$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa File: 3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa (raw, json) Hash identifier: 0fk5F6Kr+Fp3okQn6RZ7FGrwajis4Pbe8kY+hsd3JXI= Subject key identifier: 75:51:AC:4E:6F:F2:3D:B3:3A:E1:BB:22:BF:40:2F:F7:75:52:D6:F8 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B1AD17134F13787D1535C4580 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 394353 IP address blocks: 199.9.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:71:34:f1:37:87:d1:53:5c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=087a7da4-8f77-4fc5-be16-7b9f51fa100c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:6b:bb:6f:6e:c4:7d:60:05:f4:4b:12:dd: 6e:23:25:99:b4:f6:ce:21:ed:3c:9a:82:95:b3:65: 70:1e:0d:0e:07:f0:8c:96:26:f6:84:c2:c7:a8:71: 75:83:f5:77:af:ad:d8:4e:71:9d:f3:7b:c1:a6:02: 9b:bb:d1:6f:99:17:02:03:67:10:ec:60:ae:10:ed: 64:0d:5c:f5:4c:dd:ab:4f:f2:6a:a7:70:48:82:e7: 91:26:00:51:33:b4:e3:d2:a3:3d:5a:56:14:4a:cf: 83:c8:ef:9c:22:0a:40:d1:ac:bb:e4:14:3a:dd:29: 8f:4c:0c:f7:25:e3:4e:fd:d1:5a:f5:87:30:7d:a5: 4d:12:3d:ce:2b:c6:10:79:1e:e1:d8:f6:e5:8e:df: 25:71:b0:74:e5:b1:c1:30:54:65:cc:87:c3:6f:73: cb:11:71:79:10:13:b4:ec:f2:c7:ba:bd:f0:24:fa: 13:7f:64:26:20:b9:63:73:fe:fe:7d:ce:b9:f0:b5: ef:c4:cb:69:a1:33:8a:c2:67:3b:c3:01:53:f9:10: 4f:15:c0:5e:bd:3b:d0:08:5e:00:cf:0a:65:e8:77: 51:9e:ff:05:70:e2:2d:29:cc:a1:42:88:50:d8:1b: db:d9:b3:0d:fa:12:db:72:53:df:f9:cf:0f:80:21: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:51:AC:4E:6F:F2:3D:B3:3A:E1:BB:22:BF:40:2F:F7:75:52:D6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6e:43:60:d1:48:58:ab:f7:d0:2f:cc:ac:20:a1:ab:f6:73: 58:c3:65:4a:b3:b5:cc:53:91:4c:41:a6:12:0c:e3:78:07:21: f5:d0:2b:73:4b:b3:b0:34:82:cc:ff:74:29:0c:54:7b:97:dc: 26:59:78:ec:23:c0:c6:b4:6c:bb:0e:7f:db:78:c5:af:f6:87: f1:aa:7d:70:87:67:c5:ea:83:10:77:dd:1b:af:af:66:31:b2: 04:dc:63:37:8a:14:94:59:cb:1e:08:8b:01:c6:68:19:9c:ec: ee:a7:0c:79:25:aa:fa:1d:de:d7:90:fa:40:59:86:de:db:98: 6e:15:04:f5:54:22:19:d6:cf:37:56:b4:f7:99:6f:ed:76:71: 6f:92:75:1a:53:af:6a:9e:ad:78:3f:8d:6c:5a:6f:28:0f:58: 79:c6:09:4e:3a:b3:51:68:3f:2f:6f:65:87:8b:78:30:79:b2: 76:c5:33:f3:07:bb:c7:84:c7:09:f7:81:30:c3:ef:6a:dc:4d: df:9d:96:23:2d:ac:5d:6c:6f:de:d9:7d:52:68:d2:e5:bc:f1: 58:f4:b1:5b:57:7e:22:12:04:e0:ff:95:de:42:e0:74:96:5c: 0c:9c:8e:50:d1:01:cf:b6:10:1e:17:08:b0:74:74:b7:15:4b: aa:60:92:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XE08TeH0VNcRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDg3YTdkYTQtOGY3Ny00ZmM1LWJlMTYtN2I5ZjUxZmExMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeJru29uxH1gBfRLEt1uIyWZtPbOIe08moKV s2VwHg0OB/CMlib2hMLHqHF1g/V3r63YTnGd83vBpgKbu9FvmRcCA2cQ7GCuEO1k DVz1TN2rT/Jqp3BIgueRJgBRM7Tj0qM9WlYUSs+DyO+cIgpA0ay75BQ63SmPTAz3 JeNO/dFa9YcwfaVNEj3OK8YQeR7h2Pbljt8lcbB05bHBMFRlzIfDb3PLEXF5EBO0 7PLHur3wJPoTf2QmILljc/7+fc658LXvxMtpoTOKwmc7wwFT+RBPFcBevTvQCF4A zwpl6HdRnv8FcOItKcyhQohQ2Bvb2bMN+hLbclPf+c8PgCEgbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVRrE5v8j2zOuG7Ir9AL/d1Utb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvM2RmYzkwNmItZjk5NC0z YWI5LTkzZmMtZjJmNDlkYjA4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJuQ2DRSFir99AvzKwgoav2c1jDZUqztcxTkUxBphIM43gHIfXQK3NL s7A0gsz/dCkMVHuX3CZZeOwjwMa0bLsOf9t4xa/2h/GqfXCHZ8XqgxB33Ruvr2Yx sgTcYzeKFJRZyx4IiwHGaBmc7O6nDHklqvod3teQ+kBZht7bmG4VBPVUIhnWzzdW tPeZb+12cW+SdRpTr2qerXg/jWxabygPWHnGCU46s1FoPy9vZYeLeDB5snbFM/MH u8eExwn3gTDD72rcTd+dliMtrF1sb97ZfVJo0uW88Vj0sVtXfiISBOD/ld5C4HSW XAycjlDRAc+2EB4XCLB0dLcVS6pgku4= -----END CERTIFICATE-----Generated at Tue Oct 28 23:50:51 2025 by rpki-client