$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db220203-7dfc-34d4-9f08-95ba3ef16ba2.roa File: db220203-7dfc-34d4-9f08-95ba3ef16ba2.roa (raw, json) Hash identifier: Do831QCzqsBbyz6f4nvcy4z+0/zvkED8T6vZOvcslMM= Subject key identifier: CF:B5:C7:8C:CE:E8:A0:90:33:CB:3E:AA:C4:2F:AC:0F:44:9A:48:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927F771A6AF29BF403EE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db220203-7dfc-34d4-9f08-95ba3ef16ba2.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 199.27.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7f:77:1a:6a:f2:9b:f4:03:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=54360439-7656-40d7-b107-b4fcac11095f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a1:4f:fd:c0:e2:39:d7:07:8f:c1:20:70:b5: 34:c8:a2:95:9a:b6:33:17:62:2e:c8:3f:ea:98:9a: a7:01:be:f7:31:17:d9:18:61:52:5e:1e:18:59:80: a9:f5:8e:dd:3e:29:1c:08:65:89:df:7d:11:d6:48: f3:9c:31:82:55:ba:9b:ad:d8:1b:35:e4:24:79:66: 49:b0:30:d5:62:69:82:c6:be:26:69:8c:c7:58:51: 4c:50:53:0d:b5:e4:cd:30:1c:15:dd:31:4c:6d:77: ab:ef:33:91:31:b6:7b:7d:41:c4:dd:0a:cc:6c:12: f2:95:19:7a:49:51:58:48:27:50:6f:8a:48:e0:e6: 45:50:b4:95:85:d4:21:3b:05:0b:99:92:d8:a3:fe: b2:71:bf:3b:c3:4d:b7:a2:15:c0:75:51:b4:27:01: 88:2b:54:6f:57:3d:dd:71:88:35:5e:0d:48:c1:d1: ed:76:18:4a:aa:de:32:77:1b:56:a2:65:f7:aa:71: d4:71:5a:5f:e7:e5:48:ed:bd:ac:75:3e:ef:f4:fd: 4f:8d:16:92:16:8d:57:7d:da:ca:39:2d:5e:58:eb: f8:63:84:03:6e:2e:dc:2e:7e:ec:07:d7:b4:d9:b9: 51:4b:f9:dc:17:99:82:53:74:1a:68:18:4b:10:5c: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B5:C7:8C:CE:E8:A0:90:33:CB:3E:AA:C4:2F:AC:0F:44:9A:48:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db220203-7dfc-34d4-9f08-95ba3ef16ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 199.27.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d0:9b:6d:25:7a:45:40:5e:90:c0:59:da:a2:85:16:f4:a0: 2d:96:a9:7c:d3:6d:80:04:c3:61:db:36:3d:24:25:a4:6a:ab: fb:c3:25:dd:a9:cf:eb:0d:b5:ec:ae:8b:77:a9:73:82:9a:43: 5e:5f:e4:27:10:88:53:10:da:43:a1:28:35:33:1e:bb:d2:07: 77:d3:b4:f0:a9:6b:8b:bc:cd:88:eb:5c:02:a7:b9:a2:ea:ea: 03:4e:fc:d8:6c:e0:58:04:60:00:db:f0:dd:62:f0:49:27:85: ba:f4:e2:03:1d:59:f7:8d:42:3f:c1:0d:df:30:74:ac:22:35: e7:8b:45:35:25:18:8a:09:5d:8a:ec:51:ef:63:ef:93:11:6f: 55:90:02:ca:d2:2d:65:0a:b2:73:f1:45:06:1f:36:20:06:9e: 70:14:db:48:2e:b2:d6:bd:5d:1d:34:56:01:97:72:37:e8:e9: 82:a6:c4:0d:cc:eb:9c:ba:78:91:e1:ae:ac:35:1e:03:65:f4: 59:80:35:37:76:38:fb:95:8e:89:25:53:32:84:20:dd:78:51: 81:e0:17:d2:82:12:f5:70:15:b3:05:af:2c:30:cf:be:ec:65: 0e:e0:4e:73:f3:d9:c0:7a:ec:f8:c4:ad:dd:6c:13:90:1d:f6: 30:c1:ee:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn93Gmrym/QD7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NTQzNjA0MzktNzY1Ni00MGQ3LWIxMDctYjRmY2FjMTEwOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqFP/cDiOdcHj8EgcLU0yKKVmrYzF2IuyD/q mJqnAb73MRfZGGFSXh4YWYCp9Y7dPikcCGWJ330R1kjznDGCVbqbrdgbNeQkeWZJ sDDVYmmCxr4maYzHWFFMUFMNteTNMBwV3TFMbXer7zORMbZ7fUHE3QrMbBLylRl6 SVFYSCdQb4pI4OZFULSVhdQhOwULmZLYo/6ycb87w023ohXAdVG0JwGIK1RvVz3d cYg1Xg1IwdHtdhhKqt4ydxtWomX3qnHUcVpf5+VI7b2sdT7v9P1PjRaSFo1XfdrK OS1eWOv4Y4QDbi7cLn7sB9e02blRS/ncF5mCU3QaaBhLEFxNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+1x4zO6KCQM8s+qsQvrA9EmkgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGIyMjAyMDMtN2RmYy0z NGQ0LTlmMDgtOTViYTNlZjE2YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjQm20lekVAXpDAWdqihRb0oC2WqXzTbYAEw2HbNj0kJaRqq/vDJd2p z+sNteyui3epc4KaQ15f5CcQiFMQ2kOhKDUzHrvSB3fTtPCpa4u8zYjrXAKnuaLq 6gNO/Nhs4FgEYADb8N1i8Eknhbr04gMdWfeNQj/BDd8wdKwiNeeLRTUlGIoJXYrs Ue9j75MRb1WQAsrSLWUKsnPxRQYfNiAGnnAU20gusta9XR00VgGXcjfo6YKmxA3M 65y6eJHhrqw1HgNl9FmANTd2OPuVjoklUzKEIN14UYHgF9KCEvVwFbMFrywwz77s ZQ7gTnPz2cB67PjErd1sE5Ad9jDB7gk= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:47 2025 by rpki-client