$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: TshrS1n2Zsrj7xIP45YSuZKypHSsyzWBNA/YNr18ZrI= Subject key identifier: 53:D4:DE:E1:8B:57:71:95:C6:14:EC:4C:BB:2F:A8:4B:C8:A1:9F:11 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B1271658575A478F65B40EB00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:65:85:75:a4:78:f6:5b:40:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=a2831825-6234-4568-bf58-7864efab1dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:f4:58:dc:a0:5e:88:86:68:0b:c1:c8:30: 38:b8:53:7e:0e:36:b0:9c:f8:41:36:09:ed:71:8f: 32:bd:52:58:80:9f:19:89:2e:64:de:4e:7f:be:51: 53:1a:46:00:d6:f7:6f:8a:cb:19:91:ae:6f:cd:89: 19:47:53:43:59:8d:2f:b0:c5:db:7b:8f:0e:01:dc: 38:90:bd:de:66:5c:d7:ac:1e:5c:45:09:23:f2:50: 6b:73:5c:f4:ea:ae:d2:ba:a6:83:cd:7d:4e:8f:dc: c1:8e:25:5d:dd:fa:78:60:f4:7f:5c:75:2e:fd:5b: 1e:87:61:7f:c5:f0:08:23:23:07:71:0b:65:36:35: e0:37:88:c2:22:42:d0:b6:b0:88:14:2e:d5:e0:2d: 12:ac:7b:24:7d:fa:c1:3b:59:91:48:4a:7f:90:c1: a4:4f:b1:e6:a6:d9:b7:e5:37:91:37:d4:c7:8d:6c: 56:0a:88:59:a5:ce:7d:d0:6f:7d:68:a1:9f:67:ff: f9:a8:4d:2b:b7:39:ff:65:df:00:ea:af:fe:a4:ae: 98:76:ac:05:da:50:71:66:b6:d2:27:0a:e2:20:ac: c9:4c:20:51:99:2f:5f:94:06:a9:76:43:c4:4b:fa: 2c:bb:21:cf:02:c8:fb:c8:5d:df:a0:cf:05:2b:a1: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D4:DE:E1:8B:57:71:95:C6:14:EC:4C:BB:2F:A8:4B:C8:A1:9F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:41:39:46:be:85:c9:7c:72:91:76:ad:0a:f5:4f:fc:e2:5a: b1:df:a5:2e:ff:53:7c:23:45:36:f3:0f:a3:4e:bf:57:6c:f9: 5e:69:f2:50:5f:61:4e:c4:1e:35:a8:10:7c:33:a1:a5:de:15: 40:12:5c:de:bd:c4:2e:5f:80:d2:2f:f2:82:dd:9b:f0:37:51: 82:cf:16:59:9d:6d:ce:f6:50:94:7d:5a:4e:de:91:ea:2a:17: 66:c2:cd:c3:75:be:f3:b1:45:2e:31:03:75:a4:ad:89:a0:1a: 6b:3a:4d:f6:d7:88:aa:4c:6a:b5:41:18:30:57:24:a4:65:40: 7d:6d:d8:7d:0a:71:68:5d:34:a0:16:f3:10:35:66:6b:e4:ea: ef:48:c3:ec:e1:69:4e:6e:07:30:42:80:98:39:b8:51:46:d9: 7b:6d:8b:12:80:89:2b:db:4e:85:57:cc:3d:7a:94:1b:83:ce: d7:e8:f1:86:b5:09:6d:1c:9b:28:12:d9:0b:f3:a7:5f:af:3d: 99:90:a0:e4:44:73:66:40:37:20:bc:ff:17:40:e7:95:81:99: f4:5d:7f:5e:b6:36:a3:ed:87:bf:15:ca:ae:db:8f:8f:a6:99: f8:29:03:1f:6f:c4:6f:62:04:fa:ed:2c:79:d8:bf:34:33:a2: dd:ea:ad:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWWFdaR49ltA6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk YTI4MzE4MjUtNjIzNC00NTY4LWJmNTgtNzg2NGVmYWIxZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH70WNygXoiGaAvByDA4uFN+DjawnPhBNgnt cY8yvVJYgJ8ZiS5k3k5/vlFTGkYA1vdvissZka5vzYkZR1NDWY0vsMXbe48OAdw4 kL3eZlzXrB5cRQkj8lBrc1z06q7SuqaDzX1Oj9zBjiVd3fp4YPR/XHUu/Vseh2F/ xfAIIyMHcQtlNjXgN4jCIkLQtrCIFC7V4C0SrHskffrBO1mRSEp/kMGkT7Hmptm3 5TeRN9THjWxWCohZpc590G99aKGfZ//5qE0rtzn/Zd8A6q/+pK6YdqwF2lBxZrbS JwriIKzJTCBRmS9flAapdkPES/osuyHPAsj7yF3foM8FK6GmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPU3uGLV3GVxhTsTLsvqEvIoZ8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlBOUa+hcl8cpF2rQr1T/ziWrHfpS7/U3wjRTbzD6NOv1ds+V5p8lBf YU7EHjWoEHwzoaXeFUASXN69xC5fgNIv8oLdm/A3UYLPFlmdbc72UJR9Wk7ekeoq F2bCzcN1vvOxRS4xA3WkrYmgGms6TfbXiKpMarVBGDBXJKRlQH1t2H0KcWhdNKAW 8xA1Zmvk6u9Iw+zhaU5uBzBCgJg5uFFG2XttixKAiSvbToVXzD16lBuDztfo8Ya1 CW0cmygS2Qvzp1+vPZmQoOREc2ZANyC8/xdA55WBmfRdf162NqPth78Vyq7bj4+m mfgpAx9vxG9iBPrtLHnYvzQzot3qrXM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:21 2025 by rpki-client