$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c1161c2-7130-3dc7-ba49-1ebee583e1cf.roa File: 4c1161c2-7130-3dc7-ba49-1ebee583e1cf.roa (raw, json) Hash identifier: zS4E0iQQB2dHl4R4w7d5gdvj0RXDqeIJZbWzTscdc6g= Subject key identifier: 32:1C:6C:72:CD:A9:E2:C1:27:FF:A0:80:97:2F:09:0A:22:E6:FA:8F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B2FC19BA1BE65CB743A266380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c1161c2-7130-3dc7-ba49-1ebee583e1cf.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 13315 IP address blocks: 199.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:9b:a1:be:65:cb:74:3a:26:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=630a9578-cfef-4971-b7df-74f5b399210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:c9:31:88:71:08:76:cb:0c:41:37:aa:68: e8:e0:8e:25:50:fe:b6:85:94:cf:c6:4b:bd:82:a4: 4b:11:88:73:61:ae:6a:8e:19:04:6d:33:a8:d9:56: 50:0f:c4:36:69:29:0c:6d:5e:14:81:17:36:ac:fd: ba:0d:5d:c9:44:2b:9a:b6:e7:dd:30:d4:80:2f:97: 69:b2:a4:08:8a:34:20:87:f8:25:0a:c0:4a:a5:51: b2:fc:18:10:95:f8:73:cb:47:22:7d:e9:ed:44:4f: 9c:db:e9:7b:87:51:07:6f:8d:3d:20:f6:a7:69:31: 39:de:33:5a:2a:96:44:04:b6:c9:8e:86:f9:4d:0e: a7:53:94:69:ea:82:27:95:e8:a1:cd:89:1f:a2:a2: c3:10:44:9a:1c:67:83:20:09:8c:0b:85:53:d7:35: cd:f6:b4:ec:ea:fc:4f:33:3c:db:98:1d:e8:99:44: 92:86:83:0e:f8:1b:7b:1b:0b:27:ed:92:f3:39:52: b8:4c:ee:74:bf:c3:ea:42:1e:c9:d9:08:74:d1:96: 8d:e7:cf:91:de:fc:e8:43:fc:d5:12:a4:fa:40:9e: 73:d5:49:58:a3:bf:7d:3d:92:3c:db:43:37:93:7e: 2f:f2:ae:27:e9:4b:d4:04:4f:5f:f4:44:a2:1f:09: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:6C:72:CD:A9:E2:C1:27:FF:A0:80:97:2F:09:0A:22:E6:FA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c1161c2-7130-3dc7-ba49-1ebee583e1cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d6:80:17:ae:cd:c3:4c:51:28:8c:ca:59:bb:a5:d0:bd:83: b4:e9:00:18:3d:4b:b3:7e:07:f1:bf:a9:d0:19:c3:d6:ef:25: b6:14:7e:04:22:2f:7e:db:f0:41:88:cb:e5:15:8c:94:26:ef: 37:c5:2c:d2:bd:db:d9:dc:05:4d:e3:f7:7b:99:07:ce:43:15: b7:2d:e6:60:4e:57:83:96:c1:17:54:ce:5c:0b:b3:f7:94:f7: bc:4a:a7:af:1d:d2:d0:e3:ee:e4:37:42:01:81:10:ee:5c:25: f2:b3:9e:af:cd:23:3f:3f:46:94:e9:be:3c:a0:1e:b7:b6:cb: e1:15:cd:fc:9e:f2:53:41:03:c5:6b:9c:60:da:d0:d8:d3:5c: 82:a9:89:64:c1:61:65:8a:1a:53:44:17:da:46:70:8e:b9:6e: 74:9e:5f:7c:5e:5e:5c:0f:24:a2:a8:50:74:46:dd:2b:c4:16: 5b:b5:9b:77:0b:45:3e:1d:0c:9d:7c:95:15:90:5d:f9:a2:a2: b2:6e:83:c0:5f:8d:42:c7:90:9c:cf:99:95:1f:59:db:ef:5a: ef:a5:b0:f8:c6:1e:d3:ff:53:82:e5:b2:b5:8a:01:59:5c:05: 00:de:96:0c:61:b5:ee:81:1a:82:57:2d:f2:93:76:fc:4c:c4: 78:85:ee:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZuhvmXLdDomY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NjMwYTk1NzgtY2ZlZi00OTcxLWI3ZGYtNzRmNWIzOTkyMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTJMYhxCHbLDEE3qmjo4I4lUP62hZTPxku9 gqRLEYhzYa5qjhkEbTOo2VZQD8Q2aSkMbV4UgRc2rP26DV3JRCuatufdMNSAL5dp sqQIijQgh/glCsBKpVGy/BgQlfhzy0cifentRE+c2+l7h1EHb409IPanaTE53jNa KpZEBLbJjob5TQ6nU5Rp6oInleihzYkfoqLDEESaHGeDIAmMC4VT1zXN9rTs6vxP MzzbmB3omUSShoMO+Bt7Gwsn7ZLzOVK4TO50v8PqQh7J2Qh00ZaN58+R3vzoQ/zV EqT6QJ5z1UlYo799PZI820M3k34v8q4n6UvUBE9f9ESiHwlaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIcbHLNqeLBJ/+ggJcvCQoi5vqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGMxMTYxYzItNzEzMC0z ZGM3LWJhNDktMWViZWU1ODNlMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx14wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzWgBeuzcNMUSiMylm7pdC9g7TpABg9S7N+B/G/qdAZw9bvJbYUfgQi L37b8EGIy+UVjJQm7zfFLNK929ncBU3j93uZB85DFbct5mBOV4OWwRdUzlwLs/eU 97xKp68d0tDj7uQ3QgGBEO5cJfKznq/NIz8/RpTpvjygHre2y+EVzfye8lNBA8Vr nGDa0NjTXIKpiWTBYWWKGlNEF9pGcI65bnSeX3xeXlwPJKKoUHRG3SvEFlu1m3cL RT4dDJ18lRWQXfmiorJug8BfjULHkJzPmZUfWdvvWu+lsPjGHtP/U4LlsrWKAVlc BQDelgxhte6BGoJXLfKTdvxMxHiF7u8= -----END CERTIFICATE-----Generated at Thu Sep 18 00:16:23 2025 by rpki-client