$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa File: 9c0ab96e-07f3-340f-b026-49a7e297e98f.roa (raw, json) Hash identifier: JB0AehbZfNS+BjlRHosJdZm6m6YrKLNuYnRHLfgfRok= Subject key identifier: 2C:3E:1C:04:07:E6:17:C0:3A:52:BB:82:6B:79:81:02:DE:F4:A4:00 Certificate issuer: /CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Certificate serial: 010D0C9F4328584B8BE214D121D310C1EED63300 Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 33309 IP address blocks: 199.189.204.0/22 maxlen: 22 199.189.204.0/24 maxlen: 24 199.189.205.0/24 maxlen: 24 199.189.206.0/24 maxlen: 24 199.189.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:14:d1:21:d3:10:c1:ee:d6:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0d8706cc-4b0a-4351-88b2-1f8ec3dbdd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:7e:c0:0f:cf:04:b4:1e:44:2e:b7:b6:8f: 01:28:ac:dc:56:06:25:f0:09:1d:90:97:91:91:15: 45:74:cf:ee:9b:f9:86:3f:13:31:b2:a1:0f:47:a4: 17:56:1e:5a:2b:7e:b4:5d:26:d5:61:bd:f1:88:f6: a5:a4:c5:bf:e5:cc:06:34:ce:ab:d5:c2:dd:6f:1a: bc:52:4c:ad:32:12:d5:d1:30:13:bf:85:40:68:7d: 75:fe:0d:09:46:0d:25:78:53:37:f0:6d:2e:6a:79: a7:e6:88:d7:49:eb:7d:7b:32:ec:93:7b:0c:38:69: 6f:6f:03:e2:ae:92:07:ae:9b:40:c7:d0:1e:99:da: 5d:82:30:77:3f:d2:bb:7a:1c:3c:ad:39:60:f7:32: 7e:92:99:13:84:bd:c8:fd:cc:8d:8d:a5:95:4e:36: 8d:8e:48:3f:0a:33:bd:47:8b:9c:09:9d:69:ed:03: 61:1f:9c:51:44:30:d1:8f:c9:2e:44:45:39:98:14: af:d5:fc:1a:51:64:34:3e:a8:7a:68:1f:6a:b0:de: 7b:1e:c6:7a:bb:eb:5c:32:12:c9:6e:32:95:0e:94: 0c:6d:d6:c2:fa:6b:b7:b6:89:89:29:15:27:89:e3: 6a:ef:10:b9:22:53:b1:cd:c0:93:59:cc:99:60:01: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:1C:04:07:E6:17:C0:3A:52:BB:82:6B:79:81:02:DE:F4:A4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl X509v3 Authority Key Identifier: keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer sbgp-ipAddrBlock: critical IPv4: 199.189.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:12:af:94:70:1b:dd:de:8e:78:1e:42:0a:10:05:cf:79: eb:66:3f:21:37:c0:5f:a9:34:dd:bf:b8:91:36:2b:f8:f4:d3: bf:0d:bf:9a:58:72:68:2a:21:17:3f:66:e4:9b:90:62:0e:8b: e2:e4:37:17:37:01:88:cb:cc:78:9e:c3:90:de:4e:71:78:a6: e2:c6:60:21:1b:a5:4a:08:ae:84:b2:7b:7f:33:8b:f3:37:f8: 27:97:8a:87:a7:1f:3d:23:cf:90:67:de:d2:55:1b:89:9e:8d: d2:cf:bb:79:be:fe:37:40:16:3c:c1:5c:91:1e:e2:a8:d6:2d: 47:59:d1:6e:48:6f:e3:41:d1:ee:35:a9:02:eb:df:63:7b:85: 4b:e7:a1:f8:46:db:1d:79:50:c9:bd:56:09:da:4d:7c:20:2b: cf:93:1a:79:91:0f:0d:42:ee:89:53:6c:b3:20:fd:fa:dc:64: 18:79:fa:66:46:73:0c:f1:ca:9d:76:04:4d:5d:3a:db:40:69: a4:37:75:92:98:42:a9:7b:02:9b:35:3c:9b:e0:ae:da:7e:b7: 95:1f:f3:0e:3c:71:e9:67:a9:29:3d:80:70:09:89:cc:ce:ab: ff:37:d3:15:fc:1d:f7:32:b3:b9:6c:8c:95:98:12:f0:93:40: 2e:46:37:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hTRIdMQwe7WMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi ODk5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MGQ4NzA2Y2MtNGIwYS00MzUxLTg4YjItMWY4ZWMzZGJkZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdh+wA/PBLQeRC63to8BKKzcVgYl8AkdkJeR kRVFdM/um/mGPxMxsqEPR6QXVh5aK360XSbVYb3xiPalpMW/5cwGNM6r1cLdbxq8 UkytMhLV0TATv4VAaH11/g0JRg0leFM38G0uanmn5ojXSet9ezLsk3sMOGlvbwPi rpIHrptAx9AemdpdgjB3P9K7ehw8rTlg9zJ+kpkThL3I/cyNjaWVTjaNjkg/CjO9 R4ucCZ1p7QNhH5xRRDDRj8kuREU5mBSv1fwaUWQ0Pqh6aB9qsN57HsZ6u+tcMhLJ bjKVDpQMbdbC+mu3tomJKRUnieNq7xC5IlOxzcCTWcyZYAHBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw+HAQH5hfAOlK7gmt5gQLe9KQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0 NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOWMwYWI5NmUtMDdmMy0z NDBmLWIwMjYtNDlhN2UyOTdlOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4 ODNiZmI4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQkEq+UcBvd3o54HkIKEAXPeetmPyE3wF+pNN2/uJE2K/j0078Nv5pY cmgqIRc/ZuSbkGIOi+LkNxc3AYjLzHiew5DeTnF4puLGYCEbpUoIroSye38zi/M3 +CeXioenHz0jz5Bn3tJVG4mejdLPu3m+/jdAFjzBXJEe4qjWLUdZ0W5Ib+NB0e41 qQLr32N7hUvnofhG2x15UMm9VgnaTXwgK8+TGnmRDw1C7olTbLMg/frcZBh5+mZG cwzxyp12BE1dOttAaaQ3dZKYQql7Aps1PJvgrtp+t5Uf8w48celnqSk9gHAJiczO q/830xX8Hfcys7lsjJWYEvCTQC5GN20= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:39 2025 by rpki-client