$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa File: 20fe7082-f25b-3512-9d95-8f82ca8290e4.roa (raw, json) Hash identifier: chXD+BkXTEL0OqaY+wBs2Wh6ML2+lPzez0Gg0Pv9JhE= Subject key identifier: 9D:25:ED:72:0A:BE:E6:08:04:6D:10:18:7F:62:78:5C:13:3E:05:67 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584B970CE02DA8999668D086ECC0 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 1299 IP address blocks: 199.119.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e0:2d:a8:99:96:68:d0:86:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=da0df7f3-e148-43ab-b55c-c14531050c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:e2:5e:d2:57:6b:a2:81:91:aa:ab:89:e3: 00:d6:9a:13:cc:ae:8e:47:14:e7:71:7a:d9:24:89: ae:8d:57:ea:4b:ed:37:d0:4c:0d:ab:77:0b:46:7e: 7c:cc:5f:27:ab:e9:55:32:ac:43:95:bf:a3:72:49: d4:b9:cb:27:61:a9:ed:05:8b:d9:b9:86:57:04:23: 9d:78:e5:50:d0:d7:41:a8:09:08:b6:64:e1:45:48: 6c:c8:8a:8d:08:e4:fb:4a:d0:5c:e8:e2:d0:42:29: e6:26:d3:72:71:72:d9:a5:fa:08:c2:c4:75:66:17: f0:1e:da:ef:35:59:9b:7e:91:bd:87:48:f7:e0:05: 47:26:02:af:04:16:61:42:5b:6d:71:6c:2f:be:22: ae:ea:d5:c7:f5:ff:3b:1d:c7:7e:7c:60:b8:bb:7d: f0:58:bd:9c:9e:bf:f0:a7:2c:7e:f2:32:1d:2d:81: d0:e4:21:81:9e:54:a5:e0:39:ac:dc:94:42:ee:c1: 1c:35:99:f8:8b:06:fb:e2:58:35:d5:cd:ae:1b:17: b2:0e:0d:9f:95:c0:2d:b4:78:7a:7b:cc:37:b6:84: 7b:aa:bb:eb:aa:5f:a4:30:a0:81:ee:aa:f8:0f:01: 94:3d:59:e7:a5:cd:8b:48:9f:16:ac:37:fb:ed:96: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:25:ED:72:0A:BE:E6:08:04:6D:10:18:7F:62:78:5C:13:3E:05:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 199.119.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b1:93:11:bc:f6:82:92:68:5d:45:54:89:67:42:cc:0c:a8: fa:52:72:2e:d2:90:09:ab:ea:ac:18:1b:a9:46:ce:60:46:58: 62:e5:cf:30:74:36:30:d8:01:c2:38:87:e3:75:3d:6c:b1:f3: a0:2e:b7:7c:cf:5a:f9:04:cc:1b:86:e6:ca:4c:3c:13:3f:2d: 32:c0:ff:2c:af:cf:32:ba:7a:36:d6:0e:1e:45:af:45:56:75: cd:a8:24:de:12:6a:38:99:6d:f0:45:10:44:31:8d:86:bb:66: 59:61:94:af:42:1f:77:9f:1f:b3:c2:7d:00:9b:d0:c6:1d:e5: ef:12:09:a5:21:20:e8:68:fe:2a:94:8d:a1:44:90:18:36:dd: 7a:ed:19:fd:73:71:4d:65:f5:64:1a:9c:8a:d3:e0:b2:a0:9d: 38:c8:48:a5:74:bf:b3:ba:3d:52:ce:b8:75:bb:20:60:e9:0d: 91:48:ae:70:95:53:00:27:24:b4:77:0a:a5:5e:77:b2:51:eb: c3:3a:7b:e8:81:2c:fe:ab:08:fa:62:dc:4a:13:95:96:b0:a2: 1b:ed:2a:f0:59:78:c5:ed:b6:3c:81:e8:58:29:81:cc:c8:c5: d7:a6:6b:8a:6d:93:a5:7e:dc:29:01:8f:3b:53:63:c0:a5:07: c7:52:7b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOAtqJmWaNCG7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZGEwZGY3ZjMtZTE0OC00M2FiLWI1NWMtYzE0NTMxMDUwYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLDiXtJXa6KBkaqrieMA1poTzK6ORxTncXrZ JImujVfqS+030EwNq3cLRn58zF8nq+lVMqxDlb+jcknUucsnYantBYvZuYZXBCOd eOVQ0NdBqAkItmThRUhsyIqNCOT7StBc6OLQQinmJtNycXLZpfoIwsR1ZhfwHtrv NVmbfpG9h0j34AVHJgKvBBZhQlttcWwvviKu6tXH9f87Hcd+fGC4u33wWL2cnr/w pyx+8jIdLYHQ5CGBnlSl4Dms3JRC7sEcNZn4iwb74lg11c2uGxeyDg2flcAttHh6 e8w3toR7qrvrql+kMKCB7qr4DwGUPVnnpc2LSJ8WrDf77Zbr+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0l7XIKvuYIBG0QGH9ieFwTPgVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvMjBmZTcwODItZjI1Yi0z NTEyLTlkOTUtOGY4MmNhODI5MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyxkxG89oKSaF1FVIlnQswMqPpSci7SkAmr6qwYG6lGzmBGWGLlzzB0 NjDYAcI4h+N1PWyx86Aut3zPWvkEzBuG5spMPBM/LTLA/yyvzzK6ejbWDh5Fr0VW dc2oJN4SajiZbfBFEEQxjYa7ZllhlK9CH3efH7PCfQCb0MYd5e8SCaUhIOho/iqU jaFEkBg23XrtGf1zcU1l9WQanIrT4LKgnTjISKV0v7O6PVLOuHW7IGDpDZFIrnCV UwAnJLR3CqVed7JR68M6e+iBLP6rCPpi3EoTlZawohvtKvBZeMXttjyB6FgpgczI xdema4ptk6V+3CkBjztTY8ClB8dSe5I= -----END CERTIFICATE-----Generated at Wed Oct 22 03:04:30 2025 by rpki-client