$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa File: ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa (raw, json) Hash identifier: 0afN37L/ElsKNyHqJJEiWGaHLSGnYcX68LP+PM4xZL4= Subject key identifier: 5C:21:E4:28:DA:2B:66:CD:04:11:26:02:65:0C:33:83:55:E0:6C:31 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584B59A1C63EA0BFC8AD446B64D0 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 399509 IP address blocks: 199.96.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:c6:3e:a0:bf:c8:ad:44:6b:64:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=771ec623-e1f5-4540-8ef0-8a2522b458b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:3d:3a:9e:c9:5f:a0:f6:b4:5b:df:1a:ef: 6c:e7:7d:9d:59:c0:45:92:58:f4:3f:19:55:3d:ec: d9:c7:fe:95:cc:e1:df:37:57:f1:8a:99:c3:69:1b: e4:3d:2e:10:50:62:31:87:0a:08:f1:1b:ab:11:37: ad:a7:b7:fd:e3:1c:77:01:85:3a:69:7e:a7:af:b9: 3f:a1:6d:ee:93:45:b8:8b:00:f5:b5:6a:af:c9:5d: 23:6d:cb:29:9d:4e:eb:b4:a0:50:8c:70:36:fc:8d: 54:eb:61:ab:4a:86:69:a3:b0:95:6f:c5:04:3a:8f: 3f:e8:38:8b:e9:1d:d1:ff:ba:38:f1:7e:98:cc:ca: dd:46:26:31:02:c0:d7:8c:76:2a:13:dd:45:79:79: db:e9:53:73:ad:23:8f:72:89:81:4d:b9:cd:d9:b7: 04:5a:2a:93:bd:b1:c3:49:6d:e1:e5:36:c2:10:22: dc:bd:5c:90:e0:ae:89:bf:5e:bd:07:05:bf:cc:9e: cc:51:f4:a1:b0:5e:22:cf:38:27:11:9d:b0:21:02: a7:56:9f:f8:ff:06:19:76:a6:30:30:7e:00:e9:79: d5:02:a0:8b:e7:b7:fd:25:c8:15:af:8b:c0:07:80: 3b:fd:9d:45:38:77:a4:98:3d:75:a2:1a:64:0d:4e: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:E4:28:DA:2B:66:CD:04:11:26:02:65:0C:33:83:55:E0:6C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c0:7a:07:5a:30:68:7b:1a:55:3c:cf:a6:5c:e3:2e:37:42: a1:74:30:ea:3a:d0:54:6e:42:8e:c0:52:44:a6:aa:bf:0b:50: bc:62:f7:a0:71:1c:77:70:75:7c:d2:06:83:38:df:35:dc:b2: a2:82:f9:ac:b8:6b:0e:62:ba:c2:5c:a9:69:0a:cf:0a:aa:81: bb:bf:31:32:7b:31:42:30:7e:59:f9:69:da:0e:f3:72:d0:cd: 71:6f:c5:e3:6c:85:6f:e5:cf:00:fe:cd:ba:87:16:97:ee:38: 3f:a5:30:13:a5:56:93:fc:bd:b1:ca:11:80:ae:6b:45:64:83: 5d:44:fb:33:e8:35:3e:20:33:7c:9f:f4:aa:d7:60:53:69:93: f0:99:14:4f:4d:ae:e7:41:47:0c:2a:16:a4:af:43:26:b7:16: 84:b2:c7:8f:9a:09:01:0b:58:9c:b0:35:1e:39:e1:5e:cb:80: 91:e5:7c:cd:58:99:90:3a:bf:97:3a:46:ad:34:70:f0:66:81: be:e0:f7:88:52:d0:b7:13:e6:8f:7a:a3:33:65:c3:1f:14:25: 21:0e:49:32:3f:1b:57:8b:e9:ea:00:de:ef:7a:f1:45:c1:46: d9:2f:29:c2:5f:43:a3:55:ee:c4:32:f9:99:02:5d:d6:88:b4: e7:a6:54:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocY+oL/IrURrZNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NzcxZWM2MjMtZTFmNS00NTQwLThlZjAtOGEyNTIyYjQ1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHo9Op7JX6D2tFvfGu9s532dWcBFklj0PxlV PezZx/6VzOHfN1fxipnDaRvkPS4QUGIxhwoI8RurETetp7f94xx3AYU6aX6nr7k/ oW3uk0W4iwD1tWqvyV0jbcspnU7rtKBQjHA2/I1U62GrSoZpo7CVb8UEOo8/6DiL 6R3R/7o48X6YzMrdRiYxAsDXjHYqE91FeXnb6VNzrSOPcomBTbnN2bcEWiqTvbHD SW3h5TbCECLcvVyQ4K6Jv169BwW/zJ7MUfShsF4izzgnEZ2wIQKnVp/4/wYZdqYw MH4A6XnVAqCL57f9JcgVr4vAB4A7/Z1FOHekmD11ohpkDU7IxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwh5CjaK2bNBBEmAmUMM4NV4GwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvZWMwYjYzYjQtNDIyYi0z OWNhLTk3NzktNmRkZWZmODNhZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLAegdaMGh7GlU8z6Zc4y43QqF0MOo60FRuQo7AUkSmqr8LULxi96Bx HHdwdXzSBoM43zXcsqKC+ay4aw5iusJcqWkKzwqqgbu/MTJ7MUIwfln5adoO83LQ zXFvxeNshW/lzwD+zbqHFpfuOD+lMBOlVpP8vbHKEYCua0Vkg11E+zPoNT4gM3yf 9KrXYFNpk/CZFE9NrudBRwwqFqSvQya3FoSyx4+aCQELWJywNR454V7LgJHlfM1Y mZA6v5c6Rq00cPBmgb7g94hS0LcT5o96ozNlwx8UJSEOSTI/G1eL6eoA3u968UXB RtkvKcJfQ6NV7sQy+ZkCXdaItOemVGw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:19 2025 by rpki-client