$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa File: e5028175-5311-307b-b633-50ccd9ee601e.roa (raw, json) Hash identifier: yGZPdGLUTV02WqQkcpzhzj4h3manKfkSLpaZK6MW0m8= Subject key identifier: DA:00:82:01:3A:B6:A6:C0:E0:BC:86:5A:4D:A1:B6:50:A0:76:65:DC Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D1CF65C37A0CDAF55C000 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 199.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1c:f6:5c:37:a0:cd:af:55:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9f03ac97-f96d-4aab-a56a-bad667853819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:b8:38:7a:5c:43:01:89:40:88:55:e5:d6: ba:df:99:7c:94:06:70:4c:2e:bd:4f:1d:60:4b:ef: 88:10:8a:3d:a1:50:07:b1:f7:8b:21:79:63:96:6f: bb:82:49:0b:d9:6c:c2:8f:a4:6f:a7:75:77:ba:ea: e5:4b:cd:49:c6:84:bb:a7:af:94:59:7e:14:f3:dd: 99:83:9c:3b:74:96:4b:d2:e1:3b:75:1c:92:ec:ca: 04:7d:c3:db:17:a6:fc:f7:14:b1:d3:dc:d8:05:be: 8c:05:8d:3c:c5:2f:51:4d:04:50:88:c6:65:8c:25: 7c:6a:6d:e8:79:81:3f:25:f7:17:73:fd:83:18:bf: 3d:75:46:ab:87:ff:ae:1f:32:ad:75:07:a1:04:78: fa:ec:28:c5:8e:d0:44:58:e2:0f:4a:9c:d3:bd:28: cb:c1:ff:16:b4:a4:aa:56:83:f0:44:6d:25:27:c9: 35:a8:02:3f:97:d5:f6:03:3d:2c:4c:21:9d:7d:df: 36:13:49:10:8b:a2:90:b0:23:66:83:c3:11:af:28: 52:d4:8d:dd:0f:5a:63:17:68:47:65:17:15:f9:a4: 75:a5:61:23:36:0f:9f:2a:26:a4:6b:ac:df:92:4d: 6f:a7:0a:12:09:fe:c1:5a:a8:8b:2e:95:57:cf:58: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:82:01:3A:B6:A6:C0:E0:BC:86:5A:4D:A1:B6:50:A0:76:65:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 199.249.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b3:0c:52:c7:56:d7:fa:e5:d3:60:ba:e6:87:5b:8d:81:b7: 38:94:aa:59:e7:2a:eb:44:20:4f:2b:e2:dd:66:17:d8:1e:ef: aa:a0:e8:9c:07:44:a7:f6:61:8a:9d:0a:9f:c2:ce:24:af:70: 93:a3:b6:0b:25:e5:f2:2f:6d:65:b6:a5:57:2f:16:54:0a:b7: 11:41:82:b7:8c:06:38:d9:58:48:02:56:3f:9b:94:95:ef:65: c6:43:93:62:54:e1:3b:e0:ba:87:b3:5e:a1:27:54:bb:2e:43: 7e:a8:92:ac:b0:c4:94:3a:41:bf:2e:b3:f7:cf:75:bd:49:a3: d3:b8:6a:89:11:ed:09:4c:bb:2f:6b:03:17:93:52:6f:02:bf: 7c:62:d2:a2:6d:32:7b:2e:40:b9:5e:20:1e:2e:c2:98:1c:85: a4:46:19:0e:e6:de:9f:15:db:88:e5:57:09:e8:db:78:ff:73: 73:0a:97:47:53:58:c0:1e:73:4f:f0:14:1f:19:f3:b2:e9:ce: 00:36:34:4d:49:b1:ae:50:f8:8f:bc:b7:62:3c:8d:8a:55:20: f1:4a:5c:7c:32:ac:73:85:0e:89:9f:c8:e3:84:62:81:f1:4f: 39:7b:58:66:39:17:38:c8:d7:17:de:5d:e8:ee:98:45:56:ca: 2d:a8:5c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRz2XDegza9VwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWYwM2FjOTctZjk2ZC00YWFiLWE1NmEtYmFkNjY3ODUzODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAili4OHpcQwGJQIhV5da635l8lAZwTC69Tx1g S++IEIo9oVAHsfeLIXljlm+7gkkL2WzCj6Rvp3V3uurlS81JxoS7p6+UWX4U892Z g5w7dJZL0uE7dRyS7MoEfcPbF6b89xSx09zYBb6MBY08xS9RTQRQiMZljCV8am3o eYE/JfcXc/2DGL89dUarh/+uHzKtdQehBHj67CjFjtBEWOIPSpzTvSjLwf8WtKSq VoPwRG0lJ8k1qAI/l9X2Az0sTCGdfd82E0kQi6KQsCNmg8MRryhS1I3dD1pjF2hH ZRcV+aR1pWEjNg+fKiaka6zfkk1vpwoSCf7BWqiLLpVXz1iWcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoAggE6tqbA4LyGWk2htlCgdmXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTUwMjgxNzUtNTMxMS0z MDdiLWI2MzMtNTBjY2Q5ZWU2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWzDFLHVtf65dNguuaHW42BtziUqlnnKutEIE8r4t1mF9ge76qg6JwH RKf2YYqdCp/CziSvcJOjtgsl5fIvbWW2pVcvFlQKtxFBgreMBjjZWEgCVj+blJXv ZcZDk2JU4TvguoezXqEnVLsuQ36okqywxJQ6Qb8us/fPdb1Jo9O4aokR7QlMuy9r AxeTUm8Cv3xi0qJtMnsuQLleIB4uwpgchaRGGQ7m3p8V24jlVwno23j/c3MKl0dT WMAec0/wFB8Z87LpzgA2NE1Jsa5Q+I+8t2I8jYpVIPFKXHwyrHOFDomfyOOEYoHx Tzl7WGY5FzjI1xfeXejumEVWyi2oXMk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:02 2025 by rpki-client