$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa File: 2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa (raw, json) Hash identifier: Jmn87ZEj9LcSjCZPabgBSMce6Mx+DcsoISCqBGe5tbw= Subject key identifier: 1F:E4:CF:CF:8B:F1:52:A3:AA:25:F4:00:C7:F6:34:5D:2F:9E:FD:56 Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584AF5214733A7DDE3C8527D7150 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 199.101.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:47:33:a7:dd:e3:c8:52:7d:71:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5aed3858-6fb7-47c7-82f0-c06b7298bc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:71:b3:31:55:a3:f5:7a:9d:87:a4:3c:2b: 34:1f:b4:80:0f:07:ff:78:63:73:5f:d2:5b:ac:de: b6:7c:3e:60:3f:4d:5f:c9:2c:bc:a7:27:a7:f1:20: 77:59:12:97:09:9e:e0:ee:b2:6d:c7:75:cb:cd:57: 73:c7:18:fb:42:38:50:f3:ae:0b:f4:73:57:52:79: 72:f7:87:f9:65:9d:cc:86:25:b5:b8:e8:1e:40:3e: 16:f2:cd:09:c3:ba:cb:6f:3f:7b:ff:91:de:e0:13: dc:1f:f9:a6:4e:83:71:0a:1d:a7:a7:5b:22:cc:4d: 87:f6:39:f9:af:46:a0:99:3a:b7:c6:14:75:09:1b: d0:72:fd:86:e8:31:31:75:63:e0:32:68:dd:b5:4e: 25:96:d4:34:5a:60:d1:dc:69:bb:b6:4d:9b:2f:4c: e8:e0:6b:df:cc:aa:03:79:ad:18:4c:d5:77:76:b8: 01:eb:4e:7d:65:7a:6c:54:c9:85:de:d1:98:e6:4b: ca:bd:9a:8a:f2:6c:77:32:24:e8:58:3c:16:13:35: e8:db:f6:d3:26:b5:2a:de:12:fc:e6:87:f4:5e:55: 0b:2c:1b:34:76:44:de:24:3c:b7:76:24:da:08:c7: e8:68:d4:10:ab:60:f3:70:14:6b:25:cd:43:6a:aa: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E4:CF:CF:8B:F1:52:A3:AA:25:F4:00:C7:F6:34:5D:2F:9E:FD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 199.101.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6b:e8:97:3a:b9:7e:32:4f:59:ac:4e:27:e6:2f:ff:a3:ad: ed:e8:8a:36:9a:80:95:a6:e1:23:a3:9d:94:5d:34:a5:1d:28: 6b:86:37:e4:e8:77:f3:01:77:12:ef:d6:99:ef:65:b9:81:e4: d8:53:7d:87:1d:3e:a5:18:bb:e9:b2:8d:aa:de:b8:e3:58:95: 79:e5:04:b8:e0:bc:d5:a2:11:94:51:fc:8c:8c:f3:7b:ce:09: 06:5a:43:de:cb:a2:12:6f:bd:52:a9:6a:83:17:c3:2a:bb:ae: 10:dd:f2:c6:d9:30:7b:ba:19:a0:6b:a3:a8:a6:12:ab:20:55: 6d:e5:ec:d3:eb:c5:27:15:0d:16:6b:dc:ba:55:11:a0:78:60: 1c:d6:0c:fe:d9:af:f3:38:72:17:a7:67:31:31:0e:ac:cd:d2: 31:b9:37:f4:9a:47:55:ee:ba:48:b7:65:7e:5e:7a:31:1f:dd: e3:09:72:a6:31:52:17:16:07:c1:85:ad:f8:94:5b:b9:cf:5e: 98:71:d4:00:0b:76:04:77:56:bd:e1:f7:b0:0d:b4:5e:c6:48: 49:c6:2b:50:75:a5:fd:53:6f:41:39:40:dc:af:9f:41:ac:c0: 56:a3:15:61:fe:75:b2:24:6f:e9:2f:07:ea:c4:ce:35:94:e7: ce:fa:26:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUczp93jyFJ9cVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWFlZDM4NTgtNmZiNy00N2M3LTgyZjAtYzA2YjcyOThiYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jtxszFVo/V6nYekPCs0H7SADwf/eGNzX9Jb rN62fD5gP01fySy8pyen8SB3WRKXCZ7g7rJtx3XLzVdzxxj7QjhQ864L9HNXUnly 94f5ZZ3MhiW1uOgeQD4W8s0Jw7rLbz97/5He4BPcH/mmToNxCh2np1sizE2H9jn5 r0agmTq3xhR1CRvQcv2G6DExdWPgMmjdtU4lltQ0WmDR3Gm7tk2bL0zo4GvfzKoD ea0YTNV3drgB6059ZXpsVMmF3tGY5kvKvZqK8mx3MiToWDwWEzXo2/bTJrUq3hL8 5of0XlULLBs0dkTeJDy3diTaCMfoaNQQq2DzcBRrJc1DaqoSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/kz8+L8VKjqiX0AMf2NF0vnv1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvMmI0Mjc1ZGQtZDY5Zi0z NzRkLTg4MWUtNDFlNWFkOGY0YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJr6Jc6uX4yT1msTifmL/+jre3oijaagJWm4SOjnZRdNKUdKGuGN+To d/MBdxLv1pnvZbmB5NhTfYcdPqUYu+myjareuONYlXnlBLjgvNWiEZRR/IyM83vO CQZaQ97LohJvvVKpaoMXwyq7rhDd8sbZMHu6GaBro6imEqsgVW3l7NPrxScVDRZr 3LpVEaB4YBzWDP7Zr/M4chenZzExDqzN0jG5N/SaR1Xuuki3ZX5eejEf3eMJcqYx UhcWB8GFrfiUW7nPXphx1AALdgR3Vr3h97ANtF7GSEnGK1B1pf1Tb0E5QNyvn0Gs wFajFWH+dbIkb+kvB+rEzjWU5876Ji0= -----END CERTIFICATE-----Generated at Fri Sep 19 05:15:46 2025 by rpki-client