$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa File: b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa (raw, json) Hash identifier: WKiuRAa2OEgxFQnDyWJRUDwvcaW0Ml7yKjZPvHtqqnw= Subject key identifier: 9D:44:DC:B7:E4:36:CB:34:5D:47:C9:09:84:71:A2:7A:F0:7E:28:20 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D1C836E481986CEC36E80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 199.192.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1c:83:6e:48:19:86:ce:c3:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=7830cac3-7bc5-4dbc-83c3-e803b11d4d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:86:3b:a0:c1:2b:a6:2a:ed:76:6a:6d:69: 5f:9f:ec:48:2c:38:bc:d4:16:00:a9:49:e3:0e:41: 2d:ea:88:27:8a:48:ad:49:46:f9:e3:e6:8e:a4:91: ca:75:ca:a5:87:4b:a2:93:2d:1f:a0:29:e8:8f:0c: 15:3b:97:dd:5d:ce:45:75:a9:a6:0c:09:2d:db:b2: 09:d7:6e:98:c0:0c:43:3b:75:ae:67:36:c5:1f:65: 68:83:fe:38:fe:37:8d:bc:de:99:13:46:fe:f8:18: 19:43:13:dd:d4:62:cf:5e:bd:16:74:65:57:ba:4a: ca:15:a4:49:94:01:ed:93:30:42:01:6b:36:78:c4: a9:bf:57:2b:07:81:b7:c8:d3:4b:9c:69:1b:08:ae: 02:dc:a5:73:25:8b:29:06:be:0b:39:81:d1:4a:f8: 46:34:54:e7:72:d0:7d:58:96:de:ea:7c:79:60:1c: dd:cc:52:f6:82:94:ce:29:fe:bc:e1:37:92:6c:c5: 17:95:95:41:30:dc:b3:f7:e3:26:27:b3:92:fd:78: 0a:39:4a:24:38:22:56:3a:c4:f3:f7:61:e7:36:f7: 4f:7f:b8:c0:d1:67:db:d7:94:05:79:da:1b:10:43: 47:37:26:0c:bb:11:aa:2f:f9:36:97:92:ff:62:8b: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:DC:B7:E4:36:CB:34:5D:47:C9:09:84:71:A2:7A:F0:7E:28:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 199.192.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e2:74:53:2e:28:dc:4d:45:b9:b5:84:7c:39:be:b9:53:2f: 9b:79:8c:07:2c:a8:1e:9d:da:37:89:1f:a9:e9:0a:ac:21:3c: 78:d7:df:7a:0a:e1:13:bf:33:17:87:3d:ea:3c:a5:e5:21:cb: 32:85:8a:f8:9c:41:4c:a3:01:05:56:06:95:6f:69:b7:d6:f2: a6:31:c4:bf:53:7e:fa:ca:52:ce:03:06:57:4d:34:b7:7e:11: a3:1f:db:cb:5b:9c:c4:e5:8d:69:35:31:d6:4e:7e:d1:69:73: 9c:77:59:c7:f4:e6:85:0a:b6:90:78:d0:5e:ef:1c:c2:6b:28: d0:dc:37:fb:66:c0:fb:02:77:40:85:cf:71:49:ca:84:46:dc: 0f:24:f8:7e:c6:ad:6b:63:96:58:64:e4:50:62:0a:c4:a7:18: 76:9f:a7:56:8f:1c:dc:e2:7c:40:31:d0:db:e4:b4:10:13:bb: da:79:77:24:bb:42:35:d2:a0:83:90:3a:38:95:a0:1c:e7:2c: d2:4c:8a:e0:19:89:f5:b2:32:45:b9:e6:ed:10:46:2f:06:34: 6e:d6:f0:74:e5:e0:7c:28:70:05:2e:95:8f:0c:33:2a:4b:d4: 09:d4:74:53:24:03:d3:da:46:91:a3:e6:f3:8b:85:91:0e:7e: 11:3b:20:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRyDbkgZhs7DboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzgzMGNhYzMtN2JjNS00ZGJjLTgzYzMtZTgwM2IxMWQ0ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSmGO6DBK6Yq7XZqbWlfn+xILDi81BYAqUnj DkEt6ognikitSUb54+aOpJHKdcqlh0uiky0foCnojwwVO5fdXc5FdammDAkt27IJ 126YwAxDO3WuZzbFH2Vog/44/jeNvN6ZE0b++BgZQxPd1GLPXr0WdGVXukrKFaRJ lAHtkzBCAWs2eMSpv1crB4G3yNNLnGkbCK4C3KVzJYspBr4LOYHRSvhGNFTnctB9 WJbe6nx5YBzdzFL2gpTOKf684TeSbMUXlZVBMNyz9+MmJ7OS/XgKOUokOCJWOsTz 92HnNvdPf7jA0Wfb15QFedobEENHNyYMuxGqL/k2l5L/You2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1E3LfkNss0XUfJCYRxonrwfiggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYjE0YzAyMzktZTE4MS0z ZDU3LTlmZDQtZTY1ZTY4ODlkZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8BqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7idFMuKNxNRbm1hHw5vrlTL5t5jAcsqB6d2jeJH6npCqwhPHjX33oK 4RO/MxeHPeo8peUhyzKFivicQUyjAQVWBpVvabfW8qYxxL9TfvrKUs4DBldNNLd+ EaMf28tbnMTljWk1MdZOftFpc5x3Wcf05oUKtpB40F7vHMJrKNDcN/tmwPsCd0CF z3FJyoRG3A8k+H7GrWtjllhk5FBiCsSnGHafp1aPHNzifEAx0NvktBATu9p5dyS7 QjXSoIOQOjiVoBznLNJMiuAZifWyMkW55u0QRi8GNG7W8HTl4HwocAUulY8MMypL 1AnUdFMkA9PaRpGj5vOLhZEOfhE7IPk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:51 2025 by rpki-client