$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa File: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json) Hash identifier: OFgamgbeQwoPLit2uce65nB7X1dIYPgJ+lIUVirt9pk= Subject key identifier: 42:49:8E:AC:0D:EE:87:08:70:27:5B:08:AF:69:4F:8D:83:15:99:F6 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584BBA104A9ED52AC40F7A589F80 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 32435 IP address blocks: 199.189.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4a:9e:d5:2a:c4:0f:7a:58:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=9d04d5d4-a1ab-4a5a-9e23-de9b6c68a8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:79:58:13:a5:b2:89:5f:fd:75:08:ab:2c: 6d:3c:77:ff:41:5a:36:5b:bb:d2:ce:b8:da:cb:4a: 74:f7:85:83:ee:d1:0c:6c:58:4f:06:2e:d7:6d:6d: b1:7f:9b:1d:34:1b:d2:b6:25:da:98:be:83:1c:17: 94:4e:83:d9:e0:97:e6:11:18:3e:36:e9:a7:d6:81: 9d:e0:46:0d:27:69:5e:47:ed:bc:2a:87:0c:ec:ab: e5:13:76:25:17:5f:b3:56:60:28:5c:4c:5a:f5:2f: d5:52:60:7c:a7:6d:78:53:10:a0:a4:8a:60:f3:6c: f5:00:1c:a1:53:72:8d:e8:95:e3:f3:83:37:d1:e4: ec:39:e0:fb:28:fd:f0:b7:25:a0:51:b1:60:50:d7: d4:4c:04:40:00:f4:44:04:c3:41:5c:d7:95:84:7d: 38:74:df:22:89:8f:42:fa:e5:95:1b:74:89:d1:61: 0f:9c:34:e5:dd:85:62:f5:eb:b2:1c:55:70:47:ab: 11:61:ca:56:f5:02:3b:68:6d:09:2d:d0:d1:67:5a: bf:58:57:07:8f:37:48:0f:aa:89:87:e0:09:e4:a2: f0:7e:58:61:11:6e:64:68:97:9d:e7:d1:38:e1:dc: d0:a5:be:8c:1b:5a:f2:93:83:8c:6d:c2:36:76:46: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:49:8E:AC:0D:EE:87:08:70:27:5B:08:AF:69:4F:8D:83:15:99:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:85:6d:ab:8a:ba:d1:e9:93:57:2a:f1:80:e3:fe:a0:a6:fa: 10:49:73:9c:db:09:d4:47:09:62:85:25:af:09:4b:7a:bb:9d: ac:71:d4:33:5e:1e:6b:3c:ca:90:59:53:75:b2:34:91:13:19: fa:a9:eb:f6:92:59:43:cd:12:43:02:92:17:00:d7:89:9c:d4: 5e:58:67:4c:92:00:32:d4:09:4b:4c:d2:8a:86:f3:c5:8b:e7: af:d3:fe:d9:4a:f8:14:c8:e6:b5:9a:99:8f:fb:a1:87:dc:97: b6:3b:d8:ac:dc:a4:1b:20:08:1b:61:b7:4d:2d:d1:f6:f4:78: b9:d1:1f:83:11:87:7d:dc:2c:fa:8d:06:35:74:92:1b:50:9b: 60:c0:58:4f:08:12:6c:d7:f1:b6:9e:d0:1f:1c:ee:26:23:4d: 85:26:d6:4c:d4:91:8d:9a:75:4a:70:d8:69:1d:a4:21:3f:6c: d9:4e:44:e5:06:e8:6f:0b:32:af:60:7e:be:09:4f:a0:a2:71: f6:ff:b9:49:ad:dc:9b:15:50:91:4b:f5:b6:c1:9c:14:5d:36: 25:4f:06:75:43:e0:ef:39:d3:4c:4f:6e:c3:2b:5d:eb:ff:06: cc:ed:d9:1c:3c:2e:2f:fa:3e:de:39:f3:d6:1c:f3:0f:07:a5: fe:42:0a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEqe1SrED3pYn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OWQwNGQ1ZDQtYTFhYi00YTVhLTllMjMtZGU5YjZjNjhhOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkN5WBOlsolf/XUIqyxtPHf/QVo2W7vSzrja y0p094WD7tEMbFhPBi7XbW2xf5sdNBvStiXamL6DHBeUToPZ4JfmERg+Numn1oGd 4EYNJ2leR+28KocM7KvlE3YlF1+zVmAoXExa9S/VUmB8p214UxCgpIpg82z1AByh U3KN6JXj84M30eTsOeD7KP3wtyWgUbFgUNfUTARAAPREBMNBXNeVhH04dN8iiY9C +uWVG3SJ0WEPnDTl3YVi9euyHFVwR6sRYcpW9QI7aG0JLdDRZ1q/WFcHjzdID6qJ h+AJ5KLwflhhEW5kaJed59E44dzQpb6MG1ryk4OMbcI2dkbB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJJjqwN7ocIcCdbCK9pT42DFZn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvYjdjZmM5NGUtMzg2OC0z YzZkLWFjMDktNWJjZDEyZjBjZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCFbauKutHpk1cq8YDj/qCm+hBJc5zbCdRHCWKFJa8JS3q7naxx1DNe Hms8ypBZU3WyNJETGfqp6/aSWUPNEkMCkhcA14mc1F5YZ0ySADLUCUtM0oqG88WL 56/T/tlK+BTI5rWamY/7oYfcl7Y72KzcpBsgCBtht00t0fb0eLnRH4MRh33cLPqN BjV0khtQm2DAWE8IEmzX8bae0B8c7iYjTYUm1kzUkY2adUpw2GkdpCE/bNlOROUG 6G8LMq9gfr4JT6Cicfb/uUmt3JsVUJFL9bbBnBRdNiVPBnVD4O8500xPbsMrXev/ Bszt2Rw8Li/6Pt4589Yc8w8Hpf5CCjA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:40 2025 by rpki-client