$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa File: 35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa (raw, json) Hash identifier: KVT8yuFNKbhNQiEGNiX86E14OHeRo2SoHm+OO4352z0= Subject key identifier: 2D:4C:8F:F6:EC:DA:66:E9:4E:25:92:CB:9C:08:95:DA:35:A2:82:94 Certificate issuer: /CN=a54703a4-3daa-455c-8724-7af942d1a391 Certificate serial: 010D0C9F4328584B1AD17673AFE077A40ADE2F00 Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 54830 IP address blocks: 199.103.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:76:73:af:e0:77:a4:0a:de:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=4997812a-b39c-4426-9444-54ecc05f42c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:01:eb:3d:e1:e6:20:55:4b:04:3b:da:24: 3d:ac:58:60:16:d2:d4:c1:d9:c2:1f:10:53:65:c0: 35:1a:0b:af:af:2b:d3:5f:0b:3f:c7:1a:b8:a7:34: 00:63:ce:4f:0c:97:16:1a:3c:02:79:73:8c:93:c0: ff:21:9d:e3:ba:75:45:2c:38:be:7d:a4:ba:5f:af: aa:3a:2e:33:1f:e6:d3:00:5a:21:3e:30:d7:4a:3f: c2:6e:77:dc:34:a1:aa:57:5d:13:4b:3a:f2:fb:dd: 38:e7:94:a1:25:81:de:4d:2f:06:43:ed:0b:19:97: 4b:1e:05:21:b1:27:10:d6:50:ea:36:84:dc:3b:9a: a8:56:5e:f0:53:fd:46:50:c3:88:65:90:a4:ae:f4: 55:d1:06:db:23:67:c1:72:41:b1:e5:02:56:c6:68: bc:af:0e:3d:1a:91:f5:67:53:a5:f9:32:ea:4d:2b: b1:af:4d:4b:5e:ea:c6:48:3a:86:fe:52:75:22:80: fe:80:79:7b:e0:ff:ad:73:db:14:7f:0d:7d:5f:b7: 35:8c:aa:a7:59:b6:c5:d7:c9:ac:15:e4:52:cd:c6: 16:31:b4:85:9b:d2:0a:91:ae:24:ea:0e:b0:fe:59: d2:9b:71:06:21:b5:2a:72:bb:e8:b4:7a:f7:ba:a6: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:8F:F6:EC:DA:66:E9:4E:25:92:CB:9C:08:95:DA:35:A2:82:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl X509v3 Authority Key Identifier: keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer sbgp-ipAddrBlock: critical IPv4: 199.103.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6e:94:40:a2:5e:8e:e8:46:c1:81:5e:c4:51:b3:77:2d:fc: 7b:00:e4:04:8b:09:c2:78:f4:07:7c:d6:e5:3d:81:81:b0:0a: 61:a3:cb:6e:8e:83:09:b3:cd:ac:80:06:e9:e7:26:c9:ef:ec: 54:61:21:1a:76:ef:57:d2:ed:74:f6:07:af:f1:a3:58:90:01: e4:c0:8f:ac:08:b8:bf:60:f3:4e:77:db:9c:d3:1d:9b:2e:dd: 84:02:12:de:42:53:24:74:38:ee:6e:92:61:89:8d:19:7b:04: 2c:4c:c5:52:a9:67:b2:77:33:37:78:4e:60:de:fc:2a:e9:1f: 60:93:1f:a6:56:6c:93:41:bd:13:e6:e6:98:3b:a8:51:9e:79: 8e:95:12:55:7a:87:dc:e7:d2:76:24:61:20:72:60:3e:cc:1f: dc:44:9f:86:76:ea:4a:3e:ac:c1:e8:2f:df:c2:10:2b:c3:c2: 4c:f4:93:05:85:ed:b8:35:15:21:dc:36:e5:0b:d0:cd:b4:c7: 3a:11:53:da:39:7d:14:8e:bb:32:28:bb:8c:5c:28:34:c6:69: 84:b2:45:fa:a8:31:e9:fd:9c:44:b3:5d:cf:6f:55:23:e4:2e: 23:76:b3:3c:73:a8:20:d8:96:8d:aa:4b:f1:f5:fc:92:10:50: 40:64:05:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XZzr+B3pAreLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0NzAzYTQtM2RhYS00NTVjLTg3MjQtN2FmOTQyZDFh MzkxMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDk5NzgxMmEtYjM5Yy00NDI2LTk0NDQtNTRlY2MwNWY0MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil8B6z3h5iBVSwQ72iQ9rFhgFtLUwdnCHxBT ZcA1GguvryvTXws/xxq4pzQAY85PDJcWGjwCeXOMk8D/IZ3junVFLDi+faS6X6+q Oi4zH+bTAFohPjDXSj/CbnfcNKGqV10TSzry+90455ShJYHeTS8GQ+0LGZdLHgUh sScQ1lDqNoTcO5qoVl7wU/1GUMOIZZCkrvRV0QbbI2fBckGx5QJWxmi8rw49GpH1 Z1Ol+TLqTSuxr01LXurGSDqG/lJ1IoD+gHl74P+tc9sUfw19X7c1jKqnWbbF18ms FeRSzcYWMbSFm9IKka4k6g6w/lnSm3EGIbUqcrvotHr3uqaLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Mj/bs2mbpTiWSy5wIldo1ooKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3 MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5NDJkMWEzOTEvMzVmZGZjMGUtY2YxMC0z ZTFlLTgzOGItMzE2ZjNkZTllMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTU0NzAzYTQtM2RhYS00NTVjLTg3 MjQtN2FmOTQyZDFhMzkxL2E1NDcwM2E0LTNkYWEtNDU1Yy04NzI0LTdhZjk0MmQx YTM5MS5jcmwwHwYDVR0jBBgwFoAUwWxcij939qkIJ9SgnYSA5N3d7fMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5 NDJkMWEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2dVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5ulECiXo7oRsGBXsRRs3ct/HsA5ASLCcJ49Ad81uU9gYGwCmGjy26O gwmzzayABunnJsnv7FRhIRp271fS7XT2B6/xo1iQAeTAj6wIuL9g805325zTHZsu 3YQCEt5CUyR0OO5ukmGJjRl7BCxMxVKpZ7J3Mzd4TmDe/CrpH2CTH6ZWbJNBvRPm 5pg7qFGeeY6VElV6h9zn0nYkYSByYD7MH9xEn4Z26ko+rMHoL9/CECvDwkz0kwWF 7bg1FSHcNuUL0M20xzoRU9o5fRSOuzIou4xcKDTGaYSyRfqoMen9nESzXc9vVSPk LiN2szxzqCDYlo2qS/H1/JIQUEBkBck= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:20 2025 by rpki-client