$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa File: 09ddca0c-00ea-3e20-b685-50e6b951950b.roa (raw, json) Hash identifier: Rpl3BSmIMMwvA9c0XHmESVgw1XLBSJHTGN2ODNPMQSg= Subject key identifier: CF:80:60:BA:C0:DE:A1:17:2E:85:9C:1F:5E:75:18:0C:55:42:55:23 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584BC10ADAD5EAD4C51C4F657780 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 203 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:da:d5:ea:d4:c5:1c:4f:65:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=e8065cd6-e825-4e05-8599-8a10c47c4794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:73:14:57:dc:75:92:f7:09:1d:86:79:63: 97:e7:26:ec:22:95:7d:44:de:8d:cb:cd:b9:2c:b4: bb:87:15:82:95:13:b8:db:d8:ad:0b:82:75:1e:4b: 74:8c:20:21:ba:73:b7:73:7d:60:ce:8a:a5:02:46: 1b:f3:45:31:98:d4:c4:0c:02:5d:21:45:8f:24:b2: 35:81:c1:98:1c:13:78:44:16:74:48:01:1f:8b:4c: 14:21:01:9e:cf:8f:4a:dc:a0:25:3b:e1:f8:40:a4: 9f:bf:80:24:4a:7d:73:90:93:a1:d6:f4:8b:dc:ab: e9:6a:4f:6b:17:1a:fd:22:15:c3:1c:eb:a0:68:b3: 13:b4:7e:4f:dd:57:07:fd:09:13:e2:98:16:dc:fa: a3:ce:47:5d:0a:b1:ad:29:a1:d6:20:4d:e0:e5:2e: 79:1f:c1:0f:f4:25:75:b1:09:d8:0b:1a:5a:9c:3a: c6:05:a5:6e:02:65:1c:43:c4:7f:5c:2a:f3:01:11: 81:f0:37:f2:d1:30:e3:5c:a8:e0:32:e4:6f:a3:ff: 3e:7a:b5:3b:27:8e:52:66:5f:ff:d9:06:ee:a2:dc: 3d:d7:c6:f6:fe:b1:00:95:76:bb:a2:26:27:3b:df: df:b2:cf:3b:b7:c5:61:2e:39:d9:a2:14:66:bd:54: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:80:60:BA:C0:DE:A1:17:2E:85:9C:1F:5E:75:18:0C:55:42:55:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0d:80:1e:c8:ec:a0:f7:ac:85:dd:0f:71:d0:4a:8c:fa:88: 5e:39:98:61:59:cb:49:03:9b:25:5b:a3:a1:bf:ed:95:43:01: 67:42:18:ef:12:3d:46:70:3e:82:b3:60:38:4b:aa:d9:1c:ee: 17:6b:25:fc:18:22:0c:98:67:29:b3:cc:5f:ae:2f:c2:ff:cc: 2a:b8:bc:0e:3d:03:5a:54:65:4a:37:67:44:25:1f:8b:1e:eb: c9:87:9a:35:ec:dd:c1:9c:01:0f:71:ba:d8:9b:e4:9c:55:1c: 6a:2d:43:aa:a1:4e:b2:2d:70:ba:9b:83:a6:86:e7:28:51:0e: 50:01:3b:75:67:21:4f:3b:31:a9:5d:94:57:8d:97:64:fc:c6: 39:4f:23:f3:d6:dc:b7:75:bc:8f:7b:fe:6c:19:f7:9a:20:e4: 9e:83:d1:92:c2:a5:4d:04:e2:b1:17:f7:1c:85:c0:4f:3a:53: 77:28:82:5e:d5:72:a4:fc:41:f6:7f:86:ea:42:da:c6:ad:e5: be:2f:cb:ce:58:b1:b4:fa:89:c4:38:ae:cc:ac:78:18:43:ec: 73:80:b6:ce:88:e0:85:12:93:3a:72:4c:3e:ef:1e:80:d5:c2: 4a:46:c7:e0:99:3a:34:71:8f:b7:e6:f1:e5:a9:65:bc:9a:73: 16:ef:aa:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtrV6tTFHE9ld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZTgwNjVjZDYtZTgyNS00ZTA1LTg1OTktOGExMGM0N2M0Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z9zFFfcdZL3CR2GeWOX5ybsIpV9RN6Ny825 LLS7hxWClRO429itC4J1Hkt0jCAhunO3c31gzoqlAkYb80UxmNTEDAJdIUWPJLI1 gcGYHBN4RBZ0SAEfi0wUIQGez49K3KAlO+H4QKSfv4AkSn1zkJOh1vSL3Kvpak9r Fxr9IhXDHOugaLMTtH5P3VcH/QkT4pgW3PqjzkddCrGtKaHWIE3g5S55H8EP9CV1 sQnYCxpanDrGBaVuAmUcQ8R/XCrzARGB8Dfy0TDjXKjgMuRvo/8+erU7J45SZl// 2Qbuotw918b2/rEAlXa7oiYnO9/fss87t8VhLjnZohRmvVTqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+AYLrA3qEXLoWcH151GAxVQlUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMDlkZGNhMGMtMDBlYS0z ZTIwLWI2ODUtNTBlNmI5NTE5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUNgB7I7KD3rIXdD3HQSoz6iF45mGFZy0kDmyVbo6G/7ZVDAWdCGO8S PUZwPoKzYDhLqtkc7hdrJfwYIgyYZymzzF+uL8L/zCq4vA49A1pUZUo3Z0QlH4se 68mHmjXs3cGcAQ9xutib5JxVHGotQ6qhTrItcLqbg6aG5yhRDlABO3VnIU87Mald lFeNl2T8xjlPI/PW3Ld1vI97/mwZ95og5J6D0ZLCpU0E4rEX9xyFwE86U3cogl7V cqT8QfZ/hupC2sat5b4vy85YsbT6icQ4rsyseBhD7HOAts6I4IUSkzpyTD7vHoDV wkpGx+CZOjRxj7fm8eWpZbyacxbvqpQ= -----END CERTIFICATE-----Generated at Mon Nov 17 05:28:44 2025 by rpki-client