$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/3d472e0b-7dfc-3280-8914-832ab4a13261.roa File: 3d472e0b-7dfc-3280-8914-832ab4a13261.roa (raw, json) Hash identifier: 9Z6hNQaANh3gX280BHmU2T2KUgBvFjNzNk/sK3DjUDU= Subject key identifier: C9:CA:76:1A:45:35:89:90:6E:80:52:F8:A6:63:43:16:05:55:33:D6 Certificate issuer: /CN=91139fba-bc78-41c4-a070-4191dad6091c Certificate serial: 010D0C9F4328584B02DDF72B12CE779359865D70 Authority key identifier: DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/3d472e0b-7dfc-3280-8914-832ab4a13261.roa Signing time: Thu 28 Aug 2025 23:06:33 +0000 ROA not before: Thu 28 Aug 2025 23:06:33 +0000 ROA not after: Thu 27 Nov 2025 00:06:33 +0000 asID: 18742 IP address blocks: 199.83.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:dd:f7:2b:12:ce:77:93:59:86:5d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91139fba-bc78-41c4-a070-4191dad6091c Validity Not Before: Aug 28 23:06:33 2025 GMT Not After : Nov 27 00:06:33 2025 GMT Subject: CN=6dde75b1-ee25-4d89-bbed-ad7314413a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:ea:83:40:a4:1c:4b:84:68:eb:8f:42:2f: 75:e2:72:b2:06:c8:ff:a5:21:3e:29:22:e5:cd:85: ec:0d:4b:8c:b5:49:e6:ca:16:cc:05:ed:3f:06:b0: 63:c7:64:62:16:e2:50:95:fb:37:2d:b5:27:5f:a0: f8:4f:98:e7:c0:a0:66:52:59:f4:18:6e:7c:8c:b6: ef:5a:c7:67:1c:75:94:7d:ba:46:8d:31:73:c3:98: 15:c1:70:87:e8:24:2d:93:49:80:b0:38:11:c6:6b: e4:c1:c1:37:f0:71:0a:69:91:ab:f1:d7:bd:8b:88: 9a:9c:e6:71:4d:9a:ca:10:9d:91:95:ef:9c:e1:77: a4:2d:bd:9a:b6:df:24:2a:df:a2:73:29:48:ef:13: 12:09:89:0e:04:c2:2a:e6:24:e5:e9:76:5f:7f:6f: b1:de:1a:97:77:30:df:83:26:ba:78:c2:3c:6b:27: a1:c1:ef:ca:3e:88:74:cc:ea:0e:ee:bd:24:99:86: 81:09:df:b1:47:ab:89:0e:52:1c:01:57:d1:6a:04: 1a:45:66:2a:e5:09:81:df:ee:ae:9f:53:0d:85:57: db:05:2f:af:63:89:1d:4e:12:da:e2:e5:3d:33:3e: 1d:5b:e6:d1:8a:ad:15:71:1e:3e:3c:f7:2e:5f:6d: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CA:76:1A:45:35:89:90:6E:80:52:F8:A6:63:43:16:05:55:33:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/3d472e0b-7dfc-3280-8914-832ab4a13261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl X509v3 Authority Key Identifier: keyid:DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer sbgp-ipAddrBlock: critical IPv4: 199.83.