$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa File: 4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa (raw, json) Hash identifier: dGxH+Q696rR2knnenlXmFOQpI+EtmXU2YOnNV3BxBPc= Subject key identifier: B0:4E:3F:A7:8E:35:B0:E5:17:15:21:87:06:AD:9F:E1:13:78:6A:3A Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F4328584B2CF6E2AD46E2D5D48444C600 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 394840 IP address blocks: 199.34.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e2:ad:46:e2:d5:d4:84:44:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=e9dd6946-c817-40d6-a1fa-dae070d6feee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:89:a0:8a:3f:af:ec:1b:04:d2:32:fc:02: 66:3c:bd:13:e6:a3:e1:4b:fe:a4:1e:d7:ee:01:f9: 73:c5:71:93:57:97:a3:84:43:07:1b:d8:89:42:56: c9:c0:36:ae:eb:6a:8a:49:50:58:fb:fb:2c:67:9a: 9b:5f:a2:7e:ba:77:54:14:64:f2:cd:3c:c2:6b:8d: f6:ec:85:6c:dc:60:18:33:71:c7:c8:19:39:53:b4: f4:0a:f2:7d:43:88:32:70:be:c8:82:bf:72:cf:d4: 19:3a:ff:30:a6:64:6d:1e:c1:21:0d:1f:15:97:09: c6:a6:bd:41:36:9e:31:76:7e:12:a5:56:b5:d7:a7: 9b:d4:21:50:5e:b4:67:34:1e:1c:fc:4b:f7:c1:82: ef:0d:ee:38:d5:76:42:fe:04:45:a8:6f:06:4f:ba: 72:e7:b5:a6:d6:40:7d:c2:f2:24:76:95:df:a6:0c: 89:e4:6f:44:f9:02:6c:de:19:73:6a:3a:9f:58:45: a4:4a:4b:23:05:01:af:21:07:12:58:3a:9c:75:4c: a3:d7:34:46:bd:49:cc:27:02:86:02:0b:19:78:ed: c4:86:ce:dd:a1:a2:ba:38:2b:d9:3b:a8:7f:c3:73: 1e:47:32:9b:53:73:51:92:92:8f:dc:e6:0a:12:77: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:3F:A7:8E:35:B0:E5:17:15:21:87:06:AD:9F:E1:13:78:6A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv4: 199.34.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:eb:31:f8:d6:18:0a:38:fd:c5:e1:c7:64:d1:0b:e7:55:49: fd:f1:ff:99:28:ea:fc:fe:b2:e5:fe:eb:0d:96:3a:dc:20:16: 57:15:77:ec:4b:93:71:02:23:a6:bb:fd:81:da:d9:28:b2:40: f0:34:6f:09:ed:5c:03:3b:34:7f:a2:1d:63:ae:a8:84:eb:27: dd:3b:35:cb:98:86:1a:0c:f5:2d:94:d8:02:26:5a:08:74:00: 86:09:3f:b7:19:ca:ea:0a:cc:04:87:b7:db:a0:6e:9f:b2:9a: 4a:d7:54:72:e5:55:bb:41:89:ed:9f:88:3e:3f:f5:f5:b6:ca: b8:b3:55:78:d4:31:41:12:62:5d:c0:d6:08:34:e8:b3:ea:30: 61:f9:59:66:84:52:b7:04:8f:08:4b:69:9b:18:b9:cc:28:a2: d8:2c:b9:31:04:eb:ad:b1:90:27:f5:7c:1a:84:70:f5:27:40: 3f:0f:9d:12:ec:bc:f0:68:b9:28:5d:91:54:87:93:c1:01:66: 1c:e5:e2:8e:79:19:4e:e3:20:30:cd:ed:b6:7f:4e:f9:ac:7b: 10:cc:06:71:c7:91:40:84:10:3e:35:62:b7:1a:3d:76:df:ba: 05:01:57:a2:94:c2:18:95:d2:9b:ee:cc:c4:3b:f8:c9:51:cd: 6a:24:e5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uKtRuLV1IRExgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTlkZDY5NDYtYzgxNy00MGQ2LWExZmEtZGFlMDcwZDZmZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3KJoIo/r+wbBNIy/AJmPL0T5qPhS/6kHtfu AflzxXGTV5ejhEMHG9iJQlbJwDau62qKSVBY+/ssZ5qbX6J+undUFGTyzTzCa432 7IVs3GAYM3HHyBk5U7T0CvJ9Q4gycL7Igr9yz9QZOv8wpmRtHsEhDR8VlwnGpr1B Np4xdn4SpVa116eb1CFQXrRnNB4c/Ev3wYLvDe441XZC/gRFqG8GT7py57Wm1kB9 wvIkdpXfpgyJ5G9E+QJs3hlzajqfWEWkSksjBQGvIQcSWDqcdUyj1zRGvUnMJwKG AgsZeO3Ehs7doaK6OCvZO6h/w3MeRzKbU3NRkpKP3OYKEnfQfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBOP6eONbDlFxUhhwatn+ETeGo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvNGNjNjg3ZDEtYmJhYy0z MWE2LTljYzMtNGJhNDFmNzhlMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/rMfjWGAo4/cXhx2TRC+dVSf3x/5ko6vz+suX+6w2WOtwgFlcVd+xL k3ECI6a7/YHa2SiyQPA0bwntXAM7NH+iHWOuqITrJ907NcuYhhoM9S2U2AImWgh0 AIYJP7cZyuoKzASHt9ugbp+ymkrXVHLlVbtBie2fiD4/9fW2yrizVXjUMUESYl3A 1gg06LPqMGH5WWaEUrcEjwhLaZsYucwootgsuTEE662xkCf1fBqEcPUnQD8PnRLs vPBouShdkVSHk8EBZhzl4o55GU7jIDDN7bZ/TvmsexDMBnHHkUCEED41YrcaPXbf ugUBV6KUwhiV0pvuzMQ7+MlRzWok5Tk= -----END CERTIFICATE-----Generated at Wed Sep 17 00:44:18 2025 by rpki-client