$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa File: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json) Hash identifier: da3VyIfRG5Opn5W+hzT/03nNF5UhuGwQAlJXHECsyJI= Subject key identifier: A9:74:EC:2A:57:3E:DF:FB:51:07:70:C6:39:EF:8D:86:C3:70:1C:16 Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584BA39D22B3F7BD3E2C0204BF88 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 209 IP address blocks: 199.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:b3:f7:bd:3e:2c:02:04:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=61f58ca6-1901-4221-a6a9-dc1108373d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:82:9b:46:c5:7f:01:22:68:9e:31:68:f3: 90:05:c8:db:9e:a1:4e:3d:ce:96:01:41:59:be:75: f0:70:2f:c1:d8:aa:e5:eb:82:b8:c8:4d:19:08:da: 62:84:2a:c2:97:c8:9d:aa:36:49:64:c5:22:87:ca: 60:b7:6f:7c:14:15:e5:5c:e7:6c:f5:f9:e2:4f:d5: 12:73:90:d6:25:23:39:4d:a3:dd:ea:20:c5:2f:5c: a3:d9:ab:b8:bb:18:70:ae:09:dc:53:f1:1c:bb:05: de:83:7c:91:97:04:47:2d:f0:f0:b9:59:40:95:cf: d7:27:a5:37:cd:bd:a5:b3:31:23:1a:01:bd:b9:4b: 2f:6c:ec:3e:a3:b8:fa:c9:08:61:bf:0d:bf:6f:d6: 20:ed:f6:43:cb:f6:93:3a:e7:e0:f7:b9:39:09:e8: ce:7c:25:6e:0d:ee:3f:81:2e:f7:11:fb:5b:08:59: eb:67:2b:1d:d4:4c:42:1b:9a:19:ac:16:ab:2e:77: 3f:4c:ae:4e:43:03:47:b3:cd:8f:e8:0d:92:34:14: 35:9c:99:ab:a0:78:d7:ce:27:13:2d:a8:2b:6e:d9: 61:f9:13:03:95:fa:7c:e8:5b:91:b2:ba:62:58:3c: 3e:2d:56:90:01:7a:bd:da:07:14:69:f8:4f:43:2f: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:EC:2A:57:3E:DF:FB:51:07:70:C6:39:EF:8D:86:C3:70:1C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:88:d8:78:b6:b6:4c:d1:11:59:28:25:88:da:1d:ed:c4:e4: a7:7e:c1:8c:58:cf:19:68:08:6d:5b:02:bc:00:56:42:73:83: ec:47:e2:15:27:06:d0:74:9c:ef:9a:ec:6c:2b:b2:28:08:b1: 47:67:b8:f5:bf:c5:a1:12:2d:f1:8e:6b:cd:2e:81:14:34:be: 6a:a5:d7:44:46:7b:2a:19:45:fd:f0:43:91:e2:34:36:4b:6b: 2a:15:a3:78:c9:72:a1:9d:a6:22:ba:c1:9d:01:a6:38:5d:7f: c8:3c:66:a0:0c:1a:25:f1:8d:84:46:c0:ea:ea:eb:9f:99:1e: a6:d7:2e:ba:78:45:c0:e4:0e:e6:df:10:e7:6d:cb:6e:fc:11: 2a:88:d5:d7:54:85:7a:88:f1:b4:39:89:54:e0:2c:ae:13:a4: 25:81:52:7a:af:ad:70:e9:52:8d:da:d7:37:6c:e7:42:7c:d0: 20:82:85:5b:29:da:29:6e:66:94:af:2b:d8:06:09:88:d8:b5: aa:67:3b:3e:45:ee:bb:ad:3a:0d:c6:35:dd:c5:63:01:c2:d3: 93:4b:80:a6:33:ce:44:73:cf:fd:93:67:53:09:bc:34:21:95: 83:12:1b:d4:71:66:0c:a8:b5:bc:6e:50:d2:fe:84:c1:ee:d2: a0:1c:11:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSKz970+LAIEv4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjFmNThjYTYtMTkwMS00MjIxLWE2YTktZGMxMTA4MzczZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYCCm0bFfwEiaJ4xaPOQBcjbnqFOPc6WAUFZ vnXwcC/B2Krl64K4yE0ZCNpihCrCl8idqjZJZMUih8pgt298FBXlXOds9fniT9US c5DWJSM5TaPd6iDFL1yj2au4uxhwrgncU/EcuwXeg3yRlwRHLfDwuVlAlc/XJ6U3 zb2lszEjGgG9uUsvbOw+o7j6yQhhvw2/b9Yg7fZDy/aTOufg97k5CejOfCVuDe4/ gS73EftbCFnrZysd1ExCG5oZrBarLnc/TK5OQwNHs82P6A2SNBQ1nJmroHjXzicT Lagrbtlh+RMDlfp86FuRsrpiWDw+LVaQAXq92gcUafhPQy9SQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl07CpXPt/7UQdwxjnvjYbDcBwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMDZjOWY5YTAtZmUwMS0z OGM5LWJiZGYtMzA5ZGE0MDAyODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+I2Hi2tkzREVkoJYjaHe3E5Kd+wYxYzxloCG1bArwAVkJzg+xH4hUn BtB0nO+a7GwrsigIsUdnuPW/xaESLfGOa80ugRQ0vmql10RGeyoZRf3wQ5HiNDZL ayoVo3jJcqGdpiK6wZ0Bpjhdf8g8ZqAMGiXxjYRGwOrq65+ZHqbXLrp4RcDkDubf EOdty278ESqI1ddUhXqI8bQ5iVTgLK4TpCWBUnqvrXDpUo3a1zds50J80CCChVsp 2iluZpSvK9gGCYjYtapnOz5F7rutOg3GNd3FYwHC05NLgKYzzkRzz/2TZ1MJvDQh lYMSG9RxZgyotbxuUNL+hMHu0qAcES4= -----END CERTIFICATE-----Generated at Tue Oct 28 07:05:17 2025 by rpki-client