$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa File: cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json) Hash identifier: VSKPdt5GPQrKUYw5pwJO7lw7u136lCEZvLCIk4r08Pc= Subject key identifier: E3:1F:3A:83:2E:AE:DF:73:3A:BA:3D:D1:D2:63:73:7D:A8:A7:63:21 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584B3C51AE2E34F1A7000846FBB8 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 14362 IP address blocks: 199.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ae:2e:34:f1:a7:00:08:46:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=c97b36fc-9ceb-47ee-9b7b-67b797d3ab6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:89:2d:6a:de:11:5c:2f:78:ef:41:f6:03: 4b:73:9a:de:5e:57:6b:da:96:07:c4:d2:7e:0c:9a: 8f:a3:51:e8:b7:3f:00:c3:17:ea:f1:ef:dd:03:36: 71:4c:78:e0:a4:c0:f5:4d:5d:f8:4f:bf:8c:ec:28: 43:a2:8c:4d:75:cb:4e:ba:0c:d6:b1:f0:a6:fd:47: 63:d8:9c:97:4f:ad:df:9c:bc:b2:16:68:54:6c:30: 48:ff:04:45:c7:eb:d5:87:78:a5:ee:5b:82:92:c7: ac:99:95:c5:28:09:d2:23:13:b6:c3:90:1a:f6:86: e8:c1:38:69:7d:53:f7:ed:61:f6:77:86:8d:38:8a: c4:85:66:cc:de:27:af:bf:73:76:13:b6:26:54:1b: 0c:fb:22:9c:9b:83:a0:b6:48:83:0c:5d:a3:82:45: cb:cf:c1:0c:95:9c:79:12:ba:ff:08:8d:6b:e0:9b: f2:b4:e4:b4:93:98:3a:17:92:0f:80:30:9f:62:c0: e3:d3:ee:1c:8d:ae:de:cd:7f:f4:69:6e:7e:44:19: ea:cc:ef:0c:3a:69:79:d8:88:5c:e7:7b:9c:aa:e5: 52:97:59:1f:e6:57:35:d8:0f:74:95:94:f3:29:2d: 5d:e5:bf:7d:80:c0:34:09:63:13:82:09:cd:4f:60: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1F:3A:83:2E:AE:DF:73:3A:BA:3D:D1:D2:63:73:7D:A8:A7:63:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:69:12:16:6b:58:dd:67:f4:9e:c9:94:14:fe:ff:ca:43:38: ed:21:66:9f:d2:ae:1c:3f:ea:9e:aa:d5:f6:5b:49:43:cc:47: 90:dd:7d:73:9f:7b:21:2d:6a:44:16:91:52:38:92:b5:7c:43: 4b:93:1b:8c:18:58:a9:75:ee:32:bb:1c:bc:dc:f9:11:4e:72: e7:c3:f8:71:db:16:fc:5c:ba:d5:44:b4:f2:f2:8e:b6:e7:46: ae:98:a1:4b:05:2e:37:cc:be:b3:b2:5b:da:4b:7b:13:95:a5: 27:07:ee:0b:81:f0:22:3a:2f:67:f2:8f:f9:18:fc:45:91:f9: cb:f8:03:3d:2e:db:9b:8c:eb:95:cf:17:b0:35:ec:a9:e7:95: 72:87:02:68:32:d8:75:d2:6b:14:2d:56:e1:76:1f:4e:8c:4c: a9:e2:76:ef:82:3f:61:ad:a6:61:78:32:be:12:15:fe:f5:43: 4f:d1:2e:68:ac:de:8a:4e:b7:74:31:1c:ba:f3:41:94:7b:d1: 68:f6:0f:91:b1:23:07:b2:7c:ea:51:18:8a:ff:84:7b:2a:30: c7:f9:e2:0c:ef:56:de:42:05:15:b7:85:23:c9:8e:85:48:43: f4:05:ec:86:57:b3:8b:53:7b:ef:77:1d:7e:48:aa:e0:a8:24: b0:5b:fd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua4uNPGnAAhG+7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk Yzk3YjM2ZmMtOWNlYi00N2VlLTliN2ItNjdiNzk3ZDNhYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsqJLWreEVwveO9B9gNLc5reXldr2pYHxNJ+ DJqPo1Hotz8Awxfq8e/dAzZxTHjgpMD1TV34T7+M7ChDooxNdctOugzWsfCm/Udj 2JyXT63fnLyyFmhUbDBI/wRFx+vVh3il7luCksesmZXFKAnSIxO2w5Aa9obowThp fVP37WH2d4aNOIrEhWbM3ievv3N2E7YmVBsM+yKcm4OgtkiDDF2jgkXLz8EMlZx5 Err/CI1r4JvytOS0k5g6F5IPgDCfYsDj0+4cja7ezX/0aW5+RBnqzO8MOml52Ihc 53ucquVSl1kf5lc12A90lZTzKS1d5b99gMA0CWMTggnNT2BI+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMfOoMurt9zOro90dJjc32op2MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvY2I0YTA1ZGItZDlkOS0z YTY2LThiOTgtOTE4ZDZiMTY0ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1pEhZrWN1n9J7JlBT+/8pDOO0hZp/Srhw/6p6q1fZbSUPMR5DdfXOf eyEtakQWkVI4krV8Q0uTG4wYWKl17jK7HLzc+RFOcufD+HHbFvxcutVEtPLyjrbn Rq6YoUsFLjfMvrOyW9pLexOVpScH7guB8CI6L2fyj/kY/EWR+cv4Az0u25uM65XP F7A17KnnlXKHAmgy2HXSaxQtVuF2H06MTKnidu+CP2GtpmF4Mr4SFf71Q0/RLmis 3opOt3QxHLrzQZR70Wj2D5GxIweyfOpRGIr/hHsqMMf54gzvVt5CBRW3hSPJjoVI Q/QF7IZXs4tTe+93HX5IquCoJLBb/SA= -----END CERTIFICATE-----Generated at Sat Oct 11 22:27:15 2025 by rpki-client