$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa File: fd19fa80-d37b-34fb-b500-b3be510154b7.roa (raw, json) Hash identifier: /D6XYGieASHFXqNxjTlQcTKIBwmlPiyHgsmI7dOuKjQ= Subject key identifier: BE:92:1C:DA:3B:9A:13:75:40:4C:5B:78:5C:5A:64:6D:8D:D6:BE:86 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584B3821A1682F6274CF338763C0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 125 IP address blocks: 199.64.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a1:68:2f:62:74:cf:33:87:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=81505bb3-bc8e-48e3-a822-3b43340fd138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:71:4e:90:05:87:bf:3d:40:6f:43:16:58: 36:70:b8:81:de:24:5c:bb:31:28:e8:a8:d5:22:33: 07:fe:66:47:60:b6:3f:cf:fa:d8:41:bb:2d:0b:80: 75:81:81:e5:60:74:29:75:4a:b7:cb:90:9f:10:0d: f6:f4:27:ad:ac:4e:f9:35:b1:7a:f9:20:eb:d3:69: 98:1f:ba:d1:4c:8c:a6:e4:85:5c:65:4e:ef:54:7c: d9:4e:80:44:2c:1c:c6:58:39:ad:44:0d:9d:6d:3a: 09:ff:8f:58:29:c6:8c:13:8b:d0:57:85:d8:e6:a9: bb:8c:3f:13:20:e2:da:dc:06:97:2c:70:25:e4:fd: a0:05:cf:23:1d:55:98:fd:ec:86:00:73:be:f9:03: 4b:10:ce:35:0d:a6:f6:b4:04:ad:08:39:e2:51:b3: 43:6f:b5:b0:a5:a1:4d:24:0c:a1:98:24:25:74:18: c0:93:db:66:57:2f:8a:b8:5f:fa:d0:a6:93:1c:6d: 0a:2e:e3:24:c7:8f:a6:67:4f:7f:1f:99:3a:00:3a: 82:b3:51:51:3d:33:2f:c8:fa:b2:b5:f0:32:63:a8: c5:19:d8:d7:38:d6:e3:c5:e7:2f:26:a6:64:c3:5d: 4e:f3:65:e1:da:e7:83:91:da:23:7d:d9:a7:98:48: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:1C:DA:3B:9A:13:75:40:4C:5B:78:5C:5A:64:6D:8D:D6:BE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:c9:62:7f:ed:1e:5e:4f:76:ca:79:16:38:0a:80:1a:64: bf:47:4e:a3:5b:61:0a:f8:f2:da:5f:76:e4:ae:8e:3c:9d:41: d8:71:c4:a7:39:13:92:fb:70:0f:6d:93:4b:19:d7:17:12:da: e3:be:cf:83:45:39:9b:b4:3d:27:e9:46:41:c6:aa:54:d8:b1: 10:76:70:34:af:05:c7:01:9e:9f:c4:46:05:38:b4:ff:5a:8d: 03:fa:47:a8:db:df:f8:be:80:33:b3:1b:e6:61:03:0b:da:2e: 2b:dc:db:c6:da:dd:27:fd:62:4d:86:8e:bd:7c:59:1b:77:bf: cf:4c:09:54:b9:65:9a:3c:a7:7d:fb:6f:d0:f7:ce:79:be:b4: c6:8c:5e:2f:ba:c9:47:2d:05:f7:03:7e:97:aa:bf:79:05:a9: 40:9d:3d:2f:40:9f:2f:98:e4:02:a2:39:6b:cd:bd:f3:07:90: 4f:de:a1:9a:f0:60:2a:8c:73:57:97:5b:7e:64:4f:b3:6d:95: 96:8a:53:57:ec:60:a8:41:21:5d:07:c2:12:e0:23:1c:6c:96: 23:0b:ca:9d:98:16:b6:1b:af:f8:9d:5a:34:bd:87:14:3c:35: 41:a7:7e:ad:c1:96:ea:93:6e:b3:30:64:5f:cc:59:45:70:8b: 3e:fc:1c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaFoL2J0zzOHY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ODE1MDViYjMtYmM4ZS00OGUzLWE4MjItM2I0MzM0MGZkMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMpxTpAFh789QG9DFlg2cLiB3iRcuzEo6KjV IjMH/mZHYLY/z/rYQbstC4B1gYHlYHQpdUq3y5CfEA329CetrE75NbF6+SDr02mY H7rRTIym5IVcZU7vVHzZToBELBzGWDmtRA2dbToJ/49YKcaME4vQV4XY5qm7jD8T IOLa3AaXLHAl5P2gBc8jHVWY/eyGAHO++QNLEM41Dab2tAStCDniUbNDb7WwpaFN JAyhmCQldBjAk9tmVy+KuF/60KaTHG0KLuMkx4+mZ09/H5k6ADqCs1FRPTMvyPqy tfAyY6jFGdjXONbjxecvJqZkw11O82Xh2ueDkdojfdmnmEgFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6SHNo7mhN1QExbeFxaZG2N1r6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZmQxOWZhODAtZDM3Yi0z NGZiLWI1MDAtYjNiZTUxMDE1NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+2yWJ/7R5eT3bKeRY4CoAaZL9HTqNbYQr48tpfduSujjydQdhxxKc5 E5L7cA9tk0sZ1xcS2uO+z4NFOZu0PSfpRkHGqlTYsRB2cDSvBccBnp/ERgU4tP9a jQP6R6jb3/i+gDOzG+ZhAwvaLivc28ba3Sf9Yk2Gjr18WRt3v89MCVS5ZZo8p337 b9D3znm+tMaMXi+6yUctBfcDfpeqv3kFqUCdPS9Any+Y5AKiOWvNvfMHkE/eoZrw YCqMc1eXW35kT7NtlZaKU1fsYKhBIV0HwhLgIxxsliMLyp2YFrYbr/idWjS9hxQ8 NUGnfq3BluqTbrMwZF/MWUVwiz78HAE= -----END CERTIFICATE-----Generated at Sun Nov 2 21:46:53 2025 by rpki-client