$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa File: ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json) Hash identifier: 4GgECdWTJNzNrtY2WQ/gm9uNA4a71HVeyL0IRqUwA/0= Subject key identifier: ED:35:F7:EA:B3:7E:93:6D:75:28:E9:E9:CE:FF:F4:40:4D:F0:D9:B3 Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F4328584B4081A669E1A81F028971C5C0 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a6:69:e1:a8:1f:02:89:71:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=83e7bd81-ec95-4953-baa2-bd63dc8ef1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:c4:3e:9a:0b:c4:f9:fd:b9:ce:e1:f3:a7: c7:a9:17:5b:0d:61:5f:4f:bf:e3:2b:a1:21:bc:fb: 8b:b8:7f:62:43:d3:14:59:95:0c:d3:24:40:1b:52: c3:89:8c:82:1a:48:28:28:37:ce:1f:f2:6f:5f:9b: ab:85:80:73:b5:1c:de:d8:40:d9:b9:63:14:3f:03: 71:55:ea:a4:dc:ec:b8:7c:5f:08:4e:e9:4c:01:28: 09:96:08:d1:51:52:96:da:1e:bd:4d:12:ef:ca:e9: 22:f8:86:4e:3e:58:d3:11:e3:ed:e1:a0:ca:41:68: 57:8b:68:fe:05:7e:2d:e9:09:cb:88:dc:48:f5:58: f5:68:1d:c3:16:ff:49:35:e6:d1:8a:d6:31:29:11: be:ca:e3:dd:81:a5:bc:a2:ca:4a:1d:4e:72:94:55: 5d:2e:27:fa:fc:21:9c:b0:b6:5a:e5:f7:4c:8d:46: 9b:a7:12:2e:25:4e:0b:74:cd:b7:5d:a9:70:cd:43: eb:d5:60:3a:9a:99:29:96:ef:3e:88:67:f4:14:24: e8:b7:45:e7:3e:5a:43:75:7d:e8:9d:68:f5:7d:2c: c2:00:d3:73:a6:a5:d0:97:1f:01:f4:f6:3b:65:28: 88:69:3a:19:99:2d:8e:2a:e2:87:2d:e1:32:d3:d9: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:35:F7:EA:B3:7E:93:6D:75:28:E9:E9:CE:FF:F4:40:4D:F0:D9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:24:dc:07:69:7f:b2:ea:98:fe:43:b3:7b:0e:75:ce:5d:55: 48:ed:ff:08:d0:5e:42:71:27:60:28:f0:41:b4:bd:59:18:45: be:a7:22:b7:18:4f:63:43:56:98:f0:a3:98:93:37:af:13:a9: 12:bf:c3:a2:f6:df:5d:ca:a4:48:dd:ef:ce:be:b5:9d:9f:4b: 09:48:95:34:f6:bc:1d:a9:50:ed:a9:f1:e3:84:1c:24:74:0b: 73:cc:12:2a:43:fa:07:43:e9:62:a3:20:18:1b:1b:07:c7:5f: cc:2f:6c:41:a2:38:aa:3a:a3:00:87:23:da:75:6c:72:1e:8c: 01:d7:54:04:9d:be:06:3c:67:23:53:27:f8:8e:64:00:32:bf: cf:f1:a1:9f:3b:59:dc:06:f2:33:44:e0:61:06:9c:c4:84:b2: 02:6f:b9:53:ce:b2:bb:ce:57:68:10:73:e8:4f:46:bc:68:8b: 6c:e0:ea:8a:c4:6e:18:bb:33:ca:11:7a:cb:d2:af:a7:ab:36: 24:26:4a:e0:e6:a2:72:b3:3b:27:ed:ce:ee:ef:18:a4:2a:43: f4:0d:3f:12:7e:9d:63:02:b0:47:78:c3:21:e8:a6:4c:1d:1b: 68:57:8c:94:6f:a4:32:7a:89:0e:b4:55:c4:fc:62:e2:22:33: b1:fa:f8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaZp4agfAolxxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ODNlN2JkODEtZWM5NS00OTUzLWJhYTItYmQ2M2RjOGVmMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJfEPpoLxPn9uc7h86fHqRdbDWFfT7/jK6Eh vPuLuH9iQ9MUWZUM0yRAG1LDiYyCGkgoKDfOH/JvX5urhYBztRze2EDZuWMUPwNx Veqk3Oy4fF8ITulMASgJlgjRUVKW2h69TRLvyuki+IZOPljTEePt4aDKQWhXi2j+ BX4t6QnLiNxI9Vj1aB3DFv9JNebRitYxKRG+yuPdgaW8ospKHU5ylFVdLif6/CGc sLZa5fdMjUabpxIuJU4LdM23XalwzUPr1WA6mpkplu8+iGf0FCTot0XnPlpDdX3o nWj1fSzCANNzpqXQlx8B9PY7ZSiIaToZmS2OKuKHLeEy09miqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO019+qzfpNtdSjp6c7/9EBN8NmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYWU4YzhmYTYtOTU3Yy0z NzlkLThlODYtNjAyYmFhODI4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8k3Adpf7LqmP5Ds3sOdc5dVUjt/wjQXkJxJ2Ao8EG0vVkYRb6nIrcY T2NDVpjwo5iTN68TqRK/w6L2313KpEjd786+tZ2fSwlIlTT2vB2pUO2p8eOEHCR0 C3PMEipD+gdD6WKjIBgbGwfHX8wvbEGiOKo6owCHI9p1bHIejAHXVASdvgY8ZyNT J/iOZAAyv8/xoZ87WdwG8jNE4GEGnMSEsgJvuVPOsrvOV2gQc+hPRrxoi2zg6orE bhi7M8oResvSr6erNiQmSuDmonKzOyftzu7vGKQqQ/QNPxJ+nWMCsEd4wyHopkwd G2hXjJRvpDJ6iQ60VcT8YuIiM7H6+KY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:57 2025 by rpki-client