$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa File: 67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa (raw, json) Hash identifier: bzzZYygyoVD5HHyVXKNualzCZXfgns5lAik2gKTX97M= Subject key identifier: 02:3B:9E:DE:84:6B:49:C3:A3:71:43:9F:16:7F:C2:6A:5A:CE:B9:90 Certificate issuer: /CN=c743b329-2385-4bb0-899d-c1639569faa3 Certificate serial: 010D0C9F4328584BA0D25015D093D64D0CB19300 Authority key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 399199 IP address blocks: 172.99.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:15:d0:93:d6:4d:0c:b1:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c743b329-2385-4bb0-899d-c1639569faa3 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=e0f863e4-b823-4e54-a51b-e9f9e821f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:22:1d:13:9a:41:ba:a5:de:09:db:e5:36: e4:7c:1a:61:b2:6b:ea:82:19:f5:e0:51:c7:64:9b: f8:98:c7:3a:74:81:18:a1:cf:80:25:75:f9:03:c5: 5e:d3:70:91:ae:ed:f0:70:2f:40:75:8e:73:94:eb: 9f:e6:ab:68:37:cd:87:6a:a5:74:af:53:fd:20:46: bb:bc:2e:92:2d:45:58:39:1f:33:c4:a4:35:97:61: 1f:56:e0:61:09:b5:42:c0:81:29:bb:57:03:ce:4b: 09:f6:66:e7:39:dc:f5:ad:4d:af:95:ef:1d:f9:e4: 7c:5c:19:dd:4e:40:0a:02:7b:fa:14:85:b5:15:2b: 28:22:4a:46:df:26:14:f6:45:d8:52:9d:5e:4c:8a: 51:f2:2b:e4:0f:4f:47:a5:41:59:f7:d5:12:d9:db: 84:1c:3c:ae:5e:5f:8a:05:89:ef:9d:de:09:52:4a: 3a:14:91:1a:c9:0e:2e:47:e3:47:2b:9e:cd:d3:66: 2c:d7:87:25:f6:60:8d:4c:c0:9a:94:43:9d:81:67: b6:03:9f:dd:46:3e:35:37:97:b4:ab:07:10:54:dc: 11:0c:9c:93:1f:a9:b7:d6:32:3c:0c:18:f2:aa:f6: ea:56:b6:1b:f9:d1:06:21:58:5e:2b:6c:25:58:d0: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:9E:DE:84:6B:49:C3:A3:71:43:9F:16:7F:C2:6A:5A:CE:B9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl X509v3 Authority Key Identifier: keyid:9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:91:c1:3e:f0:1c:8e:ed:3b:70:e5:e1:6f:9c:cb:7d:e7: 49:6c:0a:ce:13:3f:d5:70:a7:df:a5:05:fc:e6:5b:07:92:7b: 09:2a:59:e7:bd:64:8c:b0:5c:b5:93:43:d6:1d:6d:89:d8:81: 8a:6d:d5:44:92:f9:e3:83:02:78:6d:49:98:09:6b:00:20:8f: 4e:e5:d7:ec:ef:55:14:28:dc:ff:b5:0d:e5:c5:b8:e6:6a:29: 0d:f6:0b:6a:0f:32:3c:54:f1:88:80:52:cd:9f:cd:52:4c:65: 56:79:e2:10:cf:28:57:43:68:27:90:2a:55:ec:af:46:f7:a6: 1f:0f:79:ba:b9:e2:86:97:7a:7e:a4:36:cc:8a:50:f9:34:ec: 51:b0:64:7c:72:54:6b:0b:26:b7:3f:0f:e4:14:92:c8:48:71: 85:79:bb:ee:29:e1:bf:77:65:9d:e1:01:1c:99:fd:9d:97:05: 0f:aa:db:18:10:56:d9:c7:bd:8e:ef:39:16:aa:f5:25:4f:5a: 87:c8:6e:59:03:08:4e:b5:bd:bc:a8:de:4c:39:13:54:c1:65: f9:82:3f:92:f6:9b:4a:3b:3e:e4:99:da:99:47:e2:9f:20:31: a4:db:88:61:50:0f:71:7a:8f:89:48:24:d2:4d:0f:24:58:05: e1:37:75:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lAV0JPWTQyxkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc0M2IzMjktMjM4NS00YmIwLTg5OWQtYzE2Mzk1Njlm YWEzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZTBmODYzZTQtYjgyMy00ZTU0LWE1MWItZTlmOWU4MjFmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcAiHROaQbql3gnb5TbkfBphsmvqghn14FHH ZJv4mMc6dIEYoc+AJXX5A8Ve03CRru3wcC9AdY5zlOuf5qtoN82HaqV0r1P9IEa7 vC6SLUVYOR8zxKQ1l2EfVuBhCbVCwIEpu1cDzksJ9mbnOdz1rU2vle8d+eR8XBnd TkAKAnv6FIW1FSsoIkpG3yYU9kXYUp1eTIpR8ivkD09HpUFZ99US2duEHDyuXl+K BYnvnd4JUko6FJEayQ4uR+NHK57N02Ys14cl9mCNTMCalEOdgWe2A5/dRj41N5e0 qwcQVNwRDJyTH6m31jI8DBjyqvbqVrYb+dEGIVheK2wlWNA8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI7nt6Ea0nDo3FDnxZ/wmpazrmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQz YjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2OWZhYTMvNjdjODExYzQtYzJhYy0z MDQ4LTkxYTAtZTMzZGM5ZjQwNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzc0M2IzMjktMjM4NS00YmIwLTg5 OWQtYzE2Mzk1NjlmYWEzL2M3NDNiMzI5LTIzODUtNGJiMC04OTlkLWMxNjM5NTY5 ZmFhMy5jcmwwHwYDVR0jBBgwFoAUm9dfZrc8gIlJsko2W1fSWA/4OgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYz OTU2OWZhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGCkcE+8ByO7Ttw5eFvnMt950lsCs4TP9Vwp9+lBfzmWweSewkqWee9 ZIywXLWTQ9YdbYnYgYpt1USS+eODAnhtSZgJawAgj07l1+zvVRQo3P+1DeXFuOZq KQ32C2oPMjxU8YiAUs2fzVJMZVZ54hDPKFdDaCeQKlXsr0b3ph8Pebq54oaXen6k NsyKUPk07FGwZHxyVGsLJrc/D+QUkshIcYV5u+4p4b93ZZ3hARyZ/Z2XBQ+q2xgQ VtnHvY7vORaq9SVPWofIblkDCE61vbyo3kw5E1TBZfmCP5L2m0o7PuSZ2plH4p8g MaTbiGFQD3F6j4lIJNJNDyRYBeE3de0= -----END CERTIFICATE-----Generated at Sun Oct 26 09:23:16 2025 by rpki-client