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:69:1b:3e:a0:fa:f9:a4:2e:7e:5a:ed:ef:44:60:51:18:de: f1:a2:8c:7e:2e:f6:08:75:78:8e:c9:b7:32:d4:0e:44:84:63: 0a:c4:e3:bb:e8:c4:a0:09:f5:09:17:d3:62:83:28:b1:14:92: da:27:fe:28:90:08:af:e4:c0:df:af:72:af:9c:3e:d2:f3:73: 7f:bc:17:09:d7:4c:48:af:9c:d7:5a:ca:f8:c8:20:88:ce:5b: 1a:48:5e:18:70:bb:db:ae:56:2a:b3:74:12:ce:1d:9e:70:44: 8e:3d:70:c0:75:d3:50:d8:74:32:14:a9:12:f8:a2:e2:14:a4: da:93:ef:8e:c7:c8:eb:f7:d7:e3:2c:cf:91:6b:77:24:f6:98: 26:6d:04:f4:a5:65:d7:21:25:6f:d1:3b:b0:cd:6c:13:dc:53: da:b4:9d:5c:cd:d9:70:dc:08:45:0b:83:45:8d:3e:53:0c:ad: 35:fa:7a:b3:06:16:03:c9:46:ab:a9:c1:29:70:51:4e:c5:5e: 42:04:90:04:f9:c0:e9:14:ec:d6:1c:f1:ce:6a:a4:29:83:22: d7:51:80:fc:91:b9:a8:03:72:0e:05:e7:88:1a:6c:c4:e1:04: 62:bf:52:df:41:de:c6:9f:80:3d:e6:9b:99:1a:1d:d1:23:1e: c2:b1:c7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsC3fcrEs53k1mGXXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTExMzlmYmEtYmM3OC00MWM0LWEwNzAtNDE5MWRhZDYw OTFjMB4XDTI1MDgyODIzMDYzM1oXDTI1MTEyNzAwMDYzM1owLzEtMCsGA1UEAxMk NmRkZTc1YjEtZWUyNS00ZDg5LWJiZWQtYWQ3MzE0NDEzYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo7qg0CkHEuEaOuPQi914nKyBsj/pSE+KSLl zYXsDUuMtUnmyhbMBe0/BrBjx2RiFuJQlfs3LbUnX6D4T5jnwKBmUln0GG58jLbv WsdnHHWUfbpGjTFzw5gVwXCH6CQtk0mAsDgRxmvkwcE38HEKaZGr8de9i4ianOZx TZrKEJ2Rle+c4XekLb2att8kKt+icylI7xMSCYkOBMIq5iTl6XZff2+x3hqXdzDf gya6eMI8ayehwe/KPoh0zOoO7r0kmYaBCd+xR6uJDlIcAVfRagQaRWYq5QmB3+6u n1MNhVfbBS+vY4kdThLa4uU9Mz4dW+bRiq0VcR4+PPcuX23RTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnKdhpFNYmQboBS+KZjQxYFVTPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MTEz OWZiYS1iYzc4LTQxYzQtYTA3MC00MTkxZGFkNjA5MWMvM2Q0NzJlMGItN2RmYy0z MjgwLTg5MTQtODMyYWI0YTEzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTExMzlmYmEtYmM3OC00MWM0LWEw NzAtNDE5MWRhZDYwOTFjLzkxMTM5ZmJhLWJjNzgtNDFjNC1hMDcwLTQxOTFkYWQ2 MDkxYy5jcmwwHwYDVR0jBBgwFoAU3yQ5857HiqtNk3bfux+SnxE2ryYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MTEzOWZiYS1iYzc4LTQxYzQtYTA3MC00MTkx ZGFkNjA5MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxpGz6g+vmkLn5a7e9EYFEY3vGijH4u9gh1eI7JtzLUDkSEYwrE47vo xKAJ9QkX02KDKLEUkton/iiQCK/kwN+vcq+cPtLzc3+8FwnXTEivnNdayvjIIIjO WxpIXhhwu9uuViqzdBLOHZ5wRI49cMB101DYdDIUqRL4ouIUpNqT747HyOv31+Ms z5FrdyT2mCZtBPSlZdchJW/RO7DNbBPcU9q0nVzN2XDcCEULg0WNPlMMrTX6erMG FgPJRqupwSlwUU7FXkIEkAT5wOkU7NYc8c5qpCmDItdRgPyRuagDcg4F54gabMTh BGK/Ut9B3safgD3mm5kaHdEjHsKxx0E= -----END CERTIFICATE-----Generated at Wed Oct 8 21:00:17 2025 by rpki-client