$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa File: 2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa (raw, json) Hash identifier: gRH5oi2IFcdG6RETx4NfKcftmvgMrTwcQ3zIpbyGhgU= Subject key identifier: 40:46:6D:D4:1B:85:18:A6:89:1A:0E:B7:DB:11:D0:04:56:21:2B:98 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584B9E07BB619469262AF0AFEA40 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 199.180.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bb:61:94:69:26:2a:f0:af:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=bce30c44-adbd-49d8-9d8f-b07063031243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:d3:1a:cc:d7:06:f7:4c:fb:f1:b1:04:aa: 5d:c3:01:ae:1e:fa:fd:4a:a4:57:6c:59:5d:a8:d4: 4f:45:38:fd:db:86:1d:db:d2:93:75:1f:5c:e8:8b: 85:0e:90:08:55:4e:cd:7f:fd:2c:ad:de:11:a2:f8: 8c:ca:aa:9f:87:03:f3:36:d2:fe:ab:ee:f5:c5:df: d0:8a:b3:aa:52:89:d4:e7:3c:c1:91:20:23:74:34: bd:e7:7e:6d:ea:2e:7f:f8:85:57:30:d4:86:ea:e3: c0:e9:cd:b1:33:d6:73:0e:f2:6e:f5:bd:74:a3:84: 82:15:0b:71:25:9f:e4:d8:f3:de:06:d7:3c:9f:48: d5:78:27:d6:f2:af:66:80:36:5c:fa:c5:b7:e1:e2: b7:79:64:44:41:f5:4f:0d:82:38:5d:ed:4c:33:07: 12:a8:11:e0:0e:3f:f7:a5:5d:d5:57:23:ca:26:0f: 5e:f7:1d:8b:8c:36:52:8b:87:fb:b0:66:c5:27:24: 94:c6:b8:f6:13:2d:c3:e4:af:1a:83:6a:14:87:d7: a5:04:95:8a:be:8d:dc:d8:c7:70:a5:95:28:ba:68: 44:8e:48:60:e0:74:29:37:e1:a4:e4:b4:f8:be:3e: 18:22:c0:3c:83:4b:6e:06:30:86:d2:ee:66:f5:d6: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:46:6D:D4:1B:85:18:A6:89:1A:0E:B7:DB:11:D0:04:56:21:2B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 199.180.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:64:b0:49:be:82:b0:1b:de:be:ca:66:1e:93:e4:f8:5c:55: b9:d9:c0:b8:40:83:c3:c5:11:ca:63:6b:4f:3f:4b:d7:64:64: 7b:10:d4:57:fb:cb:76:f3:9c:10:e5:bd:12:d3:77:7f:19:ff: 60:94:0c:15:07:58:44:08:da:b3:11:09:5b:e3:48:5f:ff:78: 19:e3:dd:e6:40:cf:9e:f4:b3:63:13:e6:e6:5a:a6:5a:d0:b0: a7:73:1b:8e:2b:9a:79:b4:2b:0e:64:2a:77:ad:2c:7c:cb:6f: 7e:91:b9:dc:2d:38:71:f4:b7:1d:e2:da:aa:6e:2b:20:c8:17: fa:18:b8:a5:23:c5:87:bb:c2:7b:7c:5b:e9:09:f0:8f:40:3a: 30:fb:fc:0c:ee:59:85:dd:e7:45:cc:8e:e8:d6:95:5b:97:0f: 74:6a:fb:ed:d1:d2:be:62:c8:c9:d9:1f:73:d9:1a:27:d8:95: ec:6d:9d:ec:e4:6d:45:cb:49:9b:05:2a:cd:5c:8f:c0:14:9a: 32:dc:07:1c:27:8a:7f:be:1e:05:8b:d6:1e:09:41:20:98:3d: 4f:63:f6:b9:97:60:65:91:38:47:04:e3:77:81:89:7f:ec:41: 4b:46:46:b0:ef:6f:75:c7:aa:c2:71:f5:b8:bd:0a:76:de:26: 3e:bb:46:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7thlGkmKvCv6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YmNlMzBjNDQtYWRiZC00OWQ4LTlkOGYtYjA3MDYzMDMxMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRLTGszXBvdM+/GxBKpdwwGuHvr9SqRXbFld qNRPRTj924Yd29KTdR9c6IuFDpAIVU7Nf/0srd4RoviMyqqfhwPzNtL+q+71xd/Q irOqUonU5zzBkSAjdDS9535t6i5/+IVXMNSG6uPA6c2xM9ZzDvJu9b10o4SCFQtx JZ/k2PPeBtc8n0jVeCfW8q9mgDZc+sW34eK3eWREQfVPDYI4Xe1MMwcSqBHgDj/3 pV3VVyPKJg9e9x2LjDZSi4f7sGbFJySUxrj2Ey3D5K8ag2oUh9elBJWKvo3c2Mdw pZUoumhEjkhg4HQpN+Gk5LT4vj4YIsA8g0tuBjCG0u5m9dZ9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBGbdQbhRimiRoOt9sR0ARWISuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmYwZTBiMWYtMzE3Yi0z MWMzLTk4OGUtMWFlYjlmMDJmMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx7SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ksEm+grAb3r7KZh6T5PhcVbnZwLhAg8PFEcpja08/S9dkZHsQ1Ff7 y3bznBDlvRLTd38Z/2CUDBUHWEQI2rMRCVvjSF//eBnj3eZAz570s2MT5uZaplrQ sKdzG44rmnm0Kw5kKnetLHzLb36RudwtOHH0tx3i2qpuKyDIF/oYuKUjxYe7wnt8 W+kJ8I9AOjD7/AzuWYXd50XMjujWlVuXD3Rq++3R0r5iyMnZH3PZGifYlextnezk bUXLSZsFKs1cj8AUmjLcBxwnin++HgWL1h4JQSCYPU9j9rmXYGWROEcE43eBiX/s QUtGRrDvb3XHqsJx9bi9CnbeJj67RoY= -----END CERTIFICATE-----Generated at Mon Nov 3 08:51:28 2025 by rpki-client