$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa File: 2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa (raw, json) Hash identifier: 7a0P38WC0TFVWmrD0RsRB7n5rnHld8xXo+cgWyRxbQM= Subject key identifier: 29:24:FA:64:51:C4:8A:05:99:71:E6:A3:7C:63:0E:87:F2:90:1D:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFEE6B90BDDE3AF949B5CFA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 0 IP address blocks: 199.233.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b9:0b:dd:e3:af:94:9b:5c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=84f19319-3dee-4919-8b4e-61391b6d998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:a2:45:57:2b:7b:14:93:0b:92:b3:b6:17: ed:60:f0:fe:98:72:d9:6d:89:2d:67:b9:e0:69:d3: 1f:11:a3:ff:1a:0e:91:80:c3:8c:93:51:83:6f:8d: 23:67:8b:52:62:94:68:09:fa:9f:cd:3b:35:5f:56: 9d:06:85:81:f2:e2:ff:24:13:b6:f2:ce:d8:9e:2d: 2c:c4:49:f5:ed:53:89:c3:4f:42:d2:ff:e9:24:99: e6:2c:02:6e:ee:76:a8:91:44:9e:38:b8:5d:cf:c1: c2:6f:03:e9:b0:5d:99:50:08:1c:8c:00:e0:8d:0d: f9:a3:7d:3a:31:b1:bb:dc:7a:e0:c9:b0:09:e5:a6: 01:39:3d:98:37:ea:9a:77:a2:31:bc:c0:4f:0f:2e: 0b:d2:d2:bd:0e:a1:cb:86:37:0c:0b:2b:71:d5:dd: 9e:26:e8:78:30:90:17:6d:3c:d7:05:80:0d:37:c2: 2a:93:8f:8a:2b:07:2a:22:1c:01:68:96:01:0e:79: f5:e8:c0:c9:52:d4:23:f9:2a:ea:d4:7d:46:49:95: 83:7c:8c:66:bf:69:70:82:eb:17:6b:71:fa:2c:e6: 1c:af:ee:5a:ce:1a:f7:a5:89:f9:17:42:40:21:17: d2:8a:13:f9:f2:75:07:87:9d:03:a4:41:10:1a:35: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:24:FA:64:51:C4:8A:05:99:71:E6:A3:7C:63:0E:87:F2:90:1D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 199.233.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:05:53:01:71:d4:f2:b0:f0:e7:16:ec:1e:0b:65:75:17:83: e7:12:e4:af:93:7e:38:36:23:ec:d6:98:f0:84:09:00:59:d0: df:91:cc:59:f7:b0:11:bb:9d:71:37:52:e7:d4:50:7c:fe:d0: bc:7f:cd:70:95:b0:18:31:90:6a:1e:e1:20:1b:d7:a1:73:8a: b9:cf:90:0f:f7:49:07:2a:1d:f9:ee:21:53:87:44:e3:92:12: a5:2d:e8:9d:91:53:1a:16:a6:f9:fa:5b:c4:0b:1a:14:95:72: e8:0a:60:fe:e5:92:57:fe:56:dc:94:e0:83:78:8d:f2:8f:a9: 2a:e3:a5:6c:74:d6:7e:43:9e:59:ad:81:1a:e1:9d:75:40:66: 87:f1:1e:46:1c:81:71:23:d0:eb:bb:71:31:2e:03:21:98:03: 00:a2:62:f8:82:e5:fe:a2:1d:c1:09:df:89:c6:f0:2c:31:41: 34:5a:66:78:0a:3f:09:8f:a2:1a:72:fd:b7:e0:3f:22:71:c3: 55:18:c9:e8:53:ef:07:67:dc:74:09:5f:18:f5:e0:48:89:73: 25:24:3a:d7:5b:2b:d7:c0:6c:a8:48:d6:0f:1a:be:35:dd:98: 8c:7b:ca:96:20:da:3d:d6:75:a1:1f:30:b1:f8:a7:73:91:64: e1:c4:46:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rkL3eOvlJtc+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ODRmMTkzMTktM2RlZS00OTE5LThiNGUtNjEzOTFiNmQ5OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmyiRVcrexSTC5KzthftYPD+mHLZbYktZ7ng adMfEaP/Gg6RgMOMk1GDb40jZ4tSYpRoCfqfzTs1X1adBoWB8uL/JBO28s7Yni0s xEn17VOJw09C0v/pJJnmLAJu7naokUSeOLhdz8HCbwPpsF2ZUAgcjADgjQ35o306 MbG73HrgybAJ5aYBOT2YN+qad6IxvMBPDy4L0tK9DqHLhjcMCytx1d2eJuh4MJAX bTzXBYANN8Iqk4+KKwcqIhwBaJYBDnn16MDJUtQj+Srq1H1GSZWDfIxmv2lwgusX a3H6LOYcr+5azhr3pYn5F0JAIRfSihP58nUHh50DpEEQGjXbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkk+mRRxIoFmXHmo3xjDofykB0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmYjY2YTItMjdiMS0z ZTNmLTg0YzktMGVlZTRlYjdjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgFUwFx1PKw8OcW7B4LZXUXg+cS5K+Tfjg2I+zWmPCECQBZ0N+RzFn3 sBG7nXE3UufUUHz+0Lx/zXCVsBgxkGoe4SAb16FzirnPkA/3SQcqHfnuIVOHROOS EqUt6J2RUxoWpvn6W8QLGhSVcugKYP7lklf+VtyU4IN4jfKPqSrjpWx01n5Dnlmt gRrhnXVAZofxHkYcgXEj0Ou7cTEuAyGYAwCiYviC5f6iHcEJ34nG8CwxQTRaZngK PwmPohpy/bfgPyJxw1UYyehT7wdn3HQJXxj14EiJcyUkOtdbK9fAbKhI1g8avjXd mIx7ypYg2j3WdaEfMLH4p3ORZOHERsk= -----END CERTIFICATE-----Generated at Wed Oct 8 15:47:25 2025 by rpki-client