$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa File: 394f8688-f311-3954-970a-3702e916c381.roa (raw, json) Hash identifier: vssKhCqbTJZ+WMDIBp9QBTIi6O35YYbgQvPt12UZRJA= Subject key identifier: 9B:4B:CA:32:7A:F4:59:04:BC:4A:51:ED:8E:A6:6B:74:47:0B:E4:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5CB41F331CD454E3FE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 199.36.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5c:b4:1f:33:1c:d4:54:e3:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=93f627ec-2294-437e-8d9d-e8b086da1148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bf:6c:e6:f3:c6:5d:e4:5e:ef:fe:96:d5:2f: e0:14:47:cf:fb:9f:b0:b1:0b:cf:0b:53:24:8f:56: a0:e6:8d:8d:5a:b7:36:3b:cf:d4:79:27:9f:51:cc: a9:70:f9:e1:7f:3a:44:6f:1b:05:0b:e9:ea:61:e2: 07:3c:9f:f9:d1:36:31:20:96:2a:38:7e:c8:77:3f: 53:19:5d:11:f0:dd:ff:e9:dc:aa:92:f7:4c:04:1d: 1a:c1:76:fd:a3:17:4c:42:a7:a9:4f:71:7a:bd:db: 21:3f:48:98:0f:69:ed:69:9a:52:08:54:7f:0e:2f: 70:9f:4b:9d:76:3c:4f:7d:2e:22:9f:a3:49:14:78: 2c:73:13:b4:06:8b:b5:36:49:77:cf:b1:58:a7:5b: a5:ca:95:b2:8b:0b:55:c3:49:77:7d:69:e5:09:68: d6:b9:3d:54:ab:4e:3c:a3:f8:03:98:ff:24:dc:d4: b7:7d:9b:1b:b6:ad:55:ec:08:6f:bb:b0:b9:90:ed: c7:38:6d:df:87:62:96:5d:f7:9f:fc:a6:83:0c:b8: 98:c9:ec:2a:9a:fb:37:1d:51:98:be:4d:06:69:5e: cf:64:2f:35:78:e0:fd:34:a8:2f:e6:ba:3b:20:7f: e3:2c:21:83:91:fb:08:72:bf:19:7b:4f:52:54:25: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4B:CA:32:7A:F4:59:04:BC:4A:51:ED:8E:A6:6B:74:47:0B:E4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e7:81:30:a5:74:a7:ff:38:32:ea:64:67:a2:f7:07:b8:1b: 22:76:52:37:a2:4b:01:5f:be:8f:2d:f6:d3:72:26:e3:e7:34: ec:17:41:a1:69:fa:94:ad:2c:c2:6f:17:d7:fd:2c:d6:2b:7b: 87:ff:45:5f:8e:3f:d8:0d:c0:4f:c3:64:ae:d2:3b:0d:f3:7c: 25:e3:58:a1:45:07:6c:0d:a9:0d:be:64:38:62:52:01:43:e4: 6b:de:40:bd:34:9a:05:b6:a9:c1:fb:bb:bc:76:7b:93:46:8e: 88:0d:78:6d:54:1d:79:c5:42:9d:6d:fe:f0:f2:ad:3a:0d:e9: 04:ce:86:b0:5d:8c:bb:ec:62:ed:73:52:1d:ba:06:bc:3e:13: d8:55:1e:6e:ac:e0:6d:17:63:37:00:2e:53:0d:88:90:57:6a: 8d:fa:20:3a:77:01:08:f3:29:d7:4e:22:33:17:7e:c8:bc:e8: b4:de:8a:59:76:e1:7d:a7:00:09:d3:5a:51:05:7e:aa:21:d5: 5a:92:f6:9d:cc:f2:47:03:b3:9a:d2:c8:70:f3:51:c6:06:fb: c5:80:6a:9f:87:97:e6:79:5a:da:df:95:20:bb:fb:b7:48:64: 1f:9a:2b:6b:e9:17:f1:e4:4e:42:aa:b7:25:22:b1:64:03:03: 1a:a4:95:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVy0HzMc1FTj/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTNmNjI3ZWMtMjI5NC00MzdlLThkOWQtZThiMDg2ZGExMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb9s5vPGXeRe7/6W1S/gFEfP+5+wsQvPC1Mk j1ag5o2NWrc2O8/UeSefUcypcPnhfzpEbxsFC+nqYeIHPJ/50TYxIJYqOH7Idz9T GV0R8N3/6dyqkvdMBB0awXb9oxdMQqepT3F6vdshP0iYD2ntaZpSCFR/Di9wn0ud djxPfS4in6NJFHgscxO0Bou1Nkl3z7FYp1ulypWyiwtVw0l3fWnlCWjWuT1Uq048 o/gDmP8k3NS3fZsbtq1V7Ahvu7C5kO3HOG3fh2KWXfef/KaDDLiYyewqmvs3HVGY vk0GaV7PZC81eOD9NKgv5ro7IH/jLCGDkfsIcr8Ze09SVCXC2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtLyjJ69FkEvEpR7Y6ma3RHC+RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzk0Zjg2ODgtZjMxMS0z OTU0LTk3MGEtMzcwMmU5MTZjMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7ngTCldKf/ODLqZGei9we4GyJ2UjeiSwFfvo8t9tNyJuPnNOwXQaFp +pStLMJvF9f9LNYre4f/RV+OP9gNwE/DZK7SOw3zfCXjWKFFB2wNqQ2+ZDhiUgFD 5GveQL00mgW2qcH7u7x2e5NGjogNeG1UHXnFQp1t/vDyrToN6QTOhrBdjLvsYu1z Uh26Brw+E9hVHm6s4G0XYzcALlMNiJBXao36IDp3AQjzKddOIjMXfsi86LTeill2 4X2nAAnTWlEFfqoh1VqS9p3M8kcDs5rSyHDzUcYG+8WAap+Hl+Z5WtrflSC7+7dI ZB+aK2vpF/HkTkKqtyUisWQDAxqklY8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:16 2025 by rpki-client