z9qGqSmBtVIn0CHyO6UIlY9+PSqBn9UKDd9OtJmpOPu0l60klL k4lfoB4kqUUyEQz87POxt2syyO8tCOXyUVlsQkTwFsPXgjQhZ+ABv7VpU7f0wbxB AZfMtGlmPpunG84/q0apXN/4MAhJOe0c+LUIaMqUeYlGFZ2Y7WofoEAXdlOxuVQk Tb/B2qqgDIPhUQJNur/bBdBLpR+I+ArGqnUcxowDTYM4FSpZsqixaDry+R/N6BcZ cRug5galxmakcJnOLUZ1OhulneR5nSOehn+8imhf8I9HjnKK6ptJlqOX6Z4Z7+NR XKsauneNiUjTM296Aw3cQqgzDnZkEyQ= -----END CERTIFICATE-----Generated at Thu Oct 9 05:49:27 2025 by rpki-client