$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa File: 37c207ef-3109-390a-8c00-0f9195cf738d.roa (raw, json) Hash identifier: BFLCSROlinMMF7cf62sFbZ4Admxde+4p8K990O1+hSs= Subject key identifier: 4B:19:16:2F:E8:D0:BE:92:E0:E7:57:68:96:25:0A:D1:DB:35:D7:F1 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584B6632001296C34C2FE7B22B80 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 55039 IP address blocks: 199.231.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:00:12:96:c3:4c:2f:e7:b2:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=596e56af-25ee-4ae3-8da5-14c2c88cfbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:c8:15:20:c6:59:e8:11:c2:82:bb:45:89: 60:bf:a4:a0:af:ca:90:8d:b5:77:a3:55:35:26:d6: f0:02:a1:72:b6:39:54:0b:2a:1d:26:8e:0e:5b:2b: 5d:81:75:67:a5:94:ab:a8:6f:10:b4:95:91:1f:20: 96:fa:e4:8f:fe:2d:36:2f:3c:51:32:bf:b2:53:69: b8:51:fc:b9:ac:fe:02:49:68:cc:20:31:99:d2:0a: 62:cd:e6:2c:ff:6d:0c:80:8f:56:7f:8a:3f:f0:8a: e4:2f:08:68:1f:6f:f2:b6:f2:db:23:91:4d:bd:83: 65:44:77:dc:f2:6f:44:6f:93:83:bb:8a:a4:82:da: 5d:96:8d:71:57:64:5f:75:06:fe:f5:29:8d:4f:41: 08:52:b6:59:18:d9:b3:94:03:7c:9a:81:25:48:78: 84:34:bd:01:06:de:fa:71:aa:17:40:42:f7:ea:9c: bf:08:e9:f1:ee:1c:cc:ff:26:e6:8e:80:95:65:5d: e4:e3:5e:df:0e:38:f4:33:04:82:8f:82:69:4a:e5: 24:ef:00:d7:9c:91:12:50:b9:cd:c7:96:17:79:45: 9c:e6:4c:67:c1:b4:97:0f:ed:22:d3:5b:a8:d4:f2: 87:82:93:f8:8c:f1:68:f0:4a:ac:fc:07:96:5e:35: 90:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:19:16:2F:E8:D0:BE:92:E0:E7:57:68:96:25:0A:D1:DB:35:D7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 199.231.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:80:7d:e0:4e:64:0e:4c:ea:e1:fc:3d:7b:82:b9:10:e7:89: 28:f0:17:9a:74:81:ba:1f:a9:66:38:97:2d:a1:75:58:e6:dc: 60:d5:cb:94:d4:b2:00:6a:1f:f8:18:49:d3:33:24:47:01:4f: a1:32:7d:69:4f:1b:42:17:90:8d:20:26:2d:a6:27:c4:de:a4: 34:64:f0:d1:dd:f9:05:f7:93:40:29:f6:81:e3:83:c8:39:b0: e5:5d:f1:e7:da:cb:9e:5a:bd:43:7b:27:fa:6c:46:08:b2:46: 98:97:a1:72:dd:b8:3e:a3:26:32:6d:c3:30:62:f4:47:c6:e7: ce:87:a9:fa:ea:93:71:48:ef:90:28:0f:7c:55:b0:0b:a4:3b: 56:10:e3:96:de:54:91:aa:3f:68:b2:f8:65:2c:d9:e9:02:ff: 92:bd:08:87:6e:fc:b6:ce:a8:48:8f:2c:bc:fc:7d:3a:e8:d3: 9f:4a:51:e9:cd:f6:14:fc:81:35:79:d6:ef:b9:a0:f5:59:dc: 48:f4:0b:a1:40:f6:a0:54:38:dc:fd:89:e3:6b:b6:50:70:29: ad:2e:32:e7:20:5d:fc:23:a7:b0:1d:f2:26:45:45:83:f5:8f: e3:56:6f:29:b0:d6:3f:8c:ce:2e:68:64:3d:1a:79:d1:33:f8: 10:b7:af:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgASlsNML+eyK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NTk2ZTU2YWYtMjVlZS00YWUzLThkYTUtMTRjMmM4OGNmYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJbIFSDGWegRwoK7RYlgv6Sgr8qQjbV3o1U1 JtbwAqFytjlUCyodJo4OWytdgXVnpZSrqG8QtJWRHyCW+uSP/i02LzxRMr+yU2m4 Ufy5rP4CSWjMIDGZ0gpizeYs/20MgI9Wf4o/8IrkLwhoH2/ytvLbI5FNvYNlRHfc 8m9Eb5ODu4qkgtpdlo1xV2RfdQb+9SmNT0EIUrZZGNmzlAN8moElSHiENL0BBt76 caoXQEL36py/COnx7hzM/ybmjoCVZV3k417fDjj0MwSCj4JpSuUk7wDXnJESULnN x5YXeUWc5kxnwbSXD+0i01uo1PKHgpP4jPFo8Eqs/AeWXjWQdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsZFi/o0L6S4OdXaJYlCtHbNdfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMzdjMjA3ZWYtMzEwOS0z OTBhLThjMDAtMGY5MTk1Y2Y3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqAfeBOZA5M6uH8PXuCuRDniSjwF5p0gbofqWY4ly2hdVjm3GDVy5TU sgBqH/gYSdMzJEcBT6EyfWlPG0IXkI0gJi2mJ8TepDRk8NHd+QX3k0Ap9oHjg8g5 sOVd8efay55avUN7J/psRgiyRpiXoXLduD6jJjJtwzBi9EfG586Hqfrqk3FI75Ao D3xVsAukO1YQ45beVJGqP2iy+GUs2ekC/5K9CIdu/LbOqEiPLLz8fTro059KUenN 9hT8gTV51u+5oPVZ3Ej0C6FA9qBUONz9ieNrtlBwKa0uMucgXfwjp7Ad8iZFRYP1 j+NWbymw1j+Mzi5oZD0aedEz+BC3ry4= -----END CERTIFICATE-----Generated at Tue Oct 21 09:08:32 2025 by rpki-client