$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/9565f188-a3e2-388e-909c-3fda493a6513.roa File: 9565f188-a3e2-388e-909c-3fda493a6513.roa (raw, json) Hash identifier: YLqt83vjEHXEL+PYmwMM51K9JfjP8jerW9mwjnV7SJ4= Subject key identifier: 82:5F:81:78:7C:AD:14:C8:21:13:E9:CC:E8:69:BB:92:16:AF:28:59 Certificate issuer: /CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b Certificate serial: 010D0C9F4328584B1C37512CEAD24AA5B9C31DC0 Authority key identifier: 48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/9565f188-a3e2-388e-909c-3fda493a6513.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 199.4.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:51:2c:ea:d2:4a:a5:b9:c3:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=6f502a92-aa05-4378-8ef7-60f77f325be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:a3:c4:e9:c6:bb:20:1a:ee:35:e2:3b:9b: 54:ec:2f:72:f3:bd:62:27:54:ec:5b:79:d0:58:24: 06:da:cb:f5:8c:67:93:44:bf:18:b6:3b:ab:be:ed: 2c:b9:4b:4e:9a:1e:63:33:6a:ae:d1:44:a0:69:b6: e5:86:74:69:7e:66:61:62:4c:ad:43:e8:09:94:2c: 4f:ce:11:8a:7b:1d:d9:8f:a1:7c:19:bb:98:6a:11: af:e6:9d:90:99:c0:20:c7:37:7a:7b:da:76:a9:da: 84:35:09:0e:8b:4b:83:e5:a9:03:1c:1d:5c:3b:28: 5b:3b:83:0d:05:ab:69:ce:68:e4:3d:dd:e9:18:c3: c6:05:96:f7:fa:06:8c:a4:91:ea:4f:06:2c:53:87: d1:2d:ec:40:c7:b0:21:66:ce:93:20:51:ba:25:52: 73:bd:72:40:c2:fb:64:97:6f:0e:34:1a:3a:2a:af: 00:8f:a9:d8:86:f3:22:ee:31:c3:03:a7:40:95:3c: 1f:a9:8c:82:14:6a:31:f2:53:90:e0:62:5c:3f:a5: d9:13:76:2d:55:9e:5d:d9:c3:51:41:06:f8:ef:31: 37:0b:f2:f0:9b:0a:51:9a:29:35:f9:55:ff:82:9b: 14:18:c2:74:d8:a0:11:67:13:62:ba:d1:68:db:16: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5F:81:78:7C:AD:14:C8:21:13:E9:CC:E8:69:BB:92:16:AF:28:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/9565f188-a3e2-388e-909c-3fda493a6513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.crl X509v3 Authority Key Identifier: keyid:48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:66:21:bb:f1:0a:3f:45:bf:b9:eb:92:f7:8b:50:a8:e7:de: 1a:85:ca:1a:da:90:84:64:ff:2b:95:88:55:fa:32:41:75:41: be:d2:74:32:fb:4e:61:5a:43:f7:63:9b:f7:ee:f3:b1:44:a6: 28:f1:ef:7a:ba:40:b6:41:b4:52:9a:ca:97:08:29:03:f2:a3: cf:6a:6b:c6:ce:81:58:18:c2:75:da:c8:74:27:99:e5:ab:93: c8:90:26:af:a6:2b:37:f6:55:dc:16:39:2e:07:59:0e:32:1b: 5b:58:13:cc:94:4b:8e:d5:6d:ba:c8:41:96:61:a4:c9:be:e8: ad:ad:33:6b:0f:98:04:5e:22:86:b1:b3:76:ac:e4:65:1d:06: c5:2c:fd:24:89:e0:5f:31:cf:33:c6:a6:88:f0:cc:75:08:0e: c5:4c:75:c8:49:04:a0:83:36:94:39:90:5f:0f:db:54:80:ef: 3e:fe:4f:15:63:a7:be:ef:b6:63:f7:42:6a:b6:ef:2c:eb:de: 19:a1:a3:74:05:93:fa:0c:f5:06:bd:2e:87:15:cb:e7:2e:c0: c4:97:8d:23:40:b3:09:65:3b:35:d3:b9:ec:ed:89:0d:2d:78: 50:70:a2:c3:bf:a2:6e:25:6c:81:fb:1d:b4:c4:72:c3:23:39: b3:1a:cd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN1Es6tJKpbnDHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdmYWE4YzAtY2I4OS00Y2YxLTg4ZDUtNDRjZmI3NmFj NjFiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NmY1MDJhOTItYWEwNS00Mzc4LThlZjctNjBmNzdmMzI1YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopmjxOnGuyAa7jXiO5tU7C9y871iJ1TsW3nQ WCQG2sv1jGeTRL8Ytjurvu0suUtOmh5jM2qu0USgabblhnRpfmZhYkytQ+gJlCxP zhGKex3Zj6F8GbuYahGv5p2QmcAgxzd6e9p2qdqENQkOi0uD5akDHB1cOyhbO4MN BatpzmjkPd3pGMPGBZb3+gaMpJHqTwYsU4fRLexAx7AhZs6TIFG6JVJzvXJAwvtk l28ONBo6Kq8Aj6nYhvMi7jHDA6dAlTwfqYyCFGox8lOQ4GJcP6XZE3YtVZ5d2cNR QQb47zE3C/LwmwpRmik1+VX/gpsUGMJ02KARZxNiutFo2xZvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJfgXh8rRTIIRPpzOhpu5IWryhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mN2Zh YThjMC1jYjg5LTRjZjEtODhkNS00NGNmYjc2YWM2MWIvOTU2NWYxODgtYTNlMi0z ODhlLTkwOWMtM2ZkYTQ5M2E2NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjdmYWE4YzAtY2I4OS00Y2YxLTg4 ZDUtNDRjZmI3NmFjNjFiL2Y3ZmFhOGMwLWNiODktNGNmMS04OGQ1LTQ0Y2ZiNzZh YzYxYi5jcmwwHwYDVR0jBBgwFoAUSJoqyjlMo+uBnVsHTOM0HbZSxggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mN2ZhYThjMC1jYjg5LTRjZjEtODhkNS00NGNm Yjc2YWM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9mIbvxCj9Fv7nrkveLUKjn3hqFyhrakIRk/yuViFX6MkF1Qb7SdDL7 TmFaQ/djm/fu87FEpijx73q6QLZBtFKaypcIKQPyo89qa8bOgVgYwnXayHQnmeWr k8iQJq+mKzf2VdwWOS4HWQ4yG1tYE8yUS47VbbrIQZZhpMm+6K2tM2sPmAReIoax s3as5GUdBsUs/SSJ4F8xzzPGpojwzHUIDsVMdchJBKCDNpQ5kF8P21SA7z7+TxVj p77vtmP3Qmq27yzr3hmho3QFk/oM9Qa9LocVy+cuwMSXjSNAswllOzXTueztiQ0t eFBwosO/om4lbIH7HbTEcsMjObMazfc= -----END CERTIFICATE-----Generated at Tue Oct 28 13:15:14 2025 by rpki-client