$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa File: 3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa (raw, json) Hash identifier: JPqW4gylhiXBJlw+rZERfnZe6+pJPJwT85APIx5ckLI= Subject key identifier: 5C:3D:EF:E4:8B:0C:68:9F:CA:79:F3:D3:F8:55:82:86:6E:2E:80:C9 Certificate issuer: /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Certificate serial: 010D0C9F4328584B08ABF0CEB746953FCE604530 Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 4150 IP address blocks: 199.91.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:f0:ce:b7:46:95:3f:ce:60:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=bba7be62-e601-4bb7-8387-9017893e0df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:68:5d:9f:ea:3b:6f:3d:50:d3:30:71:50: 71:90:52:0c:1a:ac:1e:bb:86:92:08:50:f1:9b:af: 45:6e:8f:1c:79:4f:bd:0d:b4:2c:4d:25:d9:39:ac: 23:3b:5a:53:4f:47:f8:b2:c7:c2:58:f4:42:d9:bb: c0:f4:66:78:a5:cd:38:c4:6d:b5:8d:16:86:66:e7: 49:88:6f:a1:3f:97:b3:b8:92:41:a0:07:b7:86:b9: 3c:eb:9c:1c:d6:8f:87:50:ac:d5:dd:96:fe:fc:2f: 3e:89:32:a5:da:a8:7a:5a:00:97:45:b2:73:ea:fd: 1a:be:af:61:c8:cc:54:26:b5:e7:04:63:84:8e:3a: af:59:3d:ee:dd:7d:f5:f8:ee:d0:0a:e1:50:a5:83: ce:1f:59:f7:b1:3d:e4:f8:e1:de:f3:73:97:73:b3: 5b:0c:8d:6e:e6:6d:c1:0b:1d:62:6e:d8:ce:c8:ec: ca:e0:8f:22:ff:a0:17:af:f0:06:d5:c3:5e:b3:3b: e5:5f:39:43:82:8c:fe:54:d6:7c:71:d9:7b:aa:58: f1:89:86:7d:20:7a:07:5b:bc:a3:3b:ef:54:4d:19: 8c:c8:33:74:cb:ec:5d:2c:8a:8e:b2:64:19:3d:a2: 02:3e:7a:aa:78:13:6f:f6:65:1c:d9:24:22:68:78: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3D:EF:E4:8B:0C:68:9F:CA:79:F3:D3:F8:55:82:86:6E:2E:80:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl X509v3 Authority Key Identifier: keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer sbgp-ipAddrBlock: critical IPv4: 199.91.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:64:5b:b6:dd:da:1b:c4:0c:28:6b:7f:26:e4:93:3d:46:e3: 9a:ab:33:00:e0:27:2b:96:ba:1a:a8:a4:d3:8a:2a:e5:0a:7a: 39:51:d3:f9:71:33:9d:42:96:d6:98:1d:fc:33:c5:fa:e5:06: 96:ae:55:55:39:66:ee:fb:f2:9a:aa:80:b3:e2:86:1c:09:cf: 07:86:f3:23:1e:72:41:0f:e6:84:d8:e8:a9:0c:5e:5c:b0:8e: d7:13:81:4c:a0:8f:e7:9f:63:bd:73:2e:12:55:08:f8:34:54: 33:1f:fc:cf:02:0d:60:54:a3:8f:52:37:90:b5:66:8c:78:16: d0:09:85:73:71:8f:32:aa:d2:7c:e9:30:6e:4b:da:d5:80:f5: 2f:02:25:9c:54:e3:69:8b:4f:1f:86:3c:fc:c1:31:0a:17:53: 18:64:0d:a3:35:87:83:39:79:2c:9e:f5:4c:7c:e9:35:3d:95: 63:dd:be:a2:5a:3d:6f:45:7d:f5:61:be:a5:09:63:7c:84:42: e4:b5:7c:e3:16:b7:14:dd:29:2d:8e:ee:4f:5b:68:6e:ce:3d: f0:52:9d:0b:ad:94:b2:32:52:c1:59:0e:dd:1f:51:5b:41:e8: 3a:f5:f3:37:ec:c5:3f:05:39:aa:5c:20:3b:f6:41:c2:79:41: cd:25:6d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq/DOt0aVP85gRTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1 ZmQyMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk YmJhN2JlNjItZTYwMS00YmI3LTgzODctOTAxNzg5M2UwZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlahoXZ/qO289UNMwcVBxkFIMGqweu4aSCFDx m69Fbo8ceU+9DbQsTSXZOawjO1pTT0f4ssfCWPRC2bvA9GZ4pc04xG21jRaGZudJ iG+hP5ezuJJBoAe3hrk865wc1o+HUKzV3Zb+/C8+iTKl2qh6WgCXRbJz6v0avq9h yMxUJrXnBGOEjjqvWT3u3X31+O7QCuFQpYPOH1n3sT3k+OHe83OXc7NbDI1u5m3B Cx1ibtjOyOzK4I8i/6AXr/AG1cNeszvlXzlDgoz+VNZ8cdl7qljxiYZ9IHoHW7yj O+9UTRmMyDN0y+xdLIqOsmQZPaICPnqqeBNv9mUc2SQiaHinjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw97+SLDGifynnz0/hVgoZuLoDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3 OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvM2Y5YjZhZjUtODZlYS0z M2ZlLWE1YjYtNDk5NDBiMjAxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWY0NzllMTMtNTVhMS00YTVkLWEw MDItMTE3MGEwZmY1ZmQyLzFmNDc5ZTEzLTU1YTEtNGE1ZC1hMDAyLTExNzBhMGZm NWZkMi5jcmwwHwYDVR0jBBgwFoAUqLXSOrVPs0AvMi4sLER4Y/pWWLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcw YTBmZjVmZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxkW7bd2hvEDChrfybkkz1G45qrMwDgJyuWuhqopNOKKuUKejlR0/lx M51CltaYHfwzxfrlBpauVVU5Zu778pqqgLPihhwJzweG8yMeckEP5oTY6KkMXlyw jtcTgUygj+efY71zLhJVCPg0VDMf/M8CDWBUo49SN5C1Zox4FtAJhXNxjzKq0nzp MG5L2tWA9S8CJZxU42mLTx+GPPzBMQoXUxhkDaM1h4M5eSye9Ux86TU9lWPdvqJa PW9FffVhvqUJY3yEQuS1fOMWtxTdKS2O7k9baG7OPfBSnQutlLIyUsFZDt0fUVtB 6Dr18zfsxT8FOapcIDv2QcJ5Qc0lbTc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:19 2025 by rpki-client