$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa File: ec651062-e150-3475-8a69-0b79c30db69e.roa (raw, json) Hash identifier: pyRaGKe1eCqHw2JKGxeZFfuYXEt0QsweiUcYANOhoek= Subject key identifier: CB:3A:C1:01:84:CB:6E:78:2E:FB:65:FD:FF:42:57:91:31:C3:8F:30 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584B2CF7177BAF8DAC3507B77800 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 23532 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:17:7b:af:8d:ac:35:07:b7:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=02e694f1-d9b4-4e49-84b9-a3a0867f38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d0:3c:6d:4b:fd:53:8a:18:10:28:a9:ec:44: 15:d6:6e:67:55:ef:cb:af:23:9c:f5:c0:97:e6:6e: 63:a7:f0:1a:27:15:38:a9:92:f6:ca:8a:1b:0c:52: a8:e7:9d:5e:f0:32:c7:d0:a5:2b:ef:1e:5b:f9:74: 47:79:3e:e4:b9:0e:65:f3:3f:6e:c2:a3:d1:0a:93: fe:ce:db:1d:26:d6:42:79:25:22:70:4e:e2:25:e9: a2:6e:f0:a7:a5:f5:5f:3c:18:f9:33:8a:96:fe:a4: 1f:a6:15:9b:45:b3:33:98:d0:16:73:f6:ef:45:94: be:c0:12:d8:cc:99:5d:74:d0:9d:3e:7e:2f:8f:41: 3b:49:7e:6c:12:38:bb:a1:02:ea:2d:2f:1d:8a:1b: b9:60:07:0d:4f:23:8a:a1:8e:dc:d9:bb:9c:6b:cf: f6:60:e2:cd:d6:ed:dc:f7:c4:16:7d:35:86:d9:bf: ee:cd:38:a8:c2:15:aa:21:08:fd:62:7b:25:86:5b: d5:40:72:d5:a1:8b:18:75:f1:5a:53:b8:5c:c2:b2: d9:69:16:ce:ba:13:a2:8a:cf:75:61:f7:8a:b5:b2: c4:57:00:60:c4:a4:0f:8a:59:cb:6b:95:c9:bf:1c: f8:bb:5b:c7:3d:b9:16:ae:4d:71:7a:0a:78:90:4b: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:C1:01:84:CB:6E:78:2E:FB:65:FD:FF:42:57:91:31:C3:8F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e2:47:3b:4a:32:68:7a:eb:28:f6:05:79:d1:81:23:97:0c: bb:2c:43:5a:07:3d:4d:82:87:5e:f4:63:eb:07:e7:77:f5:9f: 54:09:1a:e9:f1:4a:4e:4a:55:18:f5:1d:a6:12:38:5f:9a:0d: 3f:ae:b6:33:01:02:a1:5b:b1:d3:17:04:31:67:38:b5:dd:b7: c7:0c:54:3f:6e:48:44:29:61:b5:20:cf:e2:c1:7e:44:31:61: 29:e3:ce:88:1c:4b:cd:b4:83:03:68:16:f5:b4:0a:f7:fd:96: 3e:fa:e6:6d:52:c6:4f:50:59:9c:ad:7e:41:0a:cf:8e:07:6f: cf:c9:c0:bb:88:19:bb:40:12:e2:3b:13:21:90:2b:f4:98:a5: 7e:7d:95:aa:fa:33:3c:70:72:b7:d7:5f:ec:75:bc:04:82:91: d8:94:99:40:e4:2f:1f:20:2d:4c:90:93:d9:75:5a:98:c8:c9: 74:4d:ae:eb:7b:51:47:48:d3:9b:fb:5a:cc:e4:68:a9:d5:d8: 79:87:f5:83:c2:5a:da:ea:ad:f9:c9:8b:dc:df:ca:ff:d9:d2: af:11:6b:59:3b:27:52:18:57:30:26:bc:93:b8:32:6d:97:78: c8:1f:12:b3:26:d7:bc:29:99:08:6d:82:7b:3f:d0:c7:29:43: a4:74:49:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xd7r42sNQe3eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDJlNjk0ZjEtZDliNC00ZTQ5LTg0YjktYTNhMDg2N2YzOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidA8bUv9U4oYECip7EQV1m5nVe/LryOc9cCX 5m5jp/AaJxU4qZL2yoobDFKo551e8DLH0KUr7x5b+XRHeT7kuQ5l8z9uwqPRCpP+ ztsdJtZCeSUicE7iJemibvCnpfVfPBj5M4qW/qQfphWbRbMzmNAWc/bvRZS+wBLY zJlddNCdPn4vj0E7SX5sEji7oQLqLS8dihu5YAcNTyOKoY7c2buca8/2YOLN1u3c 98QWfTWG2b/uzTiowhWqIQj9YnslhlvVQHLVoYsYdfFaU7hcwrLZaRbOuhOiis91 YfeKtbLEVwBgxKQPilnLa5XJvxz4u1vHPbkWrk1xegp4kEt1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs6wQGEy254Lvtl/f9CV5Exw48wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvZWM2NTEwNjItZTE1MC0z NDc1LThhNjktMGI3OWMzMGRiNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKniRztKMmh66yj2BXnRgSOXDLssQ1oHPU2Ch170Y+sH53f1n1QJGunx Sk5KVRj1HaYSOF+aDT+utjMBAqFbsdMXBDFnOLXdt8cMVD9uSEQpYbUgz+LBfkQx YSnjzogcS820gwNoFvW0Cvf9lj765m1Sxk9QWZytfkEKz44Hb8/JwLuIGbtAEuI7 EyGQK/SYpX59lar6MzxwcrfXX+x1vASCkdiUmUDkLx8gLUyQk9l1WpjIyXRNrut7 UUdI05v7WszkaKnV2HmH9YPCWtrqrfnJi9zfyv/Z0q8Ra1k7J1IYVzAmvJO4Mm2X eMgfErMm17wpmQhtgns/0McpQ6R0SeA= -----END CERTIFICATE-----Generated at Tue Oct 14 17:22:29 2025 by rpki-client