$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa File: 1ec803cb-f96d-3d90-b088-6d5713ba0049.roa (raw, json) Hash identifier: svU2R5CDua2rMMJYPpRiRP8vITaat2fZ/wpo4yTq99g= Subject key identifier: 08:F1:B8:02:78:AB:83:55:EC:67:01:E9:21:5F:9D:B1:86:C7:68:02 Certificate issuer: /CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Certificate serial: 010D0C9F4328584B821CD4CE34B21E5811437B80 Authority key identifier: 85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 396982 IP address blocks: 199.60.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d4:ce:34:b2:1e:58:11:43:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c435b191-2899-442d-b713-888457223abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:84:67:e2:a9:2e:22:1e:00:a7:f2:44:81:7c: 55:06:9c:a8:a4:ad:f8:c0:64:df:57:db:83:c1:19: 70:67:42:bb:43:e9:56:87:88:cb:9e:f6:66:3e:94: ee:84:c1:57:7a:ef:f8:98:cd:a6:bf:4a:97:c0:01: 39:a9:ae:b9:a5:38:a0:b5:b2:58:af:60:55:13:e8: 4e:5b:00:d2:2c:af:c0:6c:e7:0d:09:fa:8c:03:19: 12:b2:b2:e6:48:95:67:18:cf:9b:24:ab:89:c8:22: 58:b7:4e:0b:07:60:03:cd:70:da:4f:2d:f7:cf:ab: d8:18:73:19:d0:94:ac:88:00:e3:0b:a3:8c:95:ed: e9:57:37:08:cc:04:e4:6b:31:fe:2a:3e:6c:51:c2: 5d:6f:ec:10:33:a2:ad:a1:a9:bf:8e:38:a1:0e:e0: cf:b0:99:06:84:84:9d:bb:19:c0:b5:b4:91:63:82: 88:91:40:36:dd:f2:bc:61:6d:8c:af:b1:a1:94:a2: 4d:71:e5:dd:96:36:88:dd:19:1c:4d:da:95:ed:53: 32:e0:4a:ef:3a:e7:6e:aa:9d:e8:19:71:b9:86:14: ac:b4:a2:f5:a8:91:e9:a5:22:e9:a4:37:3a:ed:2a: 24:d1:3e:24:65:e4:bf:ce:a9:af:19:68:65:e3:2e: f6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:B8:02:78:AB:83:55:EC:67:01:E9:21:5F:9D:B1:86:C7:68:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl X509v3 Authority Key Identifier: keyid:85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer sbgp-ipAddrBlock: critical IPv4: 199.60.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:4f:a8:4c:a3:f6:4e:82:a8:41:41:a7:f1:03:ad:b5:8d: 42:71:d0:19:65:99:69:4c:f3:91:0f:3f:73:0b:a8:56:b1:79: cf:7f:ba:a3:24:aa:e6:e0:e9:3f:87:4b:29:cf:d7:e6:d4:66: 5a:8c:dc:65:0d:b3:99:8c:58:50:34:f7:89:e0:e9:8c:f6:37: e5:e7:c0:62:a6:11:5c:a1:ac:17:94:f8:ae:e6:66:e2:69:7e: 8d:1d:44:44:65:b3:38:e7:dc:ac:5e:62:4d:75:6c:f1:00:1a: f4:6b:fe:62:ef:9a:79:70:65:da:13:7e:75:fb:f1:ec:25:4d: b4:24:ba:3c:6d:b5:0c:35:13:10:53:c0:18:25:39:af:81:75: ae:ef:79:7d:e8:9d:e9:fc:14:7c:2a:ee:03:64:8b:91:cf:b4: b5:0e:56:f7:23:0a:19:13:fd:8b:73:cf:0b:40:a3:79:a1:29: 61:64:48:3a:41:16:0e:92:ca:bb:7e:d9:33:3c:cd:a1:df:35: 4f:e8:1d:a5:af:55:41:a9:4f:78:42:e0:85:c8:6e:43:1c:0e: 29:0b:1a:4e:8b:90:8a:4c:44:3e:be:f1:10:10:f1:cf:27:7d: ef:af:34:d6:4a:9c:aa:d9:08:66:e3:ba:97:19:33:50:3e:ef: 1b:1c:03:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNTONLIeWBFDe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkODM5MGUtYWFiNC00MDgxLWE2ODItZWViZmU5ZWQz ZGRlMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzQzNWIxOTEtMjg5OS00NDJkLWI3MTMtODg4NDU3MjIzYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Rn4qkuIh4Ap/JEgXxVBpyopK34wGTfV9uD wRlwZ0K7Q+lWh4jLnvZmPpTuhMFXeu/4mM2mv0qXwAE5qa65pTigtbJYr2BVE+hO WwDSLK/AbOcNCfqMAxkSsrLmSJVnGM+bJKuJyCJYt04LB2ADzXDaTy33z6vYGHMZ 0JSsiADjC6OMle3pVzcIzATkazH+Kj5sUcJdb+wQM6Ktoam/jjihDuDPsJkGhISd uxnAtbSRY4KIkUA23fK8YW2Mr7GhlKJNceXdljaI3RkcTdqV7VMy4ErvOuduqp3o GXG5hhSstKL1qJHppSLppDc67Sok0T4kZeS/zqmvGWhl4y72mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjxuAJ4q4NV7GcB6SFfnbGGx2gCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NmQ4 MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJmZTllZDNkZGUvMWVjODAzY2ItZjk2ZC0z ZDkwLWIwODgtNmQ1NzEzYmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzZkODM5MGUtYWFiNC00MDgxLWE2 ODItZWViZmU5ZWQzZGRlLzc2ZDgzOTBlLWFhYjQtNDA4MS1hNjgyLWVlYmZlOWVk M2RkZS5jcmwwHwYDVR0jBBgwFoAUhc4BYrfck7kKV7a0VnvW+JIkiKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NmQ4MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJm ZTllZDNkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCdT6hMo/ZOgqhBQafxA621jUJx0BllmWlM85EPP3MLqFaxec9/uqMk qubg6T+HSynP1+bUZlqM3GUNs5mMWFA094ng6Yz2N+XnwGKmEVyhrBeU+K7mZuJp fo0dRERlszjn3KxeYk11bPEAGvRr/mLvmnlwZdoTfnX78ewlTbQkujxttQw1ExBT wBglOa+Bda7veX3onen8FHwq7gNki5HPtLUOVvcjChkT/YtzzwtAo3mhKWFkSDpB Fg6Syrt+2TM8zaHfNU/oHaWvVUGpT3hC4IXIbkMcDikLGk6LkIpMRD6+8RAQ8c8n fe+vNNZKnKrZCGbjupcZM1A+7xscA6A= -----END CERTIFICATE-----Generated at Mon Nov 3 08:40:15 2025 by rpki-client