$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json) Hash identifier: gzstrauaWrINtyic5moPeMRQht+t6D5HLViMta2r/+Y= Subject key identifier: 6D:E3:0A:4D:6E:95:E3:0E:8C:D4:DD:40:88:4D:8B:48:31:AA:DE:7E Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584B1806E6656A213474E4D2C900 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 3855 IP address blocks: 199.96.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e6:65:6a:21:34:74:e4:d2:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=347ea358-f80a-49a2-874b-ce7b1fa8e2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:d2:e7:b8:92:34:7d:6d:56:bd:75:f4:77: 02:eb:5f:fc:6f:b3:68:7e:ea:d2:3f:4d:9f:5a:78: 7f:ea:0d:29:04:ec:ff:b8:76:b1:ff:5e:bf:16:48: 1d:03:b7:f2:96:50:73:b1:45:e2:7b:4a:6f:d7:6b: 7b:7d:bd:59:5b:c8:d7:a3:ad:2c:eb:0e:8d:62:96: cb:35:f7:c9:ce:78:4e:22:c5:bb:db:29:7d:0c:c4: 7b:a9:c5:cd:b1:a8:2e:c9:ca:5a:fb:1a:03:de:a1: f6:d6:52:6c:70:84:91:f3:b7:85:1f:e1:0e:49:a5: f9:de:26:15:c0:cf:ae:dd:fe:40:00:51:45:f2:73: 3c:69:68:d6:8a:e7:7f:d5:8b:77:5a:a6:f3:91:5c: e5:38:71:0d:2e:ee:d5:2d:34:f6:fb:13:bc:6f:50: 4b:9b:7c:49:2f:bd:59:7c:46:e2:b5:df:c9:60:84: 9a:2c:02:95:ab:0f:67:5d:2a:1e:37:fe:1c:d8:77: 1c:4a:c0:6c:a1:77:8b:11:bd:5d:79:23:6b:b6:f4: c3:79:10:41:02:26:fc:7d:3b:f8:2c:1d:ca:0f:5d: 87:58:64:05:85:0a:4a:99:21:f9:80:be:2b:be:fa: 19:37:6a:b7:6c:81:c4:2f:63:02:1c:e3:38:1a:72: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:0A:4D:6E:95:E3:0E:8C:D4:DD:40:88:4D:8B:48:31:AA:DE:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv4: 199.96.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a4:e1:ee:38:4c:a7:70:5a:75:72:62:b8:c1:3c:5f:c4:38: e8:66:46:52:a9:f3:6b:6e:ff:5a:7b:c7:fc:ef:cb:34:80:5a: 1a:5d:eb:71:e9:60:c2:6f:b5:c6:d8:16:1c:39:f9:40:3c:77: 47:c5:2c:27:98:11:62:10:4c:83:70:2c:a8:a2:55:5c:e2:83: 8a:a3:9a:6e:8e:c1:13:90:8c:bf:dc:33:88:3c:54:40:54:5b: 28:39:bc:76:32:2f:02:b1:7c:9e:2c:65:fe:92:7f:90:77:2a: 1a:77:ce:d3:2b:8d:c4:dd:1b:cf:61:a1:72:df:16:2d:a3:eb: 3e:c9:48:21:b9:b3:12:e3:87:5e:e9:5c:a5:6a:2f:43:2f:41: 76:42:c4:a9:53:4f:d6:5e:b1:39:d7:fa:96:3c:a8:53:45:f4: bc:fe:0a:b2:fc:ad:fe:3a:b0:b0:c8:fb:b2:e8:d1:ce:96:dc: f4:f3:f8:b3:ca:ff:d1:6a:d1:f0:f4:6e:fa:70:48:70:60:ac: 29:41:a9:f5:a3:85:3a:bb:52:52:fe:68:e1:98:09:af:c8:05: ca:1a:15:3d:d7:cc:46:7d:4b:ab:c1:a6:9b:eb:df:87:9d:2e: a3:3f:1b:ed:fa:e4:10:ac:d7:66:3b:8a:d7:fa:1c:e3:fc:2d: 34:d5:27:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuZlaiE0dOTSyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzQ3ZWEzNTgtZjgwYS00OWEyLTg3NGItY2U3YjFmYThlMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkjS57iSNH1tVr119HcC61/8b7NofurSP02f Wnh/6g0pBOz/uHax/16/FkgdA7fyllBzsUXie0pv12t7fb1ZW8jXo60s6w6NYpbL NffJznhOIsW72yl9DMR7qcXNsaguycpa+xoD3qH21lJscISR87eFH+EOSaX53iYV wM+u3f5AAFFF8nM8aWjWiud/1Yt3WqbzkVzlOHENLu7VLTT2+xO8b1BLm3xJL71Z fEbitd/JYISaLAKVqw9nXSoeN/4c2HccSsBsoXeLEb1deSNrtvTDeRBBAib8fTv4 LB3KD12HWGQFhQpKmSH5gL4rvvoZN2q3bIHEL2MCHOM4GnLuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3jCk1uleMOjNTdQIhNi0gxqt5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACik4e44TKdwWnVyYrjBPF/EOOhmRlKp82tu/1p7x/zvyzSAWhpd63Hp YMJvtcbYFhw5+UA8d0fFLCeYEWIQTINwLKiiVVzig4qjmm6OwROQjL/cM4g8VEBU Wyg5vHYyLwKxfJ4sZf6Sf5B3Khp3ztMrjcTdG89hoXLfFi2j6z7JSCG5sxLjh17p XKVqL0MvQXZCxKlTT9ZesTnX+pY8qFNF9Lz+CrL8rf46sLDI+7Lo0c6W3PTz+LPK /9Fq0fD0bvpwSHBgrClBqfWjhTq7UlL+aOGYCa/IBcoaFT3XzEZ9S6vBppvr34ed LqM/G+365BCs12Y7itf6HOP8LTTVJ/g= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:37 2025 by rpki-client