$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa File: caaf565f-91cd-3865-a0f7-d23af4838303.roa (raw, json) Hash identifier: vJo+90t/PnFYGMJJ3FMZ4esw27jv3Gb06LDXpNh8PYw= Subject key identifier: 9F:15:0F:D5:BC:B0:9A:89:FD:4C:1E:9F:14:78:7B:3D:79:99:1D:F3 Certificate issuer: /CN=7019d1c7-b32a-4a65-a135-234cde3c7680 Certificate serial: 010D0C9F4328584B80B780C9AC69B36663B7E740 Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 8075 IP address blocks: 199.27.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:80:c9:ac:69:b3:66:63:b7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=029868b3-9d6c-446e-b8e8-79832dfb546e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:8f:94:b2:90:72:77:3a:19:21:4b:3c:22: 5a:47:05:b4:b1:91:f5:85:60:a9:1f:ed:6a:06:22: 1f:24:61:12:94:86:2a:81:f1:59:0d:21:ea:a6:24: e0:ff:7f:d1:3f:25:a3:87:40:a6:de:50:bb:84:1b: 9d:55:99:2f:eb:86:3b:80:e4:90:5e:8e:b2:35:17: 94:65:ef:5a:3e:1d:66:2a:3d:65:7c:97:bd:bd:a2: f4:79:bb:1d:a5:3d:66:c7:2b:87:9d:2f:43:19:9a: 5b:2e:82:91:2a:b0:88:3e:ae:ab:4e:d8:89:6f:7d: 03:e3:4f:9b:65:86:4f:ca:ca:ad:ff:03:a8:a1:b4: 07:2a:d1:d7:4b:bc:93:11:47:89:06:88:23:ba:86: 63:cc:36:7c:25:3d:08:c8:bc:19:e2:cd:b4:c5:f9: 7b:48:fb:2e:06:5b:86:1c:dd:a0:1e:e0:bc:a7:37: f2:c7:af:b2:d6:0f:f1:cb:a5:b4:00:06:44:bb:7f: c3:34:2b:4c:d9:01:ff:3f:3f:31:f3:7d:57:fc:c5: 48:2b:17:67:1d:91:29:57:91:73:c2:18:4b:ca:f5: ff:1e:0e:ec:6d:1d:f4:35:c5:83:b7:5c:cf:13:5e: 5f:1f:e8:36:b7:19:66:3c:c5:ea:0e:41:19:84:3d: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:0F:D5:BC:B0:9A:89:FD:4C:1E:9F:14:78:7B:3D:79:99:1D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl X509v3 Authority Key Identifier: keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer sbgp-ipAddrBlock: critical IPv4: 199.27.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:45:7f:72:59:55:57:9e:e7:fc:20:76:73:aa:8d:f5:84:43: d3:9b:dc:fd:49:04:00:83:04:a8:ad:e9:00:0c:b3:bc:ab:9d: 7f:0f:7d:27:47:d3:9a:51:29:b9:7d:0f:68:7b:45:31:c9:ec: ac:fb:be:b4:30:06:13:a0:34:fc:94:2a:51:57:88:f5:c4:08: e8:04:dc:21:ba:3b:62:ba:41:31:b8:24:bf:ae:da:af:f1:85: 19:4c:86:56:92:0c:db:69:71:f8:0e:dd:31:54:7d:a4:c7:d2: 67:0a:f9:5b:6a:af:15:01:ea:ba:02:29:29:65:18:09:eb:4f: ba:1d:35:34:cd:16:cd:db:2c:ee:e6:fd:58:57:bf:26:54:4e: a7:0a:0b:a7:c1:1c:6d:c3:30:5d:79:2e:52:7a:5b:78:51:9f: c5:fa:be:bd:70:5d:87:75:58:ec:0d:a4:fb:7f:63:d5:01:e8: dc:43:85:82:8d:ad:9b:ab:38:52:c4:ad:7e:a7:df:6d:6e:c2: 57:46:3e:5f:7f:d0:34:0f:21:ec:ab:35:6f:58:76:12:09:ce: 36:17:d2:3b:51:39:98:33:fb:fc:a0:81:75:84:05:19:fa:80: 7f:14:68:a8:ce:30:85:dc:23:d2:08:25:15:44:a6:0d:52:92: 7a:0c:49:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4DJrGmzZmO350AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAxOWQxYzctYjMyYS00YTY1LWExMzUtMjM0Y2RlM2M3 NjgwMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MDI5ODY4YjMtOWQ2Yy00NDZlLWI4ZTgtNzk4MzJkZmI1NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UuPlLKQcnc6GSFLPCJaRwW0sZH1hWCpH+1q BiIfJGESlIYqgfFZDSHqpiTg/3/RPyWjh0Cm3lC7hBudVZkv64Y7gOSQXo6yNReU Ze9aPh1mKj1lfJe9vaL0ebsdpT1mxyuHnS9DGZpbLoKRKrCIPq6rTtiJb30D40+b ZYZPysqt/wOoobQHKtHXS7yTEUeJBogjuoZjzDZ8JT0IyLwZ4s20xfl7SPsuBluG HN2gHuC8pzfyx6+y1g/xy6W0AAZEu3/DNCtM2QH/Pz8x831X/MVIKxdnHZEpV5Fz whhLyvX/Hg7sbR30NcWDt1zPE15fH+g2txlmPMXqDkEZhD0rGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8VD9W8sJqJ/UwenxR4ez15mR3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5 ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRjZGUzYzc2ODAvY2FhZjU2NWYtOTFjZC0z ODY1LWEwZjctZDIzYWY0ODM4MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzAxOWQxYzctYjMyYS00YTY1LWEx MzUtMjM0Y2RlM2M3NjgwLzcwMTlkMWM3LWIzMmEtNGE2NS1hMTM1LTIzNGNkZTNj NzY4MC5jcmwwHwYDVR0jBBgwFoAUIg3xbZnjAw8pgoinQ5WJawDMTZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRj ZGUzYzc2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxvnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpFf3JZVVee5/wgdnOqjfWEQ9Ob3P1JBACDBKit6QAMs7yrnX8PfSdH 05pRKbl9D2h7RTHJ7Kz7vrQwBhOgNPyUKlFXiPXECOgE3CG6O2K6QTG4JL+u2q/x hRlMhlaSDNtpcfgO3TFUfaTH0mcK+VtqrxUB6roCKSllGAnrT7odNTTNFs3bLO7m /VhXvyZUTqcKC6fBHG3DMF15LlJ6W3hRn8X6vr1wXYd1WOwNpPt/Y9UB6NxDhYKN rZurOFLErX6n321uwldGPl9/0DQPIeyrNW9YdhIJzjYX0jtROZgz+/yggXWEBRn6 gH8UaKjOMIXcI9IIJRVEpg1SknoMSa0= -----END CERTIFICATE-----Generated at Sun Oct 19 20:40:47 2025 by rpki-client