$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa File: 0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json) Hash identifier: BFRWfNQ4vc0U9cop/K2X6k9erY0msuQOxpdf55y1Epc= Subject key identifier: 2C:E7:8D:35:7F:E0:A9:96:CD:C4:DE:9D:EF:72:26:44:4B:CC:CA:98 Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584BA39D22A33675C83BE02BD980 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 209 IP address blocks: 199.191.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:a3:36:75:c8:3b:e0:2b:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c5e190cb-56c4-4904-bfd9-679cf8bf9039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:73:2c:54:b3:d2:c9:03:14:4d:40:e6:20: 9b:31:83:c9:48:a5:f7:05:1e:ed:5e:e2:62:3e:2f: e1:a4:91:f5:0d:a5:d9:dc:aa:73:a9:8d:34:67:89: 49:8f:8c:62:23:70:f6:f2:30:18:9f:25:2b:4b:a2: c8:fc:5f:3c:ea:0e:4a:29:77:c3:a8:55:87:77:06: 3b:ea:1e:ab:9b:56:a3:be:fc:b4:e0:1e:e5:11:64: d6:f3:1c:39:5e:55:cc:53:94:07:69:29:ce:6d:cc: a4:c4:73:05:08:cd:a8:a0:dc:6b:03:d8:74:79:f9: 94:57:c4:02:d1:40:bd:d1:4b:f3:a0:30:23:e2:4d: b6:00:e4:7f:7e:df:78:f3:9b:f3:b9:83:d2:ea:df: a4:3e:18:c8:34:9a:ba:23:12:7d:40:45:73:b7:53: 47:43:0c:6b:ea:0b:00:75:58:77:e2:43:a3:3a:d2: b6:78:0b:7a:70:80:b7:64:9f:fd:8e:ad:1c:2e:99: 5d:53:02:5b:55:17:e3:cb:7c:03:32:11:91:43:44: cc:58:5a:1f:f0:e3:11:6e:5a:9a:14:15:58:82:24: 00:05:a4:73:10:6e:bc:d7:c3:3d:56:53:a7:0b:65: 6e:08:4e:6b:6f:ab:db:4d:4b:41:e5:43:81:e8:d0: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:8D:35:7F:E0:A9:96:CD:C4:DE:9D:EF:72:26:44:4B:CC:CA:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:12:4b:4e:ed:b0:6c:bf:70:33:af:63:2e:b1:8f:f0:8a:71: 40:86:c7:8d:6f:45:5e:f4:d2:bd:02:f4:14:4d:32:db:11:42: 0d:7e:7c:fe:f3:32:50:ab:fc:28:41:30:9a:c2:31:a6:9c:f9: e3:66:09:87:86:2c:08:11:04:7e:cd:67:0d:70:06:fd:02:c9: 91:66:a5:d8:88:ac:cd:91:03:6c:2f:db:e5:72:17:67:bf:bf: f5:b4:93:00:b3:8c:5a:4d:ee:6a:98:bf:6a:40:20:fa:fd:44: 2f:48:10:e9:ee:0e:36:48:45:af:b6:4d:b5:8c:e7:2f:c1:93: 40:e0:01:5f:86:c6:a4:51:63:41:10:0e:ac:10:32:3a:79:fe: 05:02:79:e3:f2:fe:12:de:6e:2b:16:fe:37:7f:68:e5:68:ae: 05:4f:db:5c:81:01:11:7a:2d:7e:33:b6:06:2d:61:47:9b:6e: b4:16:a1:ac:f1:30:0c:fc:a2:a8:bd:42:1c:7a:09:75:3f:07: 1f:37:7f:1c:35:82:e9:bf:bf:fd:8b:bc:2b:e2:f3:03:38:7a: 34:a3:bf:f9:ef:c4:a5:c9:a0:53:5e:5d:36:a1:fc:ab:67:1e: a2:00:39:98:d9:d9:e6:0d:35:ee:7c:a6:fd:35:79:bd:02:fe: 31:11:47:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSKjNnXIO+Ar2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzVlMTkwY2ItNTZjNC00OTA0LWJmZDktNjc5Y2Y4YmY5MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RzLFSz0skDFE1A5iCbMYPJSKX3BR7tXuJi Pi/hpJH1DaXZ3KpzqY00Z4lJj4xiI3D28jAYnyUrS6LI/F886g5KKXfDqFWHdwY7 6h6rm1ajvvy04B7lEWTW8xw5XlXMU5QHaSnObcykxHMFCM2ooNxrA9h0efmUV8QC 0UC90UvzoDAj4k22AOR/ft9485vzuYPS6t+kPhjINJq6IxJ9QEVzt1NHQwxr6gsA dVh34kOjOtK2eAt6cIC3ZJ/9jq0cLpldUwJbVRfjy3wDMhGRQ0TMWFof8OMRblqa FBVYgiQABaRzEG6818M9VlOnC2VuCE5rb6vbTUtB5UOB6NAPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCznjTV/4KmWzcTene9yJkRLzMqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMGQzNjNkOTMtMjhlMC0z MzIyLTg1MTctYTFlYmVjMzg3N2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4SS07tsGy/cDOvYy6xj/CKcUCGx41vRV700r0C9BRNMtsRQg1+fP7z MlCr/ChBMJrCMaac+eNmCYeGLAgRBH7NZw1wBv0CyZFmpdiIrM2RA2wv2+VyF2e/ v/W0kwCzjFpN7mqYv2pAIPr9RC9IEOnuDjZIRa+2TbWM5y/Bk0DgAV+GxqRRY0EQ DqwQMjp5/gUCeePy/hLebisW/jd/aOVorgVP21yBARF6LX4ztgYtYUebbrQWoazx MAz8oqi9Qhx6CXU/Bx83fxw1gum/v/2LvCvi8wM4ejSjv/nvxKXJoFNeXTah/Ktn HqIAOZjZ2eYNNe58pv01eb0C/jERR2g= -----END CERTIFICATE-----Generated at Tue Oct 28 07:08:13 2025 by rpki-client