$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa File: ea25304e-5e06-3ced-b3a0-30a19c749708.roa (raw, json) Hash identifier: KoWlj26iz4cyO3II7hN/FGBkKzOWxs4mfI6N289VP8U= Subject key identifier: A5:C0:B4:E3:10:17:2E:87:04:57:EB:79:8B:7B:20:59:90:DE:43:4D Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584B95A795CDE17A69D39C4EB280 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 64236 IP address blocks: 199.91.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:95:cd:e1:7a:69:d3:9c:4e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fa21f42c-8fb9-415b-ab7c-c90d1bec6acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:5d:e1:93:4b:21:1d:94:9c:50:a5:88:e6: 8a:8f:13:f2:eb:63:b9:2b:1e:c1:9a:3d:5f:14:fb: 7c:15:ea:ae:22:52:75:f8:09:c2:fb:9d:2d:5d:02: af:d8:a1:8c:b6:42:f0:59:07:a8:a0:3a:76:89:c7: aa:f6:b5:2b:64:31:5a:25:1f:0c:a9:94:3e:ca:8d: 96:d8:b8:a2:7a:a3:0a:b6:5c:60:94:e4:20:51:52: ce:58:89:92:93:25:c4:09:76:ac:5f:55:ac:01:4a: bf:99:fe:96:08:c3:f3:37:cd:66:e6:a5:d6:ef:16: 5c:6e:cd:c2:8e:18:85:71:2a:42:00:89:06:3c:4b: d7:3f:6c:89:58:5b:d1:91:af:9f:6c:4f:59:a4:ed: d4:98:9a:20:b7:cb:54:70:d4:81:d5:88:da:a1:4a: d2:eb:b0:a3:14:4d:29:ce:38:dd:18:50:7e:d9:37: c8:ce:f6:2b:e9:28:bd:48:80:2d:a0:59:f4:c8:11: 68:fb:6b:39:e8:b6:d5:66:bc:b6:87:8b:c2:40:de: b6:28:c8:52:ac:f9:ff:69:8f:8d:23:67:cf:20:cc: 70:81:b0:a4:59:40:01:cd:fd:50:6d:6f:00:94:da: ab:67:c4:10:7d:a2:ee:eb:dd:89:e0:71:92:4c:b2: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:B4:E3:10:17:2E:87:04:57:EB:79:8B:7B:20:59:90:DE:43:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.91.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:61:a2:55:fc:25:35:a5:cc:8b:d4:90:be:bc:c1:cb:7e:7d: 81:dd:8d:b6:87:64:4f:72:35:1d:b1:6d:ed:03:ec:d8:f7:50: 16:00:d4:4e:34:77:5d:94:28:6d:01:3b:aa:82:66:4b:87:34: 10:77:2f:ce:aa:92:49:a7:44:79:f2:8d:0d:87:17:80:0a:68: f2:ce:a8:70:41:80:c9:d3:3f:2d:86:23:07:49:ee:4e:64:8e: 8f:fc:ef:f5:26:80:9a:fc:10:f4:b8:50:e7:a2:a1:5c:85:3e: aa:f9:8c:cb:a6:54:f8:d4:1d:79:fe:69:28:3f:19:bb:52:66: de:98:0d:a7:46:0f:4f:61:a1:58:9a:be:4d:83:44:78:29:df: 70:f3:08:e6:a7:cc:40:d5:2f:3e:d8:69:b1:08:bd:84:45:41: ee:a7:d1:cc:77:fb:6b:7f:1f:b5:ff:24:ff:7b:74:2d:8c:a1: ce:3f:69:87:bd:43:d2:4c:5d:df:3f:59:eb:82:f8:c5:4a:61: bc:89:92:c8:7e:61:69:75:f7:f3:1c:77:ba:8a:0c:d1:ba:ef: b9:cb:8e:e7:1e:98:fd:04:f9:aa:4a:47:ae:05:d8:13:09:31: 02:d8:7d:cc:27:53:6f:4a:11:4b:da:dd:64:da:ce:a9:76:25: 56:ce:23:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5XN4Xpp05xOsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmEyMWY0MmMtOGZiOS00MTViLWFiN2MtYzkwZDFiZWM2YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9d4ZNLIR2UnFCliOaKjxPy62O5Kx7Bmj1f FPt8FequIlJ1+AnC+50tXQKv2KGMtkLwWQeooDp2iceq9rUrZDFaJR8MqZQ+yo2W 2LiieqMKtlxglOQgUVLOWImSkyXECXasX1WsAUq/mf6WCMPzN81m5qXW7xZcbs3C jhiFcSpCAIkGPEvXP2yJWFvRka+fbE9ZpO3UmJogt8tUcNSB1YjaoUrS67CjFE0p zjjdGFB+2TfIzvYr6Si9SIAtoFn0yBFo+2s56LbVZry2h4vCQN62KMhSrPn/aY+N I2fPIMxwgbCkWUABzf1QbW8AlNqrZ8QQfaLu692J4HGSTLLu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXAtOMQFy6HBFfreYt7IFmQ3kNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvZWEyNTMwNGUtNWUwNi0z Y2VkLWIzYTAtMzBhMTljNzQ5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5holX8JTWlzIvUkL68wct+fYHdjbaHZE9yNR2xbe0D7Nj3UBYA1E40 d12UKG0BO6qCZkuHNBB3L86qkkmnRHnyjQ2HF4AKaPLOqHBBgMnTPy2GIwdJ7k5k jo/87/UmgJr8EPS4UOeioVyFPqr5jMumVPjUHXn+aSg/GbtSZt6YDadGD09hoVia vk2DRHgp33DzCOanzEDVLz7YabEIvYRFQe6n0cx3+2t/H7X/JP97dC2Moc4/aYe9 Q9JMXd8/WeuC+MVKYbyJksh+YWl19/Mcd7qKDNG677nLjucemP0E+apKR64F2BMJ MQLYfcwnU29KEUva3WTazql2JVbOI60= -----END CERTIFICATE-----Generated at Sun Oct 26 01:51:29 2025 by rpki-client