$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa File: aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa (raw, json) Hash identifier: xtojzZ/YPnE8bfqm847+WDiySNQHXb+P72w5e9Htu2g= Subject key identifier: 9E:4E:6A:78:B0:1A:73:33:60:9E:C2:34:2D:31:3E:D1:91:69:B4:60 Certificate issuer: /CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Certificate serial: 010D0C9F4328584B153C19D50F2775E88B8A31B8 Authority key identifier: 81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 26304 IP address blocks: 199.202.114.0/24 maxlen: 24 199.202.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:19:d5:0f:27:75:e8:8b:8a:31:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=88070ebc-dd94-4818-a6c9-edf5247f38fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:76:46:b3:4d:5b:ae:b4:c6:d7:30:aa:bf: 7f:53:11:04:3d:bd:5e:bc:75:f7:a0:4b:b3:e1:38: 44:71:9a:8e:b9:e8:51:ac:52:8d:78:66:48:be:eb: a1:5c:51:ac:1f:3b:df:dd:69:5c:1e:23:d4:f0:34: 5e:73:77:f5:5a:12:b2:70:44:ba:bf:72:58:51:58: de:76:ff:a4:72:66:63:7b:ec:9f:bc:ad:df:07:c9: 72:99:46:4c:54:fe:ec:9c:1d:16:73:05:a7:e0:2a: 77:ce:52:36:74:27:58:47:12:ce:78:dd:d1:d1:5d: da:1e:60:6d:75:78:9e:9f:8e:f7:69:65:54:27:01: dd:12:1a:95:40:8f:a2:ec:8e:94:d6:65:8e:ba:c1: d1:18:8f:31:7c:46:b3:75:26:1f:15:18:f5:aa:94: 86:9b:f1:d9:34:d0:68:46:e4:99:f4:99:3a:26:1d: 49:bf:33:e7:a8:5b:10:49:96:52:21:d7:dc:fe:2a: 89:5f:06:81:c9:7e:7d:56:7c:01:b0:92:0b:23:f3: 8f:fd:b5:cb:4b:18:bc:6f:00:e3:1e:6e:a2:f1:47: a7:9b:60:67:6a:6d:3e:c7:81:d3:03:58:f2:55:08: 48:51:3a:bf:8b:83:c9:3b:b5:82:58:7f:49:61:6a: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4E:6A:78:B0:1A:73:33:60:9E:C2:34:2D:31:3E:D1:91:69:B4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl X509v3 Authority Key Identifier: keyid:81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer sbgp-ipAddrBlock: critical IPv4: 199.202.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:53:ea:c4:d9:e0:a7:98:73:a4:35:ad:9b:54:42:69:ab:ad: d8:f5:91:d9:fd:d6:9c:32:11:4b:1b:2a:57:eb:87:b8:32:06: ee:5d:a6:22:e0:0b:1e:f9:24:f0:89:bf:f2:56:88:12:27:ff: cd:21:12:0c:ee:0e:3b:f3:77:5d:6d:ed:8c:e7:77:ca:70:b5: 4c:51:98:6d:84:e5:2f:88:ee:96:52:f3:28:da:a8:fa:4d:55: dc:9f:9b:be:08:aa:fa:12:d9:ae:d9:55:04:d3:c8:43:b0:68: 48:aa:a9:fa:23:cf:ec:ee:45:1e:ea:92:3b:30:28:2a:5e:d1: c7:92:e6:56:83:a4:bf:07:b4:e3:68:ef:7f:01:c3:cc:27:38: c7:2f:5f:98:6e:ab:10:31:7c:40:da:78:ea:95:c2:3e:38:fe: 10:fb:22:cc:f9:a4:6b:49:66:f5:cc:a4:83:83:dd:02:4b:6b: 26:66:a5:88:f9:c2:78:0a:24:97:c9:98:4f:5b:5a:64:e4:72: e2:dc:71:b9:d1:ad:18:94:5d:c7:a4:6a:61:d4:da:ea:b4:b9: e2:93:46:4d:69:ed:1d:a5:2a:8e:12:2f:34:67:3e:55:5f:a5: 13:f9:6c:9c:e2:e6:17:73:e5:43:bc:13:b5:b5:6c:dc:05:37: 57:31:90:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBnVDyd16IuKMbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3NjAxYTUtYmQ1NS00MzBlLWJhMDktZDFkYTFlYmZj NmI4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ODgwNzBlYmMtZGQ5NC00ODE4LWE2YzktZWRmNTI0N2YzOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDF2RrNNW660xtcwqr9/UxEEPb1evHX3oEuz 4ThEcZqOuehRrFKNeGZIvuuhXFGsHzvf3WlcHiPU8DRec3f1WhKycES6v3JYUVje dv+kcmZje+yfvK3fB8lymUZMVP7snB0WcwWn4Cp3zlI2dCdYRxLOeN3R0V3aHmBt dXien473aWVUJwHdEhqVQI+i7I6U1mWOusHRGI8xfEazdSYfFRj1qpSGm/HZNNBo RuSZ9Jk6Jh1JvzPnqFsQSZZSIdfc/iqJXwaByX59VnwBsJILI/OP/bXLSxi8bwDj Hm6i8Uenm2Bnam0+x4HTA1jyVQhIUTq/i4PJO7WCWH9JYWpqEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5OaniwGnMzYJ7CNC0xPtGRabRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2 MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRhMWViZmM2YjgvYWFhMTBkZWQtYTk2Ni0z MmE0LWJkZjEtYjY3NWQ0NTFkMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3NjAxYTUtYmQ1NS00MzBlLWJh MDktZDFkYTFlYmZjNmI4LzMyNzYwMWE1LWJkNTUtNDMwZS1iYTA5LWQxZGExZWJm YzZiOC5jcmwwHwYDVR0jBBgwFoAUgbTIXm9o4xnh0ydgR4FtS/HRzCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRh MWViZmM2YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJT6sTZ4KeYc6Q1rZtUQmmrrdj1kdn91pwyEUsbKlfrh7gyBu5dpiLg Cx75JPCJv/JWiBIn/80hEgzuDjvzd11t7Yznd8pwtUxRmG2E5S+I7pZS8yjaqPpN Vdyfm74IqvoS2a7ZVQTTyEOwaEiqqfojz+zuRR7qkjswKCpe0ceS5laDpL8HtONo 738Bw8wnOMcvX5huqxAxfEDaeOqVwj44/hD7Isz5pGtJZvXMpIOD3QJLayZmpYj5 wngKJJfJmE9bWmTkcuLccbnRrRiUXcekamHU2uq0ueKTRk1p7R2lKo4SLzRnPlVf pRP5bJzi5hdz5UO8E7W1bNwFN1cxkMg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:18 2025 by rpki-client