$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa File: cee5e224-e222-3e38-b4fe-225e5e2c6216.roa (raw, json) Hash identifier: OiItzkSSu++SFcMjLjJP7+41IKauqa9VuLrYzD7q3gI= Subject key identifier: E1:F4:56:6B:92:B5:36:4A:94:39:DA:22:02:71:C5:90:09:A7:E9:CB Certificate issuer: /CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c Certificate serial: 010D0C9F4328584B0E4152E738E645B010EAB900 Authority key identifier: B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 226 IP address blocks: 192.124.99.0/24 maxlen: 24 192.124.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:52:e7:38:e6:45:b0:10:ea:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=9ff31fec-89c5-46ec-9525-64ffc9496749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:cd:fc:cf:c8:a2:fe:67:ff:f9:db:62:d3: ba:b6:4e:b5:d0:e0:b4:31:cc:a5:d2:a5:c2:cf:ff: 60:99:dd:ec:e4:ec:d2:09:ee:03:96:d4:d8:81:ab: 88:a1:31:dc:5f:d8:a6:67:7a:6e:72:bb:ad:f0:ba: 40:6b:84:8f:6b:60:26:05:df:9b:1c:cb:e2:91:81: e9:b1:cf:e0:d0:c8:83:3c:b6:51:b5:43:28:38:33: 68:4d:33:8e:91:ee:e5:f5:a7:cb:a9:a1:f3:83:80: dd:51:39:d7:b5:61:a9:27:c4:0d:f6:ac:30:e3:0e: f8:38:21:24:d8:1e:58:79:fd:5c:40:1e:2c:c1:6e: be:2f:cd:9c:8f:22:53:04:5c:60:80:20:fb:23:38: 4c:34:6f:cf:0d:1b:56:91:88:15:55:e2:6d:97:82: 3d:db:2e:bb:89:a0:ce:c4:a6:4b:f7:18:20:d0:34: b0:37:02:ed:5c:c8:c8:a4:66:a7:fe:1d:52:7b:f9: 7c:56:0e:67:ad:3f:79:a6:39:e8:04:0a:99:12:78: 6c:59:07:ff:3c:8b:75:27:73:0d:86:45:45:80:7e: 08:ad:73:35:1a:78:19:39:d7:34:10:4c:49:7e:c3: ca:8b:bf:d8:b1:1c:2c:97:f7:73:62:94:43:1a:91: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:56:6B:92:B5:36:4A:94:39:DA:22:02:71:C5:90:09:A7:E9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl X509v3 Authority Key Identifier: keyid:B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer sbgp-ipAddrBlock: critical IPv4: 192.124.99.0-192.124.100.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:04:af:a0:d6:5c:0c:c6:92:3c:a9:2e:fb:ba:7e:db:31:02: 07:78:a1:89:92:6b:9d:a9:b6:61:58:10:1d:13:21:8c:cf:20: b3:24:1f:42:dd:20:45:2c:8c:b6:e7:71:32:91:61:eb:4c:e0: b2:8c:95:88:d5:9e:1b:f8:ca:6d:70:0e:c2:09:23:36:c5:82: ed:98:c7:2c:8e:b6:89:d4:c7:c2:90:e7:e7:3e:52:6c:61:29: 20:d5:5e:20:04:c9:fa:50:42:17:ef:55:49:58:34:46:e7:40: 50:12:84:d4:28:89:c1:5e:86:a2:02:41:1c:bc:7c:9b:10:ec: cd:55:bd:d2:24:f5:cd:e8:ac:78:73:7e:64:54:e6:d9:1d:37: 1e:b2:e4:64:72:0e:60:53:8e:20:c6:f7:38:88:33:6a:12:71: f0:a2:e7:0e:67:86:0a:ca:91:99:0c:b8:ca:64:0d:86:7c:a0: 4e:35:42:7e:3e:e6:ce:46:f4:d9:ea:61:11:71:0a:a0:26:be: 35:87:ba:6a:05:88:a2:67:f9:21:a8:e3:c3:17:f7:0a:69:e7: 2f:b4:2f:41:e6:74:55:48:a7:a1:28:35:2d:f6:f0:94:79:13: 08:4a:5b:d5:52:21:3b:75:42:48:3c:d0:eb:fe:d6:d8:ac:6c: 63:e1:a0:52 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsOQVLnOOZFsBDquQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NGQ0ZmUtNDNkMC00YmMyLTgzZmUtZjE5MDgzMDhl NDZjMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWZmMzFmZWMtODljNS00NmVjLTk1MjUtNjRmZmM5NDk2NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN7N/M/Iov5n//nbYtO6tk610OC0Mcyl0qXC z/9gmd3s5OzSCe4DltTYgauIoTHcX9imZ3pucrut8LpAa4SPa2AmBd+bHMvikYHp sc/g0MiDPLZRtUMoODNoTTOOke7l9afLqaHzg4DdUTnXtWGpJ8QN9qww4w74OCEk 2B5Yef1cQB4swW6+L82cjyJTBFxggCD7IzhMNG/PDRtWkYgVVeJtl4I92y67iaDO xKZL9xgg0DSwNwLtXMjIpGan/h1Se/l8Vg5nrT95pjnoBAqZEnhsWQf/PIt1J3MN hkVFgH4IrXM1GngZOdc0EExJfsPKi7/YsRwsl/dzYpRDGpHS0wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOH0VmuStTZKlDnaIgJxxZAJp+nLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTc0 ZDRmZS00M2QwLTRiYzItODNmZS1mMTkwODMwOGU0NmMvY2VlNWUyMjQtZTIyMi0z ZTM4LWI0ZmUtMjI1ZTVlMmM2MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWE3NGQ0ZmUtNDNkMC00YmMyLTgz ZmUtZjE5MDgzMDhlNDZjLzFhNzRkNGZlLTQzZDAtNGJjMi04M2ZlLWYxOTA4MzA4 ZTQ2Yy5jcmwwHwYDVR0jBBgwFoAUse2fvdR+Z7jtn1u/mSt4QfQCjJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTc0ZDRmZS00M2QwLTRiYzItODNmZS1mMTkw ODMwOGU0NmMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAfGMD BADAfGQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhASvoNZcDMaSPKku+7p+2zECB3ihiZJrnam2YVgQHRMh jM8gsyQfQt0gRSyMtudxMpFh60zgsoyViNWeG/jKbXAOwgkjNsWC7ZjHLI62idTH wpDn5z5SbGEpINVeIATJ+lBCF+9VSVg0RudAUBKE1CiJwV6GogJBHLx8mxDszVW9 0iT1zeiseHN+ZFTm2R03HrLkZHIOYFOOIMb3OIgzahJx8KLnDmeGCsqRmQy4ymQN hnygTjVCfj7mzkb02ephEXEKoCa+NYe6agWIomf5Iajjwxf3CmnnL7QvQeZ0VUin oSg1LfbwlHkTCEpb1VIhO3VCSDzQ6/7W2KxsY+GgUg== -----END CERTIFICATE-----Generated at Fri Sep 19 17:56:24 2025 by rpki-client