$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa File: fba1d9a3-6280-3112-a073-052ae676ccbd.roa (raw, json) Hash identifier: pJYWF+LWDAb25M+Yv+CcDTV8G7FkTGo/EVqq1jhBcV4= Subject key identifier: C2:27:1F:9B:92:2D:3A:89:2F:FC:14:07:C5:1A:5E:F6:B6:56:F4:17 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584B3F1C57B693727C82D8876100 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 33164 IP address blocks: 199.47.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:57:b6:93:72:7c:82:d8:87:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=3df8d7cb-16ad-4cd9-ab20-423189d6d2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:d2:fb:ce:36:ea:52:c3:49:0a:08:0c:d2: 5b:73:67:82:e2:42:c1:2c:c9:8e:5e:6b:bb:d9:cc: 4b:4d:f6:59:37:b3:7a:8a:4d:df:3b:41:89:fb:e4: f8:b4:82:e5:31:2c:20:2d:d5:a1:10:d8:e5:03:4f: d1:e8:9e:e7:6a:25:28:fc:d9:a7:40:45:0c:b1:8e: 3d:26:bf:a1:0d:66:bb:7d:a6:d3:b6:a1:8b:e8:da: b6:e7:33:a7:9a:2c:b6:b2:48:99:4a:09:40:38:75: 3e:2c:db:3b:f4:03:96:a1:bc:62:3e:8f:bf:a5:ef: d6:8c:35:27:13:0d:90:3f:c5:06:3f:bf:c5:f3:48: 0c:62:87:78:fa:9e:10:79:92:1b:25:1e:37:43:70: 73:1d:6e:81:33:b5:df:78:e2:fa:c8:51:93:31:d9: 8d:e6:10:7f:a2:bd:ea:ce:04:88:67:c7:fe:a7:f7: 24:ef:9b:c8:97:b9:94:e9:3d:31:fe:3a:71:6f:ca: 14:46:27:d9:3a:bf:a9:cd:6e:fe:e0:42:ba:0a:01: 95:5b:aa:99:c0:08:a0:0f:9d:bb:f5:c6:3e:4b:79: db:0f:c8:77:c7:81:04:1b:e5:bb:87:a1:b4:5e:05: 09:98:9a:8b:77:42:c8:05:ba:14:5d:93:8d:f3:02: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:1F:9B:92:2D:3A:89:2F:FC:14:07:C5:1A:5E:F6:B6:56:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fba1d9a3-6280-3112-a073-052ae676ccbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 199.47.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9c:50:a3:70:c3:d8:7b:1d:82:58:72:02:0d:26:ce:27:6f: ed:ce:9c:d4:0d:6f:fa:f5:e3:76:a8:1d:c9:71:d0:87:a4:85: c9:98:52:0e:c3:9a:85:ea:0c:dd:d1:4e:d5:bc:d4:f8:eb:de: 3c:df:cd:16:7a:5c:f2:82:52:14:1d:9b:f0:28:50:3a:46:71: 8a:8b:eb:3d:dd:97:f9:32:a2:16:cd:14:6f:50:c7:86:13:94: ea:1c:35:55:16:d5:53:07:0d:e4:cb:95:6d:0e:c4:1e:38:6e: 4a:c2:53:9d:f3:9f:c7:dd:82:ae:73:2d:7f:24:d2:81:0c:8f: 4f:d6:38:d0:5c:0a:f7:39:5c:9b:59:32:d8:e4:aa:2b:9c:4c: 7f:d7:a3:58:83:8a:cc:bf:e7:80:57:cc:d7:6c:7a:fc:b7:b0: 45:3c:bd:66:12:36:08:14:c1:5b:d2:25:f9:c8:16:47:e1:92: d5:a5:7d:71:a0:a1:d0:4c:d2:2f:da:b1:6f:d6:08:cf:43:c8: 61:52:3f:34:c5:04:e9:55:41:38:85:f7:bf:23:b4:e9:fa:f3: a3:45:f6:0c:99:05:48:b7:e4:20:59:54:b2:ed:d3:30:e5:09: d7:03:18:15:1e:ad:b7:8d:3f:57:0c:3c:94:8c:57:56:52:ed: 8c:f6:2c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFe2k3J8gtiHYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk M2RmOGQ3Y2ItMTZhZC00Y2Q5LWFiMjAtNDIzMTg5ZDZkMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp87S+8426lLDSQoIDNJbc2eC4kLBLMmOXmu7 2cxLTfZZN7N6ik3fO0GJ++T4tILlMSwgLdWhENjlA0/R6J7naiUo/NmnQEUMsY49 Jr+hDWa7fabTtqGL6Nq25zOnmiy2skiZSglAOHU+LNs79AOWobxiPo+/pe/WjDUn Ew2QP8UGP7/F80gMYod4+p4QeZIbJR43Q3BzHW6BM7XfeOL6yFGTMdmN5hB/or3q zgSIZ8f+p/ck75vIl7mU6T0x/jpxb8oURifZOr+pzW7+4EK6CgGVW6qZwAigD527 9cY+S3nbD8h3x4EEG+W7h6G0XgUJmJqLd0LIBboUXZON8wJi9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMInH5uSLTqJL/wUB8UaXva2VvQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvZmJhMWQ5YTMtNjI4MC0z MTEyLWEwNzMtMDUyYWU2NzZjY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABacUKNww9h7HYJYcgINJs4nb+3OnNQNb/r143aoHclx0IekhcmYUg7D moXqDN3RTtW81Pjr3jzfzRZ6XPKCUhQdm/AoUDpGcYqL6z3dl/kyohbNFG9Qx4YT lOocNVUW1VMHDeTLlW0OxB44bkrCU53zn8fdgq5zLX8k0oEMj0/WONBcCvc5XJtZ MtjkqiucTH/Xo1iDisy/54BXzNdsevy3sEU8vWYSNggUwVvSJfnIFkfhktWlfXGg odBM0i/asW/WCM9DyGFSPzTFBOlVQTiF978jtOn686NF9gyZBUi35CBZVLLt0zDl CdcDGBUerbeNP1cMPJSMV1ZS7Yz2LCM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:16 2025 by rpki-client