$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa File: 252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa (raw, json) Hash identifier: mbIP0cEnjE+cFDNL37AHiPr5hzEGNYcSyYkx7ege1Lk= Subject key identifier: 8A:F5:B4:16:A2:B6:D9:92:6E:2F:7B:C1:7D:A8:33:06:79:3D:C5:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1371D4263BA69F28EA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 199.36.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:13:71:d4:26:3b:a6:9f:28:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=85da580a-f766-43dd-8054-a89efe01c23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:90:37:cb:8a:5b:b3:d8:49:c9:49:1f:9e: ed:25:1c:65:a3:cb:41:fc:39:da:04:93:91:3a:fe: 4c:b8:0a:0a:e8:8e:bf:a1:56:d0:ab:33:05:1f:a6: 91:4a:83:af:1b:70:41:2f:58:d9:30:10:5f:d5:87: d3:51:d3:00:eb:4a:49:a0:db:1d:ef:96:1a:10:07: cd:68:f9:e4:e6:2f:cf:20:1d:ce:92:09:6b:c4:d2: 1f:67:e9:58:12:27:c9:86:f7:9a:c2:8f:70:74:72: 79:4f:23:6c:7e:d5:3f:18:33:8c:c2:40:50:6b:f4: 86:1e:19:78:de:36:c8:09:a3:c1:bd:7f:4c:ed:8b: f7:f8:47:2b:a6:05:32:67:78:b4:8d:bd:d1:1b:7c: b2:e3:99:29:fe:3e:31:da:af:67:f0:18:89:68:54: 08:00:7e:54:7a:91:83:c5:b7:f7:6b:77:7a:60:06: 7c:b6:86:a9:70:90:cb:20:a6:70:c7:77:52:6d:32: ed:47:2d:9a:e5:61:d8:da:73:c8:6d:8f:c3:aa:d8: a3:d9:a5:7a:6e:90:50:67:5d:6d:ba:da:21:56:58: 0d:ff:67:1b:30:fd:96:88:4a:f7:25:93:be:81:ec: 14:09:9e:44:8d:f0:de:d1:69:7b:3e:5b:12:bc:89: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:B4:16:A2:B6:D9:92:6E:2F:7B:C1:7D:A8:33:06:79:3D:C5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0c:7c:51:0a:58:3f:3a:c5:83:c6:30:03:83:f0:8b:eb:e2: ca:f2:b4:33:b3:53:e2:82:6b:8a:b5:b8:1b:b4:67:06:76:76: de:f1:ea:5c:a3:fc:d8:f1:64:e2:10:67:f8:77:e5:97:56:8d: 83:44:a7:5c:b3:73:f8:74:ae:ef:16:c2:ea:ee:1f:13:9b:77: 5b:41:d1:93:c8:b6:da:7e:8c:cd:9c:c1:9a:62:3c:be:4f:e4: 1e:5c:b8:c5:46:65:45:d5:2d:98:0f:81:3b:dc:a9:69:dd:79: 80:5b:60:89:ab:dd:ba:5f:fd:c7:85:0e:7b:1f:ed:7f:b2:5f: e9:7f:35:11:6d:74:c1:5b:3f:ff:ec:44:3f:17:d6:85:78:01: ef:52:7f:74:9d:d8:de:07:4b:f1:fb:a6:3f:08:e2:1b:2c:11: 68:db:20:b1:9f:47:e9:e0:dc:23:86:23:81:21:cb:54:d0:60: 19:57:0d:74:f7:54:06:34:1f:5d:b8:b2:24:20:2a:68:ae:3a: e7:ef:19:28:ee:53:4d:b7:be:93:70:15:e0:a7:99:ca:89:6f: 01:d1:4f:68:96:11:d5:90:16:d8:60:c7:d0:83:8b:93:b9:d1: 53:13:6f:80:bb:7b:9e:d8:36:1d:ab:45:35:db:e8:83:32:1d: 77:f3:bc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhNx1CY7pp8o6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODVkYTU4MGEtZjc2Ni00M2RkLTgwNTQtYTg5ZWZlMDFjMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOKQN8uKW7PYSclJH57tJRxlo8tB/DnaBJOR Ov5MuAoK6I6/oVbQqzMFH6aRSoOvG3BBL1jZMBBf1YfTUdMA60pJoNsd75YaEAfN aPnk5i/PIB3OkglrxNIfZ+lYEifJhveawo9wdHJ5TyNsftU/GDOMwkBQa/SGHhl4 3jbICaPBvX9M7Yv3+EcrpgUyZ3i0jb3RG3yy45kp/j4x2q9n8BiJaFQIAH5UepGD xbf3a3d6YAZ8toapcJDLIKZwx3dSbTLtRy2a5WHY2nPIbY/Dqtij2aV6bpBQZ11t utohVlgN/2cbMP2WiEr3JZO+gewUCZ5EjfDe0Wl7PlsSvIm9pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr1tBaittmSbi97wX2oMwZ5PcVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjUyZjNhZTgtN2FlYS0z OTg5LThiNjItZjFiYmU1YzljM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgMfFEKWD86xYPGMAOD8Ivr4srytDOzU+KCa4q1uBu0ZwZ2dt7x6lyj /NjxZOIQZ/h35ZdWjYNEp1yzc/h0ru8WwuruHxObd1tB0ZPIttp+jM2cwZpiPL5P 5B5cuMVGZUXVLZgPgTvcqWndeYBbYImr3bpf/ceFDnsf7X+yX+l/NRFtdMFbP//s RD8X1oV4Ae9Sf3Sd2N4HS/H7pj8I4hssEWjbILGfR+ng3COGI4Ehy1TQYBlXDXT3 VAY0H124siQgKmiuOufvGSjuU023vpNwFeCnmcqJbwHRT2iWEdWQFthgx9CDi5O5 0VMTb4C7e57YNh2rRTXb6IMyHXfzvCU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:01 2025 by rpki-client