$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3c0f9c59-9d64-33b6-a628-77279b33e8d0.roa File: 3c0f9c59-9d64-33b6-a628-77279b33e8d0.roa (raw, json) Hash identifier: 6EHXZ6/mW08TzWpmBcr2SezIEbFtWAaxgGQNSoET8f0= Subject key identifier: EF:EA:CC:F8:81:0F:A9:D2:FE:92:A4:B9:0E:08:63:08:00:AA:B1:02 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584BAF672E724F2B03E68F185B80 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3c0f9c59-9d64-33b6-a628-77279b33e8d0.roa Signing time: Wed 29 Oct 2025 18:22:04 +0000 ROA not before: Wed 29 Oct 2025 18:22:04 +0000 ROA not after: Tue 27 Jan 2026 19:22:04 +0000 asID: 398704 IP address blocks: 199.30.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:67:2e:72:4f:2b:03:e6:8f:18:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Oct 29 18:22:04 2025 GMT Not After : Jan 27 19:22:04 2026 GMT Subject: CN=81814d39-8b23-4d95-b8b2-f08c5b96788e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:b5:49:75:05:49:b1:a6:ee:6b:94:9b:21: 87:6f:2c:35:60:db:a9:8f:99:38:a5:9c:c7:5c:12: 3f:ce:f5:b7:d0:ee:04:d1:63:f3:d6:a4:84:2d:68: 3c:f1:f7:08:ea:07:46:31:cb:de:7a:9f:84:a1:fa: 81:92:dc:d6:10:20:2b:3f:8a:1b:1a:7e:1c:a2:39: 94:dd:46:64:fe:3a:21:55:15:70:b5:89:e1:45:d5: 41:0e:5e:69:06:18:cb:02:71:6f:4d:31:75:f2:6f: d1:e3:53:d7:30:be:e5:ae:f2:7f:07:f4:11:54:4f: f5:26:66:c9:ac:93:b0:62:a8:98:ee:61:29:2e:3a: da:b8:3f:6b:47:e6:87:2c:fd:8a:39:78:a1:b6:89: 3d:0a:25:ed:bb:91:cb:ab:6a:d8:da:51:4a:d1:d1: 39:c1:b8:7a:e5:fa:5b:23:34:31:8b:b9:18:51:c5: 87:6b:84:c1:20:98:1a:8c:c0:04:b4:61:b5:03:8b: 00:67:c8:f9:70:7a:05:23:c4:0d:22:b1:1b:1a:9b: 8b:d1:e3:1d:ad:3c:f3:9e:4d:db:77:db:6a:35:60: 60:c6:25:df:55:a8:e9:b7:ad:79:d7:dc:66:43:64: ae:89:b3:ef:ef:c0:e1:71:da:10:f8:be:56:81:6f: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:CC:F8:81:0F:A9:D2:FE:92:A4:B9:0E:08:63:08:00:AA:B1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/3c0f9c59-9d64-33b6-a628-77279b33e8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:87:1f:54:65:d7:a2:72:c0:b6:23:91:0a:04:76:45:36:81: f5:e9:09:27:02:c2:d2:80:23:72:26:7c:e8:c4:8c:cf:b5:9f: ba:8f:de:1b:be:e5:e2:b5:25:b8:3f:3d:2f:a5:a6:4f:04:62: c5:9c:6f:8f:54:d4:0b:a0:47:df:d6:aa:f4:de:af:cc:05:6e: 0e:84:31:79:3e:96:a4:f7:b9:a4:b4:de:c4:28:34:11:71:91: 55:4c:b4:e3:6b:e3:fc:6c:51:f6:83:07:69:96:d4:e7:0b:4f: 5a:10:3b:07:4f:d7:ad:f4:ef:91:40:40:b2:7d:c3:7e:05:b0: ef:2a:7b:1d:a3:06:86:96:01:69:a6:b5:4b:41:4f:ba:9f:ce: c4:97:3b:a1:e4:da:d1:f4:81:d9:c1:35:16:83:0f:a2:94:8c: 4c:dd:43:6d:81:5d:8e:9e:47:a5:c1:7b:89:71:c9:58:e4:68: e4:0d:fb:63:26:24:db:95:ab:72:ef:aa:7d:74:2f:16:c0:f7: 46:d0:ca:35:99:02:05:04:23:ef:f5:1a:4f:71:26:ed:89:ee: 5a:ec:fb:2d:00:c9:d4:ea:64:cd:09:00:bd:41:63:04:a0:7c: dc:41:a0:ed:63:41:93:4e:19:48:d8:0d:9d:bd:cd:58:d1:d1: f9:bf:d3:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuvZy5yTysD5o8YW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI1MTAyOTE4MjIwNFoXDTI2MDEyNzE5MjIwNFowLzEtMCsGA1UEAxMk ODE4MTRkMzktOGIyMy00ZDk1LWI4YjItZjA4YzViOTY3ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ea1SXUFSbGm7muUmyGHbyw1YNupj5k4pZzH XBI/zvW30O4E0WPz1qSELWg88fcI6gdGMcveep+EofqBktzWECArP4obGn4cojmU 3UZk/johVRVwtYnhRdVBDl5pBhjLAnFvTTF18m/R41PXML7lrvJ/B/QRVE/1JmbJ rJOwYqiY7mEpLjrauD9rR+aHLP2KOXihtok9CiXtu5HLq2rY2lFK0dE5wbh65fpb IzQxi7kYUcWHa4TBIJgajMAEtGG1A4sAZ8j5cHoFI8QNIrEbGpuL0eMdrTzznk3b d9tqNWBgxiXfVajpt61519xmQ2SuibPv78DhcdoQ+L5WgW9oGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/qzPiBD6nS/pKkuQ4IYwgAqrECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvM2MwZjljNTktOWQ2NC0z M2I2LWE2MjgtNzcyNzliMzNlOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWHH1Rl16JywLYjkQoEdkU2gfXpCScCwtKAI3ImfOjEjM+1n7qP3hu+ 5eK1Jbg/PS+lpk8EYsWcb49U1AugR9/WqvTer8wFbg6EMXk+lqT3uaS03sQoNBFx kVVMtONr4/xsUfaDB2mW1OcLT1oQOwdP163075FAQLJ9w34FsO8qex2jBoaWAWmm tUtBT7qfzsSXO6Hk2tH0gdnBNRaDD6KUjEzdQ22BXY6eR6XBe4lxyVjkaOQN+2Mm JNuVq3Lvqn10LxbA90bQyjWZAgUEI+/1Gk9xJu2J7lrs+y0AydTqZM0JAL1BYwSg fNxBoO1jQZNOGUjYDZ29zVjR0fm/0w8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:11:05 2025 by rpki-client