$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/2a4ae58c-1378-3cb4-91f3-34d34c321cd8.roa File: 2a4ae58c-1378-3cb4-91f3-34d34c321cd8.roa (raw, json) Hash identifier: 8qXt9PGBUSwFvZ66OsqXjgaxUJCi3UOzpY89biGBhEA= Subject key identifier: 51:F1:49:0B:47:0B:F7:1D:81:9E:1B:4C:7D:2E:03:D0:D9:CF:A7:CB Certificate issuer: /CN=a54703a4-3daa-455c-8724-7af942d1a391 Certificate serial: 010D0C9F4328584B1AD1768850929A4F4FEDAC80 Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/2a4ae58c-1378-3cb4-91f3-34d34c321cd8.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 199.103.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:76:88:50:92:9a:4f:4f:ed:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=a6bba426-b479-426c-a6a3-4678bc92862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:34:6c:cc:f5:7e:9e:13:7a:31:a1:fd:05: 3b:af:55:59:6e:28:2a:84:83:75:f0:c9:aa:a1:d1: b2:5f:56:20:f6:38:e7:2a:6e:26:d5:e0:15:c2:1d: 4e:8e:ce:6d:25:ed:7f:b2:7b:b3:46:0e:06:75:a3: 4d:e1:09:57:3f:e1:91:dd:27:55:a2:56:7d:32:39: 01:9c:a7:75:5e:56:3c:5b:62:15:93:5d:bb:f3:ae: f9:02:78:53:c6:e1:1b:07:66:a0:8b:7b:a8:82:6c: e9:82:98:cf:3a:b4:d1:c5:59:11:fd:c6:2e:d9:ea: d2:f1:9c:52:5d:5c:09:6d:0b:92:3e:5a:a6:ef:aa: 8f:7f:1c:0b:89:95:51:0f:18:82:8c:51:56:83:cf: 2a:0d:ad:77:ef:b0:82:73:5f:fd:58:35:b0:99:d9: 89:38:e6:71:6a:ae:ad:e5:81:f0:19:e9:02:0a:77: 22:de:c4:83:c7:3e:a2:fa:ac:0c:39:5f:98:e6:03: 78:7f:f1:d0:b5:63:8b:5a:42:da:96:69:63:d6:83: 62:42:12:ed:76:95:a4:f2:bb:cb:a8:03:1d:09:ca: de:91:ca:6f:6d:0a:e0:13:1e:a1:58:a2:67:a0:46: 78:d4:aa:89:0a:ff:b1:d1:0b:f7:49:6e:5f:eb:77: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:49:0B:47:0B:F7:1D:81:9E:1B:4C:7D:2E:03:D0:D9:CF:A7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/2a4ae58c-1378-3cb4-91f3-34d34c321cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl X509v3 Authority Key Identifier: keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer sbgp-ipAddrBlock: critical IPv4: 199.103.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8f:ee:b1:43:7c:fa:c4:7a:37:1c:d2:96:2c:44:b4:f3:a1: e1:28:62:bd:44:54:c5:3d:2b:bc:65:0b:a8:17:cd:66:a2:e4: 3e:2d:97:e2:85:21:94:fa:bf:49:0e:57:88:2e:a5:14:dc:a7: ca:ef:da:60:57:1e:17:40:b9:7f:d1:7b:4c:79:c1:09:c6:4c: 42:29:01:8d:45:bd:a3:8d:dc:ba:cc:c7:f5:82:17:e6:4e:70: 8d:f4:74:c4:1d:26:8e:65:34:46:a8:92:90:47:a2:6c:66:36: a8:01:b0:63:1f:87:74:4a:63:1b:cf:ca:f3:5d:c4:ba:37:95: c8:af:ba:1b:9c:aa:f9:4f:9d:0e:3d:54:ca:ee:7c:7d:63:bb: fa:e3:b5:ed:e1:1b:53:fc:5b:fe:bb:07:0d:f4:6c:7e:72:5a: ab:5d:41:2f:68:54:29:93:0b:c4:55:37:c4:ee:44:be:8e:a5: e5:27:7c:9d:f8:69:d7:06:95:0a:d1:89:6c:b3:d6:2f:6f:59: 09:bf:fa:4b:62:e3:e4:55:ed:c8:46:b0:dc:63:dc:87:fa:a8: 7c:d8:d0:8f:32:4c:d0:36:77:51:49:9b:43:3b:d3:81:92:57: 1b:1b:6e:9b:02:36:2b:80:d8:ae:5d:80:be:b3:40:d0:eb:c2: 45:45:67:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XaIUJKaT0/trIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0NzAzYTQtM2RhYS00NTVjLTg3MjQtN2FmOTQyZDFh MzkxMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YTZiYmE0MjYtYjQ3OS00MjZjLWE2YTMtNDY3OGJjOTI4NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyc0bMz1fp4TejGh/QU7r1VZbigqhIN18Mmq odGyX1Yg9jjnKm4m1eAVwh1Ojs5tJe1/snuzRg4GdaNN4QlXP+GR3SdVolZ9MjkB nKd1XlY8W2IVk1278675AnhTxuEbB2agi3uogmzpgpjPOrTRxVkR/cYu2erS8ZxS XVwJbQuSPlqm76qPfxwLiZVRDxiCjFFWg88qDa1377CCc1/9WDWwmdmJOOZxaq6t 5YHwGekCCnci3sSDxz6i+qwMOV+Y5gN4f/HQtWOLWkLalmlj1oNiQhLtdpWk8rvL qAMdCcrekcpvbQrgEx6hWKJnoEZ41KqJCv+x0Qv3SW5f63ckmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHxSQtHC/cdgZ4bTH0uA9DZz6fLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3 MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5NDJkMWEzOTEvMmE0YWU1OGMtMTM3OC0z Y2I0LTkxZjMtMzRkMzRjMzIxY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTU0NzAzYTQtM2RhYS00NTVjLTg3 MjQtN2FmOTQyZDFhMzkxL2E1NDcwM2E0LTNkYWEtNDU1Yy04NzI0LTdhZjk0MmQx YTM5MS5jcmwwHwYDVR0jBBgwFoAUwWxcij939qkIJ9SgnYSA5N3d7fMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5 NDJkMWEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2dVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSP7rFDfPrEejcc0pYsRLTzoeEoYr1EVMU9K7xlC6gXzWai5D4tl+KF IZT6v0kOV4gupRTcp8rv2mBXHhdAuX/Re0x5wQnGTEIpAY1FvaON3LrMx/WCF+ZO cI30dMQdJo5lNEaokpBHomxmNqgBsGMfh3RKYxvPyvNdxLo3lcivuhucqvlPnQ49 VMrufH1ju/rjte3hG1P8W/67Bw30bH5yWqtdQS9oVCmTC8RVN8TuRL6OpeUnfJ34 adcGlQrRiWyz1i9vWQm/+kti4+RV7chGsNxj3If6qHzY0I8yTNA2d1FJm0M704GS VxsbbpsCNiuA2K5dgL6zQNDrwkVFZ9k= -----END CERTIFICATE-----Generated at Mon Oct 20 07:34:20 2025 by rpki-client