$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9ce77288-322e-3d8f-a259-3adeb36dacf9.roa File: 9ce77288-322e-3d8f-a259-3adeb36dacf9.roa (raw, json) Hash identifier: B5Y83GYNOL5BCLuLcN+txgIBLsK7jTg4paZoT5DDkBE= Subject key identifier: 92:20:4B:A6:60:B1:37:A6:FF:65:16:C9:F8:E5:5D:AD:AE:AF:57:D5 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584B2496CBD60BD7E2A7A408C100 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9ce77288-322e-3d8f-a259-3adeb36dacf9.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 55195 IP address blocks: 199.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cb:d6:0b:d7:e2:a7:a4:08:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=f8f36e17-a18e-4bfa-83a3-5436f252270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:94:45:08:b2:75:60:b4:80:b5:38:84:9a:17: 97:ed:b0:e5:1d:44:18:4f:e7:c5:0e:9d:eb:7d:70: 82:50:54:92:70:11:2d:cf:00:e3:32:7a:37:c2:56: 08:0f:30:70:98:dd:ed:ef:06:cc:d9:84:a1:31:f9: 65:9c:dd:34:1b:0e:5c:e5:90:38:5b:c3:5c:95:29: ae:8e:cb:cb:d3:77:3d:29:51:b3:c3:66:7b:f3:f8: 91:9d:be:ab:78:a6:11:ad:9a:3a:70:a0:36:ae:6c: 27:91:b9:2c:a2:4d:f7:f8:57:8d:09:aa:a3:38:4c: 06:d4:08:f4:16:40:49:ba:1a:63:93:1e:ef:56:be: 5f:97:e2:9f:c7:7a:52:6d:23:24:83:64:e0:67:83: 55:4e:33:2c:47:92:d3:99:44:66:15:e9:9b:7d:cc: de:cc:73:c2:10:5a:65:46:96:6c:6e:fe:bf:f7:fa: d3:88:c0:3c:79:13:da:00:bb:2e:b0:5c:99:44:9d: 9e:75:9c:be:22:2f:69:3f:0d:18:8d:cc:34:68:6e: 29:d1:0e:3b:16:1c:45:ae:92:73:d8:04:c0:a4:37: 0c:cd:2d:a7:af:26:06:c9:43:ac:47:35:0e:3d:e4: 1c:d9:fd:ee:47:24:71:cb:a4:b2:e9:8d:e4:f4:a2: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:4B:A6:60:B1:37:A6:FF:65:16:C9:F8:E5:5D:AD:AE:AF:57:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9ce77288-322e-3d8f-a259-3adeb36dacf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 199.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:75:c5:e1:9c:e1:d6:b4:6e:52:bf:38:ad:8b:fa:4a:cc:b6: ea:9c:df:7e:0f:0b:21:4c:8c:8c:5c:32:72:c5:de:ed:2c:a3: 23:58:7f:e9:ba:d3:ce:9f:94:d3:1e:33:e3:9a:33:d1:ff:20: e5:b3:23:a7:69:35:91:1c:16:c0:62:c1:22:1d:bc:0e:5b:58: b8:b8:94:12:6e:01:b0:ba:cc:ac:e6:bd:4b:ef:24:5e:5d:7a: 5d:18:d0:3b:87:23:41:3e:84:f4:db:d7:f8:55:0b:f2:33:9c: f0:8e:ac:fb:61:40:57:01:08:6d:2c:28:d9:7d:b3:df:2c:7f: 67:0b:75:05:93:31:07:11:40:67:fc:20:bd:45:fc:f4:a5:84: bb:a0:f7:96:9d:c2:30:fc:f1:b1:f7:08:af:14:39:6e:f2:a3: ee:56:fb:26:ca:ea:7a:5f:fa:ee:2e:e0:fd:15:c7:6a:d7:a8: b3:48:a3:b7:e5:5d:ea:d9:39:c9:68:ae:f4:11:29:8d:c4:e2: f8:1b:b0:f3:4a:1e:12:bc:bb:92:a0:c6:39:2c:3d:a4:ab:2b: 52:ed:de:e9:b3:ab:ad:c0:49:15:fc:f2:f0:9f:1e:c0:26:f5: 00:d6:e2:ae:29:a5:f9:52:18:47:9c:d4:8c:20:7a:df:25:ff: f2:da:7c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsvWC9fip6QIwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjhmMzZlMTctYTE4ZS00YmZhLTgzYTMtNTQzNmYyNTIyNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75RFCLJ1YLSAtTiEmheX7bDlHUQYT+fFDp3r fXCCUFSScBEtzwDjMno3wlYIDzBwmN3t7wbM2YShMfllnN00Gw5c5ZA4W8NclSmu jsvL03c9KVGzw2Z78/iRnb6reKYRrZo6cKA2rmwnkbksok33+FeNCaqjOEwG1Aj0 FkBJuhpjkx7vVr5fl+Kfx3pSbSMkg2TgZ4NVTjMsR5LTmURmFembfczezHPCEFpl RpZsbv6/9/rTiMA8eRPaALsusFyZRJ2edZy+Ii9pPw0Yjcw0aG4p0Q47FhxFrpJz 2ATApDcMzS2nryYGyUOsRzUOPeQc2f3uRyRxy6Sy6Y3k9KJ4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIgS6ZgsTem/2UWyfjlXa2ur1fVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvOWNlNzcyODgtMzIyZS0z ZDhmLWEyNTktM2FkZWIzNmRhY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF1xeGc4da0blK/OK2L+krMtuqc334PCyFMjIxcMnLF3u0soyNYf+m6 086flNMeM+OaM9H/IOWzI6dpNZEcFsBiwSIdvA5bWLi4lBJuAbC6zKzmvUvvJF5d el0Y0DuHI0E+hPTb1/hVC/IznPCOrPthQFcBCG0sKNl9s98sf2cLdQWTMQcRQGf8 IL1F/PSlhLug95adwjD88bH3CK8UOW7yo+5W+ybK6npf+u4u4P0Vx2rXqLNIo7fl XerZOclorvQRKY3E4vgbsPNKHhK8u5KgxjksPaSrK1Lt3umzq63ASRX88vCfHsAm 9QDW4q4ppflSGEec1Iwget8l//LafAY= -----END CERTIFICATE-----Generated at Fri Sep 12 02:36:48 2025 by rpki-client