$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa File: c31c4613-8e00-3105-92eb-34eba8b9948a.roa (raw, json) Hash identifier: w62lqYhFqLmvppn3V16wOGOuIjjHf6tjkDnlarFkrgc= Subject key identifier: 1B:76:53:9E:64:8E:11:19:D6:95:3D:06:1A:93:FF:B4:D7:F1:C8:27 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584AE1966C715D4D706CCC0EC840 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 400039 IP address blocks: 199.101.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6c:71:5d:4d:70:6c:cc:0e:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=e1ac21be-39a6-4258-bf8d-9363f2ba2914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:dd:e6:83:82:39:5f:88:57:f1:b0:e7:df: a2:42:07:4c:99:e1:e1:c0:9f:f8:6f:ce:a0:5d:f9: 38:94:d8:bd:16:43:25:3c:f4:61:5d:a1:47:34:5e: dc:1a:25:2a:67:ad:ae:ad:98:15:8c:01:99:e3:48: a4:0a:54:5c:cf:db:0e:c6:df:3d:27:2b:9f:b2:7e: d0:5e:fb:81:d0:db:b5:1b:2e:8e:a9:0d:b8:fb:d1: 5f:0a:fa:1e:02:dc:36:ef:d2:a2:73:9e:a2:81:f7: 2a:92:91:d2:34:5c:70:0c:b9:88:79:a8:d6:69:cf: 99:98:b6:24:56:4e:6a:4f:b1:a0:90:fc:a0:0b:0f: ad:8c:4e:f5:9e:4a:11:8a:44:41:e2:54:ed:87:6d: 36:ba:2c:ab:5c:51:31:48:9a:cf:f5:c5:27:a2:30: 4b:47:0a:dd:7c:19:31:6b:e9:53:c3:81:a1:2f:7a: e2:e2:c6:fe:88:52:64:28:9c:0b:13:59:c9:15:ea: cc:d7:80:1f:a2:f6:17:43:06:e9:41:10:e8:39:98: 6b:d8:78:5a:be:7f:8c:21:99:96:91:d3:98:01:c6: 4b:cd:ec:52:4d:99:a5:18:22:8c:1b:2b:f8:5c:0e: ec:04:30:3e:2d:ee:2f:6b:e5:fb:56:5f:a1:f1:0c: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:53:9E:64:8E:11:19:D6:95:3D:06:1A:93:FF:B4:D7:F1:C8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:8d:d0:89:1e:32:c3:b4:af:02:99:a8:dc:e4:b9:9c:d1: 7d:3d:1a:af:02:bf:b2:0c:bf:52:37:26:1d:f1:25:62:e1:bc: cf:d5:bb:7d:e9:65:64:87:ac:a4:f1:cb:7a:9c:ca:61:54:8b: c9:f1:08:a2:66:f1:25:e6:3d:c6:86:58:e4:30:88:c1:54:fd: f7:6d:41:6b:bb:37:3f:c2:fe:e2:28:54:16:56:92:b4:e7:e6: eb:64:31:8d:8c:ff:22:e1:51:d0:28:98:be:7e:73:29:ae:fe: 04:24:9e:cb:6c:b3:46:ec:21:60:56:f5:75:02:bd:af:03:84: 24:d2:f4:b8:8b:2f:35:eb:dc:ae:83:85:77:56:cb:33:fc:fd: 1f:bb:16:40:70:fe:d6:67:c4:9b:9b:5e:45:41:f4:2c:5a:7a: c8:8f:27:d7:4f:58:36:7b:3a:b1:15:bf:bd:f8:67:34:d5:2e: bf:d0:8b:31:e4:54:0a:c8:fa:0c:28:b7:59:32:62:cb:ed:2e: 57:5c:a8:84:26:8f:ec:12:c4:62:8f:34:00:e6:d4:7b:0c:3a: c7:14:90:e0:5a:21:8b:00:3f:30:95:b0:1a:1c:9f:88:43:eb: d6:35:0c:02:e0:73:e1:84:73:e3:bd:08:e3:2b:b9:40:50:63: 4f:c8:0f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlmxxXU1wbMwOyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZTFhYzIxYmUtMzlhNi00MjU4LWJmOGQtOTM2M2YyYmEyOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogrd5oOCOV+IV/Gw59+iQgdMmeHhwJ/4b86g Xfk4lNi9FkMlPPRhXaFHNF7cGiUqZ62urZgVjAGZ40ikClRcz9sOxt89Jyufsn7Q XvuB0Nu1Gy6OqQ24+9FfCvoeAtw279Kic56igfcqkpHSNFxwDLmIeajWac+ZmLYk Vk5qT7GgkPygCw+tjE71nkoRikRB4lTth202uiyrXFExSJrP9cUnojBLRwrdfBkx a+lTw4GhL3ri4sb+iFJkKJwLE1nJFerM14AfovYXQwbpQRDoOZhr2Hhavn+MIZmW kdOYAcZLzexSTZmlGCKMGyv4XA7sBDA+Le4va+X7Vl+h8QxTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt2U55kjhEZ1pU9BhqT/7TX8cgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYzMxYzQ2MTMtOGUwMC0z MTA1LTkyZWItMzRlYmE4Yjk5NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEbjdCJHjLDtK8Cmajc5Lmc0X09Gq8Cv7IMv1I3Jh3xJWLhvM/Vu33p ZWSHrKTxy3qcymFUi8nxCKJm8SXmPcaGWOQwiMFU/fdtQWu7Nz/C/uIoVBZWkrTn 5utkMY2M/yLhUdAomL5+cymu/gQknstss0bsIWBW9XUCva8DhCTS9LiLLzXr3K6D hXdWyzP8/R+7FkBw/tZnxJubXkVB9CxaesiPJ9dPWDZ7OrEVv734ZzTVLr/QizHk VArI+gwot1kyYsvtLldcqIQmj+wSxGKPNADm1HsMOscUkOBaIYsAPzCVsBocn4hD 69Y1DALgc+GEc+O9COMruUBQY0/ID4I= -----END CERTIFICATE-----Generated at Sat Oct 25 13:39:00 2025 by rpki-client