$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa File: 64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa (raw, json) Hash identifier: mehZUFFZHPqJ0qXSiMXcElW7MWek/K0rQCqTUgyo0l4= Subject key identifier: 38:05:EF:E8:6D:35:AB:A5:CC:B7:82:8A:78:6C:7E:23:75:1D:C8:2F Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584B477C7D39799AEDF4F6F81E40 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 394195 IP address blocks: 199.7.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7d:39:79:9a:ed:f4:f6:f8:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=410eb0c4-557a-4850-b571-4d36a780a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:e6:bb:d6:b3:37:9f:e8:7d:be:07:7d:c2: 85:f6:a7:c1:10:13:8f:19:3e:e2:5f:ad:41:c8:bc: 6f:f7:ac:95:60:b7:9b:8c:e9:2f:0c:ba:b0:58:5c: 32:a1:42:3c:19:b3:e9:db:7e:55:2d:76:ac:da:29: 4c:b5:0b:40:96:29:b2:b3:e1:99:79:e4:59:72:4a: ae:c8:82:6e:10:84:48:55:08:1d:1e:ea:62:82:42: 73:3e:26:d3:87:8e:68:0a:8b:2f:94:23:e5:e8:4e: 5d:33:9d:1f:22:bd:c2:b6:85:ca:27:ea:a3:4b:8c: a0:d5:4d:32:cf:d2:b9:a6:be:74:8b:f4:4a:78:74: fe:13:71:b6:b9:4a:11:89:7c:90:1b:a6:47:67:ec: e9:15:b4:cf:72:2f:90:4a:e3:b3:3f:17:ae:42:e9: f0:7d:88:1f:39:94:07:7c:04:1e:72:21:68:9c:2b: ba:7b:3d:54:5d:20:63:1b:9b:84:5a:26:f0:16:56: ad:65:48:7a:45:af:0f:57:2c:97:b3:60:53:41:6a: dc:a4:61:63:f5:b3:e8:b3:6a:33:65:3a:6a:57:d5: 76:a0:78:e7:64:3a:a1:8c:7c:1d:50:5e:3d:54:48: 21:6b:28:45:e4:36:97:e1:2d:48:69:3a:bd:2f:af: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:05:EF:E8:6D:35:AB:A5:CC:B7:82:8A:78:6C:7E:23:75:1D:C8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 199.7.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2f:f4:54:7c:cb:22:82:a8:83:40:ad:50:e6:10:f1:3a:80: af:6d:31:f9:fc:6d:af:76:c5:60:8e:92:ee:6d:1f:a6:18:1d: bb:8f:5b:66:30:23:7e:69:9b:b7:cd:02:39:f7:d0:86:3d:2b: f6:52:a0:09:a2:20:c3:b0:c8:37:aa:66:59:72:83:e4:1e:02: ce:3d:c2:cc:10:2f:99:d2:b9:c1:1e:1a:35:9a:43:4e:dc:a2: bf:b5:b0:d8:19:ba:ce:a0:b0:36:04:37:2e:92:95:de:46:ab: 68:d3:52:b3:36:5d:db:9c:b8:6a:7c:bd:8b:01:8f:22:74:73: 3e:bb:ed:43:2f:80:bc:42:38:86:4a:32:50:e2:50:a3:69:99: 52:bc:43:df:d4:9e:56:bf:e5:35:85:f6:62:7a:f6:2c:ed:a9: a2:a8:5a:a5:3c:c2:02:2d:d2:86:8a:61:47:8e:f1:4c:06:1c: 94:8b:06:fb:7b:aa:f5:c3:d6:58:be:a6:5c:8b:8b:e1:49:45: 34:fb:9e:68:d9:f8:31:11:e6:ee:ac:05:77:65:b3:a8:b1:40: fc:05:07:e5:1f:c1:b3:e2:83:cb:37:7f:1c:98:63:ca:d2:4c: 05:1a:e3:27:3c:2d:bc:8d:20:36:79:4b:bd:e0:ab:84:bc:84: 93:72:62:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH05eZrt9Pb4HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NDEwZWIwYzQtNTU3YS00ODUwLWI1NzEtNGQzNmE3ODBhNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIbmu9azN5/ofb4HfcKF9qfBEBOPGT7iX61B yLxv96yVYLebjOkvDLqwWFwyoUI8GbPp235VLXas2ilMtQtAlimys+GZeeRZckqu yIJuEIRIVQgdHupigkJzPibTh45oCosvlCPl6E5dM50fIr3CtoXKJ+qjS4yg1U0y z9K5pr50i/RKeHT+E3G2uUoRiXyQG6ZHZ+zpFbTPci+QSuOzPxeuQunwfYgfOZQH fAQeciFonCu6ez1UXSBjG5uEWibwFlatZUh6Ra8PVyyXs2BTQWrcpGFj9bPos2oz ZTpqV9V2oHjnZDqhjHwdUF49VEghayhF5DaX4S1IaTq9L6967wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgF7+htNaulzLeCinhsfiN1HcgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvNjRmMzA5OGMtMjNkZC0z MWNlLTlmMGEtNThlNzNhM2YzNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYv9FR8yyKCqINArVDmEPE6gK9tMfn8ba92xWCOku5tH6YYHbuPW2Yw I35pm7fNAjn30IY9K/ZSoAmiIMOwyDeqZllyg+QeAs49wswQL5nSucEeGjWaQ07c or+1sNgZus6gsDYENy6Sld5Gq2jTUrM2XducuGp8vYsBjyJ0cz677UMvgLxCOIZK MlDiUKNpmVK8Q9/Unla/5TWF9mJ69iztqaKoWqU8wgIt0oaKYUeO8UwGHJSLBvt7 qvXD1li+plyLi+FJRTT7nmjZ+DER5u6sBXdls6ixQPwFB+UfwbPig8s3fxyYY8rS TAUa4yc8LbyNIDZ5S73gq4S8hJNyYvM= -----END CERTIFICATE-----Generated at Mon Nov 3 20:54:03 2025 by rpki-client