$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json) Hash identifier: MdV7fnLRFU5dLR2saMnSksG1AJsYbXIdjdehu2Z6BBY= Subject key identifier: 76:E7:A8:1B:F1:24:30:56:ED:A6:2D:86:CE:D6:5B:04:6B:03:4D:A4 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584B715CB2F83A0BA1C7108F7B00 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 26459 IP address blocks: 199.250.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b2:f8:3a:0b:a1:c7:10:8f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=aa4b567c-5785-43db-a915-3c3eb859dbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:7d:02:4e:f3:75:b3:ff:34:ef:07:a7:e4: b0:2f:88:cb:0e:7c:8e:ee:09:7a:13:d2:cc:d9:b0: 0e:0c:34:81:aa:51:fa:0f:4a:a5:09:c7:9f:ad:54: de:36:b1:86:79:31:47:f7:ed:05:d4:87:36:68:c4: dc:5c:56:e5:0b:b0:89:a0:41:63:99:74:1b:d2:f5: 61:18:d5:55:c1:02:d0:26:0e:96:f5:d7:48:4b:88: bb:12:73:c8:ab:67:81:de:2c:28:39:31:76:f3:41: 18:d1:34:ff:8c:3e:54:ba:66:4c:6a:20:4c:ca:e6: 7b:16:6c:1f:6a:63:16:e3:19:39:63:7e:69:6d:19: 5c:d3:be:73:d6:d1:f2:a3:bb:07:ae:30:1e:9c:46: d9:17:6b:ca:c1:a3:9d:9f:ff:cd:7b:99:5f:64:9d: e1:e3:2c:9a:8f:68:cc:9f:78:0d:6b:34:46:37:3b: 6b:ab:91:84:dd:46:c0:0d:8c:a9:db:d8:c3:90:a8: b4:29:16:18:81:c6:aa:02:12:bc:da:66:f8:48:51: ab:14:36:2e:1f:1a:8e:6d:17:7b:99:a5:a2:15:65: f3:cd:b5:f0:3c:c7:50:79:ac:f3:c5:48:13:a0:d4: 9a:b1:33:c3:7d:52:2c:31:83:27:4c:da:93:40:f7: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:A8:1B:F1:24:30:56:ED:A6:2D:86:CE:D6:5B:04:6B:03:4D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 199.250.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bd:31:f3:d5:76:e5:1c:b6:87:3b:6c:45:9f:a8:5e:2b:0a: 5d:ef:f2:5a:18:ae:01:1c:e4:5c:a9:da:ac:1d:33:a8:f1:b0: 0e:50:5c:fe:5e:12:45:c1:52:97:08:bf:2f:39:77:64:55:d1: 34:d5:27:94:ce:26:31:b5:32:0e:fa:e9:c6:bb:56:59:a1:d5: cf:12:b7:83:9a:a0:0d:91:94:02:75:f0:ab:cd:d1:6a:a9:8d: 35:2e:32:76:9b:0f:82:d2:01:78:e3:71:56:a5:f1:62:4a:64: 0b:b3:5e:38:32:bf:6d:7e:07:cb:c5:79:75:1a:b1:7f:62:2c: 5c:41:70:7e:05:ab:0e:0a:67:4d:03:5c:65:de:64:d2:9e:4d: 30:29:53:01:63:e8:3c:3a:a0:5b:8f:2f:aa:5f:ec:4f:67:10: 0b:91:26:75:13:86:1c:21:57:1e:df:06:33:c6:df:c9:83:2c: 69:d2:4e:d8:05:ce:8a:ef:c2:37:bc:9c:1c:2e:ec:d2:95:49: 63:04:55:ae:38:1f:bb:1f:52:e8:cd:29:50:b7:a3:fb:25:f2: 75:b5:b5:d0:8f:e1:85:ee:fe:a8:22:c7:8e:15:0d:42:52:99: 25:fa:7d:8a:c4:4c:88:5c:c8:b7:08:cf:b5:4a:fa:2e:6e:a0: 1e:b9:0d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLL4OguhxxCPewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWE0YjU2N2MtNTc4NS00M2RiLWE5MTUtM2MzZWI4NTlkYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAN9Ak7zdbP/NO8Hp+SwL4jLDnyO7gl6E9LM 2bAODDSBqlH6D0qlCcefrVTeNrGGeTFH9+0F1Ic2aMTcXFblC7CJoEFjmXQb0vVh GNVVwQLQJg6W9ddIS4i7EnPIq2eB3iwoOTF280EY0TT/jD5UumZMaiBMyuZ7Fmwf amMW4xk5Y35pbRlc075z1tHyo7sHrjAenEbZF2vKwaOdn//Ne5lfZJ3h4yyaj2jM n3gNazRGNztrq5GE3UbADYyp29jDkKi0KRYYgcaqAhK82mb4SFGrFDYuHxqObRd7 maWiFWXzzbXwPMdQeazzxUgToNSasTPDfVIsMYMnTNqTQPdWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbnqBvxJDBW7aYths7WWwRrA02kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvMTE0YzIzZWItZDJmNy0z YTQzLTgyNjYtNDY0ZTgxODM2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+9MfPVduUctoc7bEWfqF4rCl3v8loYrgEc5Fyp2qwdM6jxsA5QXP5e EkXBUpcIvy85d2RV0TTVJ5TOJjG1Mg766ca7Vlmh1c8St4OaoA2RlAJ18KvN0Wqp jTUuMnabD4LSAXjjcVal8WJKZAuzXjgyv21+B8vFeXUasX9iLFxBcH4Fqw4KZ00D XGXeZNKeTTApUwFj6Dw6oFuPL6pf7E9nEAuRJnUThhwhVx7fBjPG38mDLGnSTtgF zorvwje8nBwu7NKVSWMEVa44H7sfUujNKVC3o/sl8nW1tdCP4YXu/qgix44VDUJS mSX6fYrETIhcyLcIz7VK+i5uoB65DVI= -----END CERTIFICATE-----Generated at Sat Oct 18 18:42:37 2025 by rpki-client