$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa File: 69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json) Hash identifier: Ab3JzljScTix76i939q+WlAciSKx3L5P9rEr5vo4Qt4= Subject key identifier: 54:92:F6:17:F0:C3:B8:FC:69:FB:3D:0D:74:58:2F:38:76:AB:EF:9B Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584B7DECAE08CD61D6B21F2A22C0 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 396952 IP address blocks: 199.36.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ae:08:cd:61:d6:b2:1f:2a:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=6af399ce-4174-442a-b6ab-3b2b3ca2c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:60:f5:52:b1:42:f0:f7:4f:99:91:e3:ca: 1b:0b:fe:64:ba:7e:6f:04:69:5b:a5:4c:7e:85:c9: b7:27:64:52:a2:98:8b:e0:21:62:e5:30:15:16:b5: 17:6d:e3:60:03:95:2a:f5:8e:0f:f3:3a:b3:c5:d5: 80:9c:f3:ed:fa:47:74:94:91:86:78:d2:94:5f:31: 55:a8:1b:07:47:1d:e9:51:69:1d:34:15:54:11:79: 13:45:94:b9:5f:90:a6:c6:3c:3f:4b:55:43:d1:83: 33:e7:c7:92:61:68:ce:3b:f2:58:41:90:4e:f9:3b: 83:58:cc:75:67:fc:42:2e:0e:7f:53:33:80:55:ef: 34:bc:28:35:c0:57:4b:18:b0:ff:f1:66:7c:97:3b: db:53:72:89:3f:43:74:d3:9a:47:20:08:bb:5f:a2: de:26:ca:93:57:09:3c:7f:ac:ce:a7:15:9a:71:71: 8e:a3:6f:64:a5:12:1c:69:f1:ff:19:80:d2:8b:3c: 37:db:50:8a:9d:75:7a:45:0d:70:b4:be:be:6d:ff: 9f:32:50:35:e0:f0:7c:93:d8:7e:11:c0:29:39:65: d1:84:28:c2:7b:c9:56:50:6f:9a:f5:21:d7:fc:16: 3a:ba:55:96:ad:8b:c0:ef:44:59:61:f0:07:c0:44: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:92:F6:17:F0:C3:B8:FC:69:FB:3D:0D:74:58:2F:38:76:AB:EF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 199.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0e:2a:59:fb:1b:15:b6:4d:55:0c:4f:5a:1f:7d:02:38:26: 2b:f2:5b:f2:30:9a:bd:2a:96:46:d3:ec:84:5d:18:0e:d8:b3: af:91:d1:e2:21:63:52:3a:d0:93:d0:af:57:be:ee:d0:ea:2a: ba:9c:10:5c:44:24:39:3a:ba:46:9e:69:46:62:19:1b:63:01: c3:d4:56:9a:0f:5d:ff:30:3f:d6:28:fe:69:cd:57:7f:19:c4: 93:3f:25:a8:9a:54:30:72:50:6a:f6:8b:72:94:d2:67:bf:3b: 0d:8c:c8:6d:d3:75:b8:94:03:3c:cb:d7:5a:26:b6:6c:15:b5: 45:41:08:5e:20:bc:a4:2a:1e:dd:27:d4:da:97:e4:98:47:ce: 02:00:eb:26:78:fa:07:81:a9:5f:89:e7:bf:55:05:91:03:15: ce:6e:8e:0e:a0:49:5f:a4:8d:75:37:0e:cc:2f:65:9c:5f:93: b8:b1:23:b8:8b:63:4a:80:69:d6:7f:a7:29:9b:f1:cb:3b:c9: 9b:cf:70:34:7a:02:e8:09:c0:88:3e:c5:17:5f:4e:b6:3e:44: ae:13:d4:f9:18:91:9a:79:2f:5c:6a:38:de:e0:fb:10:9e:cc: cf:2c:22:ba:d1:53:0f:01:e2:62:d4:11:3a:72:51:6a:24:21: 05:19:8d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K4IzWHWsh8qIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NmFmMzk5Y2UtNDE3NC00NDJhLWI2YWItM2IyYjNjYTJjMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfNg9VKxQvD3T5mR48obC/5kun5vBGlbpUx+ hcm3J2RSopiL4CFi5TAVFrUXbeNgA5Uq9Y4P8zqzxdWAnPPt+kd0lJGGeNKUXzFV qBsHRx3pUWkdNBVUEXkTRZS5X5Cmxjw/S1VD0YMz58eSYWjOO/JYQZBO+TuDWMx1 Z/xCLg5/UzOAVe80vCg1wFdLGLD/8WZ8lzvbU3KJP0N005pHIAi7X6LeJsqTVwk8 f6zOpxWacXGOo29kpRIcafH/GYDSizw321CKnXV6RQ1wtL6+bf+fMlA14PB8k9h+ EcApOWXRhCjCe8lWUG+a9SHX/BY6ulWWrYvA70RZYfAHwESS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSS9hfww7j8afs9DXRYLzh2q++bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNjk5MzU5NDktMjZjYi0z YTFhLTg1ZTctN2I2OTQ4MDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAOKln7GxW2TVUMT1offQI4JivyW/Iwmr0qlkbT7IRdGA7Ys6+R0eIh Y1I60JPQr1e+7tDqKrqcEFxEJDk6ukaeaUZiGRtjAcPUVpoPXf8wP9Yo/mnNV38Z xJM/JaiaVDByUGr2i3KU0me/Ow2MyG3TdbiUAzzL11omtmwVtUVBCF4gvKQqHt0n 1NqX5JhHzgIA6yZ4+geBqV+J579VBZEDFc5ujg6gSV+kjXU3DswvZZxfk7ixI7iL Y0qAadZ/pymb8cs7yZvPcDR6AugJwIg+xRdfTrY+RK4T1PkYkZp5L1xqON7g+xCe zM8sIrrRUw8B4mLUETpyUWokIQUZjR0= -----END CERTIFICATE-----Generated at Fri Oct 17 13:09:08 2025 by rpki-client