$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa File: a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa (raw, json) Hash identifier: 72PjpkIVRy8yrg08VuJeNf+iLdjB8Nj2sPn57WJF/0E= Subject key identifier: 5E:24:79:1F:67:5E:89:D1:4A:06:DB:93:1E:2B:F1:9C:C0:2E:45:15 Certificate issuer: /CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74 Certificate serial: 010D0C9F4328584B0746C547B8018E10AF4EF9C0 Authority key identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 14409 IP address blocks: 199.66.136.0/24 maxlen: 24 199.66.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:47:b8:01:8e:10:af:4e:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=afaafad0-5fe6-4a18-a40c-a6a63f8ba561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:fb:c3:6b:cf:83:a5:ce:06:19:83:96:10: 42:83:2a:55:74:a1:34:84:61:8d:8f:ec:27:06:c3: e2:62:7b:41:ef:cd:b0:d6:4f:71:bb:9d:dd:07:51: fc:a4:91:bd:8b:0e:e6:1f:0c:55:d5:d1:90:36:38: 3d:54:3e:31:c2:cf:15:74:2d:1c:4f:7f:74:5a:6d: 06:f2:c9:f7:80:32:c9:c7:af:00:a0:78:c6:f3:2a: 12:22:1c:b6:cc:c4:76:26:5a:c6:17:96:e7:6c:aa: 58:2a:6e:80:af:d4:8d:28:c9:62:fe:40:f6:69:ca: 5c:d6:e8:5c:bb:90:c6:4e:5f:6a:ff:cf:7a:05:95: 3c:84:99:69:ca:f0:6a:d6:db:47:dc:27:65:e6:a3: 01:01:7f:52:16:1b:f8:4f:56:69:fb:9d:81:23:db: cc:f0:a4:46:3a:c0:b0:1c:d4:d9:b3:e0:f2:81:2b: 20:d1:c6:fc:a6:49:1a:1a:ad:64:7d:aa:5c:ce:31: 20:6f:e7:89:26:69:aa:c7:e2:be:dc:74:c1:e7:bc: 93:aa:3e:9e:80:47:f6:9b:4e:25:2e:4f:70:a9:3e: 07:da:69:48:6e:11:37:33:bf:fd:d5:96:10:22:71: ec:18:ac:9e:47:91:fc:36:dd:60:0d:3e:cf:a2:30: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:79:1F:67:5E:89:D1:4A:06:DB:93:1E:2B:F1:9C:C0:2E:45:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl X509v3 Authority Key Identifier: keyid:64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer sbgp-ipAddrBlock: critical IPv4: 199.66.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8c:f6:09:74:40:78:9d:b1:ad:e8:87:77:20:80:9d:1e:6e: 58:ae:bd:4e:2f:32:ab:f7:d2:98:f8:01:ab:de:7b:d5:4f:51: f2:22:50:65:72:0a:24:aa:da:9c:d0:6a:0b:12:a4:a4:fc:b6: 8f:38:5a:36:86:8a:05:12:a6:15:6e:8b:6e:20:11:ba:64:7a: 62:7c:2f:ab:3f:51:c0:8f:86:4b:c6:6e:0d:88:b2:2c:aa:6a: 21:77:d7:30:31:d4:02:73:fe:73:ba:69:43:92:47:1f:71:3e: 71:4b:de:51:de:15:4e:a9:2e:75:54:b7:f0:f4:6a:87:9e:69: 1c:8f:6f:07:af:3a:f3:38:bc:e4:c3:b7:63:0e:3d:1a:72:f4: 7f:e8:4e:9a:6e:50:c1:6e:a5:e7:db:09:ca:e8:eb:4b:c4:f9: 3a:1c:46:3b:4e:8c:b5:38:50:bc:6c:27:11:e3:27:99:53:97: 7c:eb:e4:9b:b3:db:cd:b2:cc:99:32:ea:e7:55:66:f9:b4:18: 87:2c:5a:74:7b:19:d3:77:d1:e0:86:c5:02:0f:5d:cb:f7:dd: c8:7e:68:44:97:8a:fb:55:84:6f:9f:5c:a6:79:34:aa:5c:2d: 40:6b:bf:88:e7:41:42:0f:99:4b:79:d4:32:cd:26:46:21:fc: d0:6b:b2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsVHuAGOEK9O+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBkMzIxN2QtOGYwNS00MGY1LThhNjMtMjNkNmVjOGM1 YTc0MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YWZhYWZhZDAtNWZlNi00YTE4LWE0MGMtYTZhNjNmOGJhNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrv7w2vPg6XOBhmDlhBCgypVdKE0hGGNj+wn BsPiYntB782w1k9xu53dB1H8pJG9iw7mHwxV1dGQNjg9VD4xws8VdC0cT390Wm0G 8sn3gDLJx68AoHjG8yoSIhy2zMR2JlrGF5bnbKpYKm6Ar9SNKMli/kD2acpc1uhc u5DGTl9q/896BZU8hJlpyvBq1ttH3Cdl5qMBAX9SFhv4T1Zp+52BI9vM8KRGOsCw HNTZs+DygSsg0cb8pkkaGq1kfapczjEgb+eJJmmqx+K+3HTB57yTqj6egEf2m04l Lk9wqT4H2mlIbhE3M7/91ZYQInHsGKyeR5H8Nt1gDT7PojBEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4keR9nXonRSgbbkx4r8ZzALkUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMGQz MjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2ZWM4YzVhNzQvYTBhNDg2NjctOGNkNy0z M2I0LTgzOGMtYTNlNmMxMmY3NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzBkMzIxN2QtOGYwNS00MGY1LThh NjMtMjNkNmVjOGM1YTc0L2MwZDMyMTdkLThmMDUtNDBmNS04YTYzLTIzZDZlYzhj NWE3NC5jcmwwHwYDVR0jBBgwFoAUZDupuBtVGG/2+UPucDDj0xJ86yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMGQzMjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2 ZWM4YzVhNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0KIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuM9gl0QHidsa3oh3cggJ0ebliuvU4vMqv30pj4Aavee9VPUfIiUGVy CiSq2pzQagsSpKT8to84WjaGigUSphVui24gEbpkemJ8L6s/UcCPhkvGbg2Isiyq aiF31zAx1AJz/nO6aUOSRx9xPnFL3lHeFU6pLnVUt/D0aoeeaRyPbwevOvM4vOTD t2MOPRpy9H/oTppuUMFupefbCcro60vE+TocRjtOjLU4ULxsJxHjJ5lTl3zr5Juz 282yzJky6udVZvm0GIcsWnR7GdN30eCGxQIPXcv33ch+aESXivtVhG+fXKZ5NKpc LUBrv4jnQUIPmUt51DLNJkYh/NBrsqc= -----END CERTIFICATE-----Generated at Sat Oct 18 14:25:42 2025 by rpki-client