$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa File: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json) Hash identifier: YxiqcZsUCAMwkpMZcFQoyeROv19+FgremI0zI8zAL2Q= Subject key identifier: 62:F8:68:B8:4E:42:A3:1B:7E:A9:B1:BC:3E:44:4D:5C:C1:C5:D1:9C Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F4328584B8BE20FAC61495C5DE5A0A400 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 715 IP address blocks: 199.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0f:ac:61:49:5c:5d:e5:a0:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=5f756d93-6b1c-47fe-b81e-70e1a1bc8508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:de:63:4b:8e:79:cd:a9:09:a9:8f:1e:ba: 26:59:a1:43:04:37:c6:4f:67:8e:e3:e2:35:ea:57: 7d:eb:33:aa:bf:1d:e8:53:2b:e6:53:95:66:e0:fe: 3d:15:22:a7:43:db:65:4c:dd:be:26:7a:f0:07:ae: 30:dc:8d:7b:78:ba:19:f3:ef:a7:b3:fd:78:4a:15: cc:20:68:e2:d4:da:c9:00:42:2b:11:f7:fa:03:91: a2:cb:77:a0:83:22:b0:cf:1e:d9:28:5f:19:2b:29: 80:43:f6:3b:65:46:ba:9e:b5:fc:6b:1b:b3:fa:b9: 08:33:18:bb:a6:3c:76:22:3c:65:43:6d:e0:06:7d: 7c:8f:06:0c:e2:6b:f3:7a:75:c8:22:10:1a:7a:bf: ba:06:17:e8:6c:71:92:3b:d7:18:e7:93:2b:d8:a4: b8:fa:4d:f0:e6:0e:b4:29:be:f1:a9:6d:15:38:97: f3:a2:4d:96:ab:dd:31:db:1e:dc:1b:fe:74:df:9e: 6f:bb:9f:62:34:35:07:2b:73:83:71:58:2e:48:c4: 97:1b:77:70:80:10:14:7b:2f:87:d0:59:65:9a:54: 8e:00:c6:0d:78:28:e8:81:32:a9:b0:37:ee:66:4d: f2:dc:98:94:d6:cf:88:55:dc:79:14:87:f5:cd:ea: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F8:68:B8:4E:42:A3:1B:7E:A9:B1:BC:3E:44:4D:5C:C1:C5:D1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:18:ff:7b:3f:f8:66:4b:c2:88:de:f4:19:1a:08:2b:8d:4b: 6a:c7:8d:8f:10:3a:75:6f:7e:d9:5e:d5:02:c3:8b:bf:25:4d: 12:11:9a:e0:ac:ce:8e:63:6e:1d:04:12:16:94:38:6d:b9:0e: e9:d7:ea:ed:4a:f2:db:e2:57:7f:c8:10:3e:ac:f1:07:e9:ca: 2c:d8:c9:24:82:d9:31:c2:80:25:2b:31:f9:01:4d:ee:0f:fc: 54:71:60:aa:ba:fc:13:69:d7:85:98:20:92:c6:73:0b:cf:4a: 46:c3:35:98:c8:6a:ab:da:2d:a7:b0:75:8f:20:ac:37:64:11: 31:83:da:26:cb:ec:d5:77:9d:cb:13:a4:58:77:a5:8e:1c:31: 20:2a:39:1f:c2:75:16:b4:97:55:fe:de:60:1b:ad:7e:f7:eb: 74:09:0f:20:b1:cc:3c:a0:0c:ef:d5:4c:e9:75:50:29:a8:1f: 2e:51:8c:91:c0:38:6b:7c:da:1f:3e:ca:a2:c9:63:22:99:f1: f6:22:8c:b6:00:82:3f:13:8f:30:74:7e:db:20:61:b4:0d:2d: 90:58:c1:69:0e:69:e8:e5:fa:c6:61:6c:43:25:2a:b1:45:82: 68:1e:24:9f:60:44:89:55:7a:c9:16:6e:54:1a:71:89:40:e2: 34:73:3b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g+sYUlcXeWgpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NWY3NTZkOTMtNmIxYy00N2ZlLWI4MWUtNzBlMWExYmM4NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI/eY0uOec2pCamPHromWaFDBDfGT2eO4+I1 6ld96zOqvx3oUyvmU5Vm4P49FSKnQ9tlTN2+JnrwB64w3I17eLoZ8++ns/14ShXM IGji1NrJAEIrEff6A5Giy3eggyKwzx7ZKF8ZKymAQ/Y7ZUa6nrX8axuz+rkIMxi7 pjx2IjxlQ23gBn18jwYM4mvzenXIIhAaer+6BhfobHGSO9cY55Mr2KS4+k3w5g60 Kb7xqW0VOJfzok2Wq90x2x7cG/50355vu59iNDUHK3ODcVguSMSXG3dwgBAUey+H 0FllmlSOAMYNeCjogTKpsDfuZk3y3JiU1s+IVdx5FIf1zeplywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL4aLhOQqMbfqmxvD5ETVzBxdGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvNGZiZjJlNmQtMjkzNS0z NmMwLThlNDktZmQ1YThlMDAyOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwY/3s/+GZLwoje9BkaCCuNS2rHjY8QOnVvftle1QLDi78lTRIRmuCs zo5jbh0EEhaUