$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa File: 9464385d-488a-39dc-81c1-88e77971887a.roa (raw, json) Hash identifier: reMK8t3p1BWeK6d1sgIZO8A1F+xjOCNshz4UzA3vdHY= Subject key identifier: 4F:90:3B:20:91:3C:C2:16:A6:DD:83:68:D7:7A:74:C6:8D:8C:ED:C5 Certificate issuer: /CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Certificate serial: 010D0C9F4328584B66B5AF86357184B302234F60 Authority key identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa Signing time: Fri 03 Oct 2025 17:26:14 +0000 ROA not before: Fri 03 Oct 2025 17:26:14 +0000 ROA not after: Thu 01 Jan 2026 18:26:14 +0000 asID: 32659 IP address blocks: 199.204.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:b5:af:86:35:71:84:b3:02:23:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Validity Not Before: Oct 3 17:26:14 2025 GMT Not After : Jan 1 18:26:14 2026 GMT Subject: CN=88a30841-fb49-4807-8001-9c88396c87f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:71:eb:16:a2:8e:79:3e:ca:c3:72:35:94: 7e:cd:68:c2:61:d0:36:50:98:44:9d:a5:b9:5e:ae: a9:f0:1b:d1:87:cd:14:29:f5:3b:76:49:39:d2:c6: f4:6b:08:54:6e:cd:f0:f0:45:2e:75:17:10:54:bb: 51:c0:55:ab:e4:8d:b1:16:55:76:ad:db:36:aa:4d: 6d:7f:0b:72:84:e6:41:98:24:21:6a:d8:ab:63:3f: 49:37:4b:ef:8a:f1:42:e0:b3:db:b5:ac:66:39:1b: 5a:d5:03:f0:c3:81:c0:ff:d0:0e:79:a8:15:81:aa: 0f:db:1e:48:73:76:12:54:3d:32:06:f0:8d:f2:4b: 7c:ff:75:be:18:89:50:52:5d:e6:cf:aa:4f:df:60: 21:b9:7a:d4:79:40:87:e9:41:79:eb:e2:9a:1e:05: 99:f7:90:d1:c7:d8:99:d4:b2:a7:c8:6a:af:a6:10: d4:82:3d:dc:dd:1b:87:71:7e:08:ff:42:8f:1d:b3: d5:b5:17:6b:13:02:fc:9f:49:39:b9:ff:a0:c7:da: 47:3c:f7:a6:c3:5e:6a:11:6a:eb:76:5c:16:46:88: b2:7f:82:13:7f:c2:4c:73:65:33:f7:9e:ee:38:1f: 3f:24:22:71:1b:5e:61:82:de:b2:f2:8a:21:15:28: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:3B:20:91:3C:C2:16:A6:DD:83:68:D7:7A:74:C6:8D:8C:ED:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl X509v3 Authority Key Identifier: keyid:66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer sbgp-ipAddrBlock: critical IPv4: 199.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:25:4a:bc:1a:f2:20:1b:f3:aa:18:4d:36:6c:c4:19:f5:64: 21:42:b6:9b:e2:c6:ae:93:d6:ce:ba:97:56:5f:ab:67:c0:10: 23:cd:39:96:89:3a:e0:d5:49:a4:16:6d:4e:da:70:5f:d4:06: 7a:86:8e:4d:76:cb:ed:ef:79:29:18:63:5e:57:f2:94:a1:49: 24:42:c7:ae:c3:73:b4:97:b7:46:11:1b:0f:71:11:f2:f8:fa: b7:5d:90:19:e5:ac:58:d3:5a:91:c4:42:8f:76:7f:e1:6c:86: ae:66:03:e1:aa:87:17:a5:4f:67:c8:f6:96:15:d8:c9:6d:35: ec:77:9b:56:17:b7:82:ee:f4:5b:f2:23:b0:65:3e:b6:b3:c0: 94:6e:95:8f:e2:23:43:d9:af:d7:51:d9:63:ef:52:ea:98:0f: a5:fd:0c:55:fb:bf:b9:f5:e6:4c:25:a2:4a:4c:da:40:e6:6a: 2b:dd:d2:1b:5a:c3:5b:60:97:94:dd:8a:41:79:e3:67:a3:f5: 13:27:88:f9:a3:51:ae:73:be:eb:33:e4:dc:12:f8:82:56:30: 71:dd:8c:3d:dd:d6:95:16:e9:0b:55:a3:bf:a2:86:07:5e:bb: bf:c3:64:81:71:5a:92:39:1f:06:0e:36:53:32:48:72:0d:53: 88:23:90:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmta+GNXGEswIjT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIwYmYxZjUtYmZkYy00ZTliLWFlYzktNDVmMTY1MjVh ZmJlMB4XDTI1MTAwMzE3MjYxNFoXDTI2MDEwMTE4MjYxNFowLzEtMCsGA1UEAxMk ODhhMzA4NDEtZmI0OS00ODA3LTgwMDEtOWM4ODM5NmM4N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbxx6xaijnk+ysNyNZR+zWjCYdA2UJhEnaW5 Xq6p8BvRh80UKfU7dkk50sb0awhUbs3w8EUudRcQVLtRwFWr5I2xFlV2rds2qk1t fwtyhOZBmCQhatirYz9JN0vvivFC4LPbtaxmORta1QPww4HA/9AOeagVgaoP2x5I c3YSVD0yBvCN8kt8/3W+GIlQUl3mz6pP32AhuXrUeUCH6UF56+KaHgWZ95DRx9iZ 1LKnyGqvphDUgj3c3RuHcX4I/0KPHbPVtRdrEwL8n0k5uf+gx9pHPPemw15qEWrr dlwWRoiyf4ITf8JMc2Uz957uOB8/JCJxG15hgt6y8oohFShvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+QOyCRPMIWpt2DaNd6dMaNjO3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MjBi ZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUyNWFmYmUvOTQ2NDM4NWQtNDg4YS0z OWRjLTgxYzEtODhlNzc5NzE4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzIwYmYxZjUtYmZkYy00ZTliLWFl YzktNDVmMTY1MjVhZmJlLzcyMGJmMWY1LWJmZGMtNGU5Yi1hZWM5LTQ1ZjE2NTI1 YWZiZS5jcmwwHwYDVR0jBBgwFoAUZsfrsk0mhhZ6d+zsS5XXMAOBXg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYx NjUyNWFmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGclSrwa8iAb86oYTTZsxBn1ZCFCtpvixq6T1s66l1Zfq2fAECPNOZaJ OuDVSaQWbU7acF/UBnqGjk12y+3veSkYY15X8pShSSRCx67Dc7SXt0YRGw9xEfL4 +rddkBnlrFjTWpHEQo92f+Fshq5mA+GqhxelT2fI9pYV2MltNex3m1YXt4Lu9Fvy I7BlPrazwJRulY/iI0PZr9dR2WPvUuqYD6X9DFX7v7n15kwlokpM2kDmaivd0hta w1tgl5TdikF542ej9RMniPmjUa5zvusz5NwS+IJWMHHdjD3d1pUW6QtVo7+ihgde u7/DZIFxWpI5HwYONlMySHINU4gjkNw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:30:35 2025 by rpki-client