$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa File: f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa (raw, json) Hash identifier: Cx6VvjvzvwqGE31kEELIglrrHXTknbk+y++dbQZTs4g= Subject key identifier: 17:3D:95:AE:A2:9C:C2:EC:81:FC:84:77:8E:8B:BA:A9:AD:2F:01:9D Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584B153C1B3A56C449890C2F5A80 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1b:3a:56:c4:49:89:0c:2f:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=fd34a116-cdb5-4eac-990d-a750df2ad263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:2b:68:7c:34:f1:7f:7a:31:f7:df:81:2f: 0d:5f:1d:54:ab:b1:e2:b0:3c:48:c1:08:23:de:97: 9d:fb:bc:e9:d8:ab:9a:8c:16:34:30:3e:7a:1d:d4: 57:ed:bd:d9:c4:0c:1f:eb:00:30:e8:45:b0:d2:30: ca:4b:bf:82:ff:be:93:31:87:6f:cf:65:79:f0:39: 3a:e7:fe:e8:37:6b:6d:df:20:d5:5d:84:91:32:87: 51:2a:2b:d1:14:75:ae:78:db:71:34:89:b8:82:fb: 5a:9e:b6:7f:31:26:e9:07:bc:5f:42:9b:34:07:5c: 1a:12:fc:2f:19:59:f0:f0:d1:45:f2:75:5f:38:b1: 03:fd:96:b0:7e:22:f2:f8:d3:cb:85:5b:f4:b2:90: 05:14:00:ad:93:d1:0b:77:cc:f2:9f:82:5e:e4:e1: 57:46:6c:19:df:b5:67:fe:31:e8:0e:38:7a:8b:c5: 92:f9:27:75:c4:18:e2:61:d2:7e:cf:b2:f9:f1:0b: 50:d2:e8:dc:82:ef:16:b1:22:a8:b6:7e:01:e6:1d: 2e:67:34:8b:39:bb:58:40:44:bf:2c:c1:4a:2e:15: 95:85:c4:98:a8:85:89:94:d8:44:f8:8e:05:a1:27: db:4b:87:ae:bd:6e:13:e4:9a:27:8b:a5:a1:dd:c7: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3D:95:AE:A2:9C:C2:EC:81:FC:84:77:8E:8B:BA:A9:AD:2F:01:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:e2:ba:a5:8f:eb:ce:b7:31:f3:e3:e7:d0:a8:f5:6f:bf: 7a:e2:af:00:8a:40:58:a0:18:a8:ca:e3:f4:46:47:26:79:99: 17:c1:b1:77:e2:cd:71:b5:a6:c2:bf:f1:a7:a0:0f:58:3b:05: 0b:5a:fd:a0:96:d7:ec:8b:2f:1e:fe:6c:d2:b0:8a:c7:5c:f8: 23:02:d8:12:77:5d:a5:bc:fb:7a:7c:69:05:d3:f0:0b:ab:a5: 1e:4a:3e:8d:b0:22:de:b0:e1:94:5f:17:5d:09:84:40:25:c7: 79:63:d4:7c:1e:74:0b:94:83:73:aa:e0:df:ed:a8:77:b3:35: dd:7e:84:1a:f8:ec:74:8a:df:7f:74:f6:bc:dd:00:86:2e:0f: 8f:e9:c5:23:ff:0d:65:5b:b2:c3:83:a4:e6:ff:e8:83:2f:cc: 27:d2:15:db:4d:87:25:dd:04:88:dd:26:be:c2:53:40:4a:09: 06:54:22:82:08:4a:48:55:2e:ab:04:fa:cf:65:c1:e1:0c:e9: 7f:12:c4:ab:54:c5:1f:ff:49:3e:79:66:72:96:a0:82:04:2d: ba:72:12:89:88:a5:2d:01:98:df:a9:4f:0d:01:b3:22:8a:8c: 93:88:05:ac:b1:2f:e3:ef:72:67:ec:7e:8b:e5:e5:98:93:72: e0:74:54:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBs6VsRJiQwvWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmQzNGExMTYtY2RiNS00ZWFjLTk5MGQtYTc1MGRmMmFkMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8raHw08X96MfffgS8NXx1Uq7HisDxIwQgj 3ped+7zp2KuajBY0MD56HdRX7b3ZxAwf6wAw6EWw0jDKS7+C/76TMYdvz2V58Dk6 5/7oN2tt3yDVXYSRModRKivRFHWueNtxNIm4gvtanrZ/MSbpB7xfQps0B1waEvwv GVnw8NFF8nVfOLED/ZawfiLy+NPLhVv0spAFFACtk9ELd8zyn4Je5OFXRmwZ37Vn /jHoDjh6i8WS+Sd1xBjiYdJ+z7L58QtQ0ujcgu8WsSKotn4B5h0uZzSLObtYQES/ LMFKLhWVhcSYqIWJlNhE+I4FoSfbS4euvW4T5Joni6Wh3cdHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc9la6inMLsgfyEd46LuqmtLwGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvZjhmYzhlYWItZWM2ZC0z YmE3LWI0NDYtZmQxM2MyYWNmM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEso4rqlj+vOtzHz4+fQqPVvv3rirwCKQFigGKjK4/RGRyZ5mRfBsXfi zXG1psK/8aegD1g7BQta/aCW1+yLLx7+bNKwisdc+CMC2BJ3XaW8+3p8aQXT8Aur pR5KPo2wIt6w4ZRfF10JhEAlx3lj1HwedAuUg3Oq4N/tqHezNd1+hBr47HSK3390 9rzdAIYuD4/pxSP/DWVbssODpOb/6IMvzCfSFdtNhyXdBIjdJr7CU0BKCQZUIoII SkhVLqsE+s9lweEM6X8SxKtUxR//ST55ZnKWoIIELbpyEomIpS0BmN+pTw0BsyKK jJOIBayxL+Pvcmfsfovl5ZiTcuB0VME= -----END CERTIFICATE-----Generated at Tue Oct 28 01:58:38 2025 by rpki-client