$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa File: 4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa (raw, json) Hash identifier: UV0ghvgqNs4MZcjD7WQ2Yk3lj5c++n0eabVql2HmieU= Subject key identifier: B6:93:B9:4B:9A:30:C8:D0:26:E0:28:C8:BD:30:73:78:47:99:23:B2 Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Certificate serial: 010D0C9F4328584B5F37238F1130BFD686E2A000 Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 13520 IP address blocks: 199.74.222.0/24 maxlen: 24 199.74.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:23:8f:11:30:bf:d6:86:e2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=698c8b10-c4b3-4675-94cf-79c2b09cb8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:fc:d7:7c:43:68:f5:da:32:4e:60:e3:32: 55:af:b5:fa:bd:7c:3a:8b:9b:a7:ca:3e:22:9f:49: 21:09:1a:4c:a2:c1:1a:0d:bd:15:36:63:a1:cd:53: 53:1d:af:0c:bc:0d:88:ef:14:dc:54:42:86:27:8b: 41:8a:76:64:87:78:74:46:cd:97:0e:70:f5:cd:14: 71:b0:19:61:79:ee:c9:0a:f8:9b:bb:61:7e:75:ae: 97:0c:0a:7b:15:93:e0:56:fb:e8:c7:2b:8e:fe:ec: 0a:ff:3b:44:bf:47:d8:5f:49:78:eb:e3:26:c7:31: e7:a6:96:41:cd:e2:19:27:b3:e4:36:4d:aa:76:f0: fb:62:c6:d1:12:27:1d:88:35:28:71:38:54:9a:b0: 81:9e:11:ce:b9:05:27:21:f8:03:62:53:06:57:c4: 35:81:b1:5d:4f:30:a9:bb:04:ce:73:c9:73:65:58: 42:ed:70:87:dd:2c:dc:9f:6e:02:78:22:a8:09:ce: 0f:cc:c5:a7:c0:e5:7a:cb:45:28:c3:8e:e5:bb:a8: cd:39:4c:7f:89:e2:26:44:fb:5a:1a:07:f8:1d:b7: d5:53:58:28:77:1a:f8:01:94:96:87:94:45:5b:e6: 2d:95:d6:4a:96:02:ef:0b:d5:ef:00:79:ad:08:05: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:93:B9:4B:9A:30:C8:D0:26:E0:28:C8:BD:30:73:78:47:99:23:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl X509v3 Authority Key Identifier: keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer sbgp-ipAddrBlock: critical IPv4: 199.74.222.0/24 199.74.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:40:6a:24:9f:82:c0:16:df:1c:b0:ae:9c:e9:a4:c4:24:dd: ea:87:f0:07:e9:86:bf:7e:da:38:9e:1f:9d:07:c8:97:f9:77: 42:05:f5:ba:f1:d4:ca:0a:2a:a1:b1:24:2a:2f:0e:50:ad:7a: 32:6a:74:33:dd:a5:d2:5e:0f:bb:f0:df:68:13:76:74:3b:02: 45:1b:b9:28:6a:6c:d9:1b:f7:4c:b8:79:46:0d:75:a9:6b:41: 84:65:3c:00:57:33:42:ae:03:df:1a:e9:b8:7d:cb:c0:75:28: e1:a1:40:2b:23:82:0d:9e:e5:70:65:a4:a8:30:2a:42:a1:c4: 0a:b5:a7:24:f1:20:27:2f:76:6a:a5:7d:1d:ee:11:3b:cd:32: cf:7d:35:07:5a:59:c3:65:ba:fc:a3:27:72:4e:24:b6:b0:ef: d9:3a:3b:59:4e:83:e3:90:54:e8:8b:14:f7:d4:98:dd:8b:aa: 1a:55:b5:ed:69:f4:2d:aa:6e:a7:bd:9a:7d:f4:8c:d4:0a:07: bc:66:54:b3:03:76:82:6b:a6:cd:28:1a:0d:01:6e:62:cd:00: e3:c3:d6:8e:63:9b:1f:e6:ef:d4:b3:4f:57:f9:64:51:d0:e6: 93:87:ec:e4:3b:23:98:4d:3e:fc:00:bc:ee:c3:1c:45:f5:dc: 21:4d:7e:36 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtfNyOPETC/1obioAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MTAwZjktM2IyOC00ZWY0LWIyYzItY2YzMjdkOTgz OWQ2MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Njk4YzhiMTAtYzRiMy00Njc1LTk0Y2YtNzljMmIwOWNiOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5v813xDaPXaMk5g4zJVr7X6vXw6i5unyj4i n0khCRpMosEaDb0VNmOhzVNTHa8MvA2I7xTcVEKGJ4tBinZkh3h0Rs2XDnD1zRRx sBlhee7JCvibu2F+da6XDAp7FZPgVvvoxyuO/uwK/ztEv0fYX0l46+MmxzHnppZB zeIZJ7PkNk2qdvD7YsbREicdiDUocThUmrCBnhHOuQUnIfgDYlMGV8Q1gbFdTzCp uwTOc8lzZVhC7XCH3Szcn24CeCKoCc4PzMWnwOV6y0Uow47lu6jNOUx/ieImRPta Ggf4HbfVU1godxr4AZSWh5RFW+YtldZKlgLvC9XvAHmtCAWscwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLaTuUuaMMjQJuAoyL0wc3hHmSOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODUx MDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMyN2Q5ODM5ZDYvNGIwNmM3YTAtMTVmMC0z ZGYwLThmYTctMzU2ZjQ1ZTY4YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg1MTAwZjktM2IyOC00ZWY0LWIy YzItY2YzMjdkOTgzOWQ2LzY4NTEwMGY5LTNiMjgtNGVmNC1iMmMyLWNmMzI3ZDk4 MzlkNi5jcmwwHwYDVR0jBBgwFoAUixKCgpxJcnhlLMRCbyeEoVgGCw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ODUxMDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMy N2Q5ODM5ZDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx0reAwQA x0r5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAClAaiSfgsAW3xywrpzppMQk3eqH8Afphr9+2jieH50HyJf5 d0IF9brx1MoKKqGxJCovDlCtejJqdDPdpdJeD7vw32gTdnQ7AkUbuShqbNkb90y4 eUYNdalrQYRlPABXM0KuA98a6bh9y8B1KOGhQCsjgg2e5XBlpKgwKkKhxAq1pyTx ICcvdmqlfR3uETvNMs99NQdaWcNluvyjJ3JOJLaw79k6O1lOg+OQVOiLFPfUmN2L qhpVte1p9C2qbqe9mn30jNQKB7xmVLMDdoJrps0oGg0BbmLNAOPD1o5jmx/m79Sz T1f5ZFHQ5pOH7OQ7I5hNPvwAvO7DHEX13CFNfjY= -----END CERTIFICATE-----Generated at Sat Oct 18 23:49:45 2025 by rpki-client