$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ace4c63a-8f3b-36b7-930b-a2b763693827.roa File: ace4c63a-8f3b-36b7-930b-a2b763693827.roa (raw, json) Hash identifier: GgnpobRI0Ee74i5NMaEfYOFO5FD1ObFFkr6DAxic2Wo= Subject key identifier: 5F:22:43:00:3B:AA:C3:11:48:21:2A:E6:43:61:8C:C2:47:F2:A5:7E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D1C4EDCAF4E5E6D4A0300 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ace4c63a-8f3b-36b7-930b-a2b763693827.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 199.10.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1c:4e:dc:af:4e:5e:6d:4a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=eba98bd9-deb1-4663-b1e1-f081b73a7949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:b6:ea:4a:dd:89:97:01:78:bc:bc:67:da: 10:67:e4:ac:9f:0a:3c:be:9c:00:ca:27:7e:8c:91: 69:b4:3b:e0:82:4e:4b:16:99:d1:46:15:9b:29:c0: 0b:30:ab:aa:f6:10:f9:12:0b:2c:3c:d1:b9:88:37: 2b:43:be:30:dc:ca:48:58:9b:66:05:47:1a:f6:a4: e3:0b:99:fc:4b:f0:87:cb:cb:6b:a5:bb:25:35:80: a3:2a:d5:78:cf:90:40:6c:ab:89:fc:58:ac:a4:c7: b5:d5:8b:82:45:df:4b:fb:37:8a:39:8c:ac:05:31: 02:ab:c0:68:93:80:f3:e8:ad:a6:05:c6:62:b7:0a: 47:dd:c6:5e:37:52:b1:57:9b:41:6e:64:b7:a2:f6: 60:34:de:1d:52:11:a0:fc:8b:35:d2:af:56:58:64: e5:19:8c:fc:f6:6b:a7:69:e8:4e:a6:d7:ab:1d:70: de:fc:57:94:eb:34:4e:1f:a3:94:5e:6c:7b:c1:2e: b7:2c:26:54:84:a5:1b:91:ee:37:dd:62:b8:1b:4f: 86:15:28:5b:d3:66:c5:0c:c7:2b:d4:96:c7:26:4d: 79:b3:08:92:00:fd:1d:f3:b3:f8:32:86:28:d7:41: 80:87:7a:55:12:4a:c6:85:c3:84:4f:47:e6:bf:54: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:22:43:00:3B:AA:C3:11:48:21:2A:E6:43:61:8C:C2:47:F2:A5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ace4c63a-8f3b-36b7-930b-a2b763693827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 199.10.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:52:63:fe:81:bb:23:ca:d5:d9:06:65:36:80:65:42:b1:d5: 39:ed:6d:9d:a9:cf:32:5a:02:43:8b:bf:5f:af:91:37:31:55: df:de:93:2f:5a:f0:b0:cb:13:cd:45:41:5a:e4:be:8d:26:c1: 50:12:26:e6:a3:9b:46:a6:1f:fc:b6:bd:f5:c1:ef:46:af:9f: a5:43:99:8a:83:7e:44:63:9c:72:66:3d:d3:3e:b9:29:4e:24: 51:c4:a9:23:a7:62:14:56:5d:6e:27:ab:11:ce:ed:69:4e:12: ab:12:2d:37:ad:67:ee:11:6b:ed:c8:6c:17:05:9a:7f:20:ce: 96:47:8e:b5:93:e9:8e:45:63:42:79:dc:30:9c:78:b7:2b:da: cd:8c:1e:bd:a8:50:e4:11:aa:17:2e:c6:22:b7:de:e5:c3:9f: de:2b:07:76:ac:4f:33:8a:29:7f:ce:77:18:16:ad:42:e6:0c: fd:e2:d2:58:cb:06:f6:61:28:27:d3:4c:bb:df:b2:cd:ba:10: a7:d4:5b:04:64:43:82:21:1e:13:4d:34:94:be:8a:7a:19:85: ce:f6:67:55:ab:d4:18:1b:00:0c:c6:3f:cf:69:7c:36:1a:7e: 30:be:8f:8e:47:21:96:28:2b:e7:3b:81:2d:f8:d5:c2:0c:9e: 5f:9b:e0:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRxO3K9OXm1KAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWJhOThiZDktZGViMS00NjYzLWIxZTEtZjA4MWI3M2E3OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/a26krdiZcBeLy8Z9oQZ+Ssnwo8vpwAyid+ jJFptDvggk5LFpnRRhWbKcALMKuq9hD5EgssPNG5iDcrQ74w3MpIWJtmBUca9qTj C5n8S/CHy8trpbslNYCjKtV4z5BAbKuJ/FispMe11YuCRd9L+zeKOYysBTECq8Bo k4Dz6K2mBcZitwpH3cZeN1KxV5tBbmS3ovZgNN4dUhGg/Is10q9WWGTlGYz89mun aehOpterHXDe/FeU6zROH6OUXmx7wS63LCZUhKUbke433WK4G0+GFShb02bFDMcr 1JbHJk15swiSAP0d87P4MoYo10GAh3pVEkrGhcOET0fmv1QXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8iQwA7qsMRSCEq5kNhjMJH8qV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYWNlNGM2M2EtOGYzYi0z NmI3LTkzMGItYTJiNzYzNjkzODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVSY/6BuyPK1dkGZTaAZUKx1TntbZ2pzzJaAkOLv1+vkTcxVd/eky9a 8LDLE81FQVrkvo0mwVASJuajm0amH/y2vfXB70avn6VDmYqDfkRjnHJmPdM+uSlO JFHEqSOnYhRWXW4nqxHO7WlOEqsSLTetZ+4Ra+3IbBcFmn8gzpZHjrWT6Y5FY0J5 3DCceLcr2s2MHr2oUOQRqhcuxiK33uXDn94rB3asTzOKKX/OdxgWrULmDP3i0ljL BvZhKCfTTLvfss26EKfUWwRkQ4IhHhNNNJS+inoZhc72Z1Wr1BgbAAzGP89pfDYa fjC+j45HIZYoK+c7gS341cIMnl+b4Hs= -----END CERTIFICATE-----Generated at Mon Nov 3 08:45:37 2025 by rpki-client