$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa File: a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa (raw, json) Hash identifier: CT+YcYLlBBlwFv2ITTd9vRy8jHx29YB6iY9sEsBzAPo= Subject key identifier: 47:95:06:79:5A:56:65:6B:04:9F:7C:9B:22:06:4C:8F:74:3B:51:7E Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Certificate serial: 010D0C9F4328584BA0D2467D8D5CE2C8E3F90240 Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 394161 IP address blocks: 199.120.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:46:7d:8d:5c:e2:c8:e3:f9:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2b661760-f775-44b5-955b-11c01b1dc147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:9b:d3:ef:50:4b:de:61:29:4c:78:c6:81: 3e:11:e3:79:a8:e0:c3:4d:3d:7d:21:35:d2:dd:14: a9:1f:4c:50:5b:5e:9b:e2:55:54:cb:f1:07:93:2a: 63:9b:a9:16:b7:fb:41:57:97:eb:f6:51:87:03:e8: 5a:3e:3e:bf:4c:a9:fb:a5:f4:71:98:d5:02:5f:81: 0b:5a:3e:de:a7:74:1c:e2:30:f0:bf:20:e2:b4:ca: b6:87:a2:aa:a2:c3:dd:9d:83:f0:0a:59:cb:15:a9: dd:f4:61:21:20:37:b0:5a:59:c1:69:0f:ed:44:0b: 2c:3b:c4:9c:f8:29:33:99:48:94:4d:79:de:b5:dc: 67:c6:4b:c1:63:07:c3:c0:9a:62:df:e4:99:10:ea: 1b:42:85:51:c0:f6:3e:59:b2:c6:32:3c:10:82:2d: d9:b3:93:75:b8:7f:b9:a3:7b:6c:7e:b0:c5:d3:de: fd:b2:ba:2d:27:93:f3:8b:42:9c:4b:ef:72:f8:0c: 51:13:57:ce:40:04:ae:bb:07:a7:70:10:db:96:7f: 2e:16:a9:16:22:0d:70:11:6d:4d:af:9d:d6:be:eb: 35:55:4c:e8:66:f1:8f:0a:a8:22:f1:49:c8:71:6c: ee:fc:70:a9:08:e6:f2:34:94:d8:d0:9f:56:98:c7: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:95:06:79:5A:56:65:6B:04:9F:7C:9B:22:06:4C:8F:74:3B:51:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl X509v3 Authority Key Identifier: keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer sbgp-ipAddrBlock: critical IPv4: 199.120.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fc:3d:a6:42:85:e8:4a:e5:3b:8e:a0:2b:31:88:d6:b4:bb: 94:a6:d3:0f:83:7d:cc:5b:bf:d7:0a:16:6d:5a:5c:5f:e3:a5: 81:d5:b6:44:bc:8e:7c:34:d0:3a:2a:cf:f2:4f:59:68:dc:9c: 41:ac:42:d5:8c:a3:23:b6:15:54:d5:f1:62:09:a7:31:d1:ca: 74:75:bf:bd:e3:2b:4b:95:bc:47:62:93:7f:58:6a:42:63:08: da:af:fa:21:3f:d6:7b:01:98:09:79:47:4c:dc:c3:db:d0:03: 48:d9:e4:bd:c6:e6:8d:56:16:59:a8:84:85:1e:45:15:38:e6: 28:30:c5:09:df:eb:2f:b0:e8:8d:8f:a5:36:62:36:10:f3:6f: 3e:36:a9:5d:b0:f0:d3:d0:39:0a:4e:a0:0e:49:a8:7d:9a:2b: 61:79:77:c8:26:5f:3b:9c:78:f3:58:a3:2c:d1:68:9e:c3:44: bd:4d:fc:db:5f:48:3e:06:47:1f:ab:12:85:b3:a9:6a:4f:56: 0e:14:f9:ea:54:cb:02:29:ff:fe:d8:a7:f4:cc:1b:a8:0f:34: f3:73:55:65:8b:64:50:7c:a5:2d:30:4a:c0:8f:d3:1f:29:2d: da:ed:66:09:dc:5b:13:13:c1:5e:5e:1b:d4:4b:1a:cb:23:3c: 91:e7:df:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kZ9jVziyOP5AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm MmY5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmI2NjE3NjAtZjc3NS00NGI1LTk1NWItMTFjMDFiMWRjMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eKb0+9QS95hKUx4xoE+EeN5qODDTT19ITXS 3RSpH0xQW16b4lVUy/EHkypjm6kWt/tBV5fr9lGHA+haPj6/TKn7pfRxmNUCX4EL Wj7ep3Qc4jDwvyDitMq2h6KqosPdnYPwClnLFand9GEhIDewWlnBaQ/tRAssO8Sc +CkzmUiUTXnetdxnxkvBYwfDwJpi3+SZEOobQoVRwPY+WbLGMjwQgi3Zs5N1uH+5 o3tsfrDF0979srotJ5Pzi0KcS+9y+AxRE1fOQASuuwencBDbln8uFqkWIg1wEW1N r53Wvus1VUzoZvGPCqgi8UnIcWzu/HCpCObyNJTY0J9WmMftVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeVBnlaVmVrBJ98myIGTI90O1F+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3 ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvYTM2YTU0M2EtNWZlNS0z MWM1LWE1MmEtY2VlZGM5OWZiN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0 ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3 MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3gwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG78PaZChehK5TuOoCsxiNa0u5Sm0w+Dfcxbv9cKFm1aXF/jpYHVtkS8 jnw00Doqz/JPWWjcnEGsQtWMoyO2FVTV8WIJpzHRynR1v73jK0uVvEdik39YakJj CNqv+iE/1nsBmAl5R0zcw9vQA0jZ5L3G5o1WFlmohIUeRRU45igwxQnf6y+w6I2P pTZiNhDzbz42qV2w8NPQOQpOoA5JqH2aK2F5d8gmXzucePNYoyzRaJ7DRL1N/Ntf SD4GRx+rEoWzqWpPVg4U+epUywIp//7Yp/TMG6gPNPNzVWWLZFB8pS0wSsCP0x8p LdrtZgncWxMTwV5eG9RLGssjPJHn31k= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:33 2025 by rpki-client