$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa File: b47136ca-fd37-38fa-8727-ad3d908c9514.roa (raw, json) Hash identifier: N2Nk83AtckGRZZBcMpT5kSv5QpCPKjup8g6KHKS2yHI= Subject key identifier: 12:B7:45:6E:F9:CE:3B:9C:19:E1:86:E8:2A:52:32:79:75:76:4E:C7 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584AF52134C76B8477EE54FFA280 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 834 IP address blocks: 199.101.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:34:c7:6b:84:77:ee:54:ff:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7a9dafd1-bdc1-4cf8-a491-634d8580c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:33:c6:dc:ff:43:f7:7d:13:e0:7d:de:5e:9b: 2a:05:93:08:89:91:c2:18:ba:94:26:40:a0:c0:b4: 04:dd:3d:35:ca:41:5d:85:d5:48:fc:34:b4:7f:59: 40:b4:53:39:dc:53:2d:76:11:f8:de:c5:dc:1c:8e: be:9c:20:bf:b0:ff:11:71:5d:26:b8:69:61:d3:69: b5:32:27:2c:88:dd:32:df:12:4d:51:df:2f:1f:d7: d6:66:fe:0c:13:bd:69:a5:2b:e6:d1:f5:2c:64:fe: 8c:56:31:54:b9:53:f4:75:f6:45:93:f6:55:c3:55: 81:58:08:7b:d7:47:ce:7d:73:3e:50:ee:ce:fa:1b: b9:e2:38:68:14:f4:78:fe:3e:5f:3c:3f:7e:7f:38: 2b:c3:1a:34:21:49:03:ea:29:1f:13:9f:30:82:6f: e0:2b:d8:8a:7a:09:dc:f7:6b:dd:77:a9:e3:a3:a1: b1:0d:01:b3:49:7d:27:06:82:85:1e:36:be:c7:d0: 1d:e0:15:b0:89:23:c4:2f:77:bd:e6:60:93:6b:26: f2:99:ee:bf:08:35:67:52:0a:70:29:e8:e2:64:5f: bf:40:4a:e8:36:ef:83:c8:e3:4f:88:52:9f:1d:75: 36:9c:2f:6a:6c:cf:7b:d8:32:13:35:96:c7:ba:46: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:45:6E:F9:CE:3B:9C:19:E1:86:E8:2A:52:32:79:75:76:4E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/b47136ca-fd37-38fa-8727-ad3d908c9514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b5:a5:eb:23:22:d7:d2:9c:33:dc:50:8c:bc:e0:33:99:11: 5c:a2:56:18:9c:dc:d1:6e:2a:98:e7:c9:9d:cc:fb:1b:db:19: 1e:15:71:cf:3a:77:2e:eb:56:72:2e:ec:83:dc:ac:d7:5e:98: 0e:e8:31:18:63:b8:19:6f:c5:a2:f9:96:8e:07:7a:d2:df:64: 99:42:df:57:5d:76:d4:aa:3a:3f:34:49:30:13:8a:eb:ce:6b: 26:b5:bc:ff:24:80:41:02:71:1e:f3:fb:b7:ef:b9:9b:cd:6e: 0f:88:fa:5a:09:cc:17:99:49:d7:27:77:55:b1:00:30:60:0d: 40:49:83:6b:09:3d:c3:80:35:f9:d7:bd:6a:6b:f0:7c:6a:60: 05:7c:eb:29:da:55:07:d4:76:5b:18:4e:7f:64:3a:96:ac:2f: 34:f1:80:fc:e1:8f:e2:66:20:dc:61:c7:64:d5:38:f8:97:4e: 6c:40:7d:8f:2c:ec:89:9b:e7:e3:d1:ef:45:29:d4:70:4c:51: 98:e9:9c:69:b2:cc:bd:00:62:ca:12:c4:3f:da:a4:61:0f:95: 7f:61:b5:c9:6e:f4:fb:30:fb:4e:d7:e5:90:d3:24:86:b1:cc: 26:73:30:9a:31:53:45:37:9a:ad:19:32:46:13:06:e1:3e:12: 0e:fe:2b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITTHa4R37lT/ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2E5ZGFmZDEtYmRjMS00Y2Y4LWE0OTEtNjM0ZDg1ODBjOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jPG3P9D930T4H3eXpsqBZMIiZHCGLqUJkCg wLQE3T01ykFdhdVI/DS0f1lAtFM53FMtdhH43sXcHI6+nCC/sP8RcV0muGlh02m1 MicsiN0y3xJNUd8vH9fWZv4ME71ppSvm0fUsZP6MVjFUuVP0dfZFk/ZVw1WBWAh7 10fOfXM+UO7O+hu54jhoFPR4/j5fPD9+fzgrwxo0IUkD6ikfE58wgm/gK9iKegnc 92vdd6njo6GxDQGzSX0nBoKFHja+x9Ad4BWwiSPEL3e95mCTaybyme6/CDVnUgpw KejiZF+/QEroNu+DyONPiFKfHXU2nC9qbM972DITNZbHukbHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK3RW75zjucGeGG6CpSMnl1dk7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYjQ3MTM2Y2EtZmQzNy0z OGZhLTg3MjctYWQzZDkwOGM5NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG61pesjItfSnDPcUIy84DOZEVyiVhic3NFuKpjnyZ3M+xvbGR4Vcc86 dy7rVnIu7IPcrNdemA7oMRhjuBlvxaL5lo4HetLfZJlC31dddtSqOj80STATiuvO aya1vP8kgEECcR7z+7fvuZvNbg+I+loJzBeZSdcnd1WxADBgDUBJg2sJPcOANfnX vWpr8HxqYAV86ynaVQfUdlsYTn9kOpasLzTxgPzhj+JmINxhx2TVOPiXTmxAfY8s 7Imb5+PR70Up1HBMUZjpnGmyzL0AYsoSxD/apGEPlX9htclu9Psw+07X5ZDTJIax zCZzMJoxU0U3mq0ZMkYTBuE+Eg7+KxQ= -----END CERTIFICATE-----Generated at Sat Oct 25 13:39:22 2025 by rpki-client