$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa File: 854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json) Hash identifier: ARcnP9klq31OjLG9ub3b3ckZsGhhLZxqPy3R+cCEWcY= Subject key identifier: C5:AD:B1:27:A2:35:71:F8:F3:17:3B:B8:B3:DA:D3:F0:3D:BC:5F:71 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584B5571D5DDA38EA01B0588F520 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 21777 IP address blocks: 199.33.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d5:dd:a3:8e:a0:1b:05:88:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=4f42b477-e2fc-496e-a50e-c76e7811e1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:a8:8f:f9:90:c5:b9:6c:1a:0a:58:59:78: df:66:ef:61:66:fa:84:6e:95:2a:08:9c:c1:19:7c: 7b:73:2b:58:78:ba:f9:32:bf:77:fb:3f:c8:ba:95: 7f:42:a7:0a:d7:61:4a:b8:d9:69:b1:45:64:d1:d0: 61:62:cc:e6:bf:39:84:8d:1e:dc:e0:1f:c0:21:c6: a4:5a:25:f9:b3:e7:2c:d5:af:09:52:26:52:85:3f: ac:4b:c4:55:d1:6a:6d:e7:c7:5f:3e:6f:4e:4a:67: 9e:b5:ba:2f:b4:08:26:d7:5b:b8:2c:75:1f:32:3b: 29:eb:e9:e7:3e:6b:d4:82:88:77:c5:0f:b2:94:d9: 67:24:a1:e7:61:d7:fa:66:ed:8a:85:f8:71:e2:10: 24:eb:ed:86:95:e2:a7:e7:c6:09:54:f2:00:34:6a: 6e:cf:83:b6:1f:07:dd:5b:e0:fa:21:85:70:82:70: f6:14:74:a3:5f:38:ea:f3:a2:44:01:40:ec:a8:5c: 54:38:31:08:9c:f0:16:4a:4e:79:9b:46:a8:94:22: 45:f2:a4:ad:1f:66:82:04:4f:18:c0:ea:11:64:79: df:90:de:c0:0d:ea:36:3c:5d:34:61:a3:a5:90:e0: d0:6c:b9:48:69:fa:bf:9c:ba:b0:62:e1:e9:5b:cd: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:B1:27:A2:35:71:F8:F3:17:3B:B8:B3:DA:D3:F0:3D:BC:5F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d4:06:19:1e:a8:f4:b9:a0:92:69:5d:a7:36:65:ad:be:e6: e1:12:2a:14:bc:71:20:83:22:cc:1f:71:34:79:b8:be:73:84: 5c:07:59:07:f6:c9:e2:39:d5:30:24:5f:16:b9:92:9e:91:59: 48:dd:29:c1:f1:7a:1a:dc:ea:2a:0a:00:e0:be:d3:b7:53:e6: 4e:fc:73:60:42:a7:93:b0:33:07:5c:68:11:15:9c:22:6c:04: 54:a4:aa:55:ff:83:6d:42:bb:71:65:48:5b:72:79:de:49:3c: aa:b7:c1:73:57:b4:7e:b2:87:51:4e:42:b7:60:cc:4e:ef:a7: 40:98:01:95:41:05:97:a6:00:61:f3:5a:09:6b:df:08:dc:79: dc:75:5a:78:bc:bd:cc:27:c4:ca:99:2d:ba:19:26:f5:db:65: 8a:6a:a5:e4:d0:a8:8e:a8:82:55:4e:cb:a8:c3:74:d4:7b:1b: 15:e5:92:aa:0f:05:74:eb:5d:31:a9:55:db:1a:a9:e6:48:5c: 32:7d:67:67:24:c6:10:57:78:ce:23:24:63:43:c3:da:b1:cf: 56:6c:f7:cc:35:d1:a1:da:1f:3b:fb:0d:b1:5f:b1:a3:e4:45: 70:32:d7:a5:9c:90:03:03:04:e8:3f:3e:52:e9:a8:54:10:11: ab:c0:c8:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdXdo46gGwWI9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NGY0MmI0NzctZTJmYy00OTZlLWE1MGUtYzc2ZTc4MTFlMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgCoj/mQxblsGgpYWXjfZu9hZvqEbpUqCJzB GXx7cytYeLr5Mr93+z/IupV/QqcK12FKuNlpsUVk0dBhYszmvzmEjR7c4B/AIcak WiX5s+cs1a8JUiZShT+sS8RV0Wpt58dfPm9OSmeetbovtAgm11u4LHUfMjsp6+nn PmvUgoh3xQ+ylNlnJKHnYdf6Zu2Khfhx4hAk6+2GleKn58YJVPIANGpuz4O2Hwfd W+D6IYVwgnD2FHSjXzjq86JEAUDsqFxUODEInPAWSk55m0aolCJF8qStH2aCBE8Y wOoRZHnfkN7ADeo2PF00YaOlkODQbLlIafq/nLqwYuHpW828XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWtsSeiNXH48xc7uLPa0/A9vF9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvODU0Y2M0MTctOTk2NC0z OWZiLWJjM2MtODlkYTEwNjgyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXUBhkeqPS5oJJpXac2Za2+5uESKhS8cSCDIswfcTR5uL5zhFwHWQf2 yeI51TAkXxa5kp6RWUjdKcHxehrc6ioKAOC+07dT5k78c2BCp5OwMwdcaBEVnCJs BFSkqlX/g21Cu3FlSFtyed5JPKq3wXNXtH6yh1FOQrdgzE7vp0CYAZVBBZemAGHz Wglr3wjcedx1Wni8vcwnxMqZLboZJvXbZYpqpeTQqI6oglVOy6jDdNR7GxXlkqoP BXTrXTGpVdsaqeZIXDJ9Z2ckxhBXeM4jJGNDw9qxz1Zs98w10aHaHzv7DbFfsaPk RXAy16WckAMDBOg/PlLpqFQQEavAyAI= -----END CERTIFICATE-----Generated at Sat Oct 11 16:58:02 2025 by rpki-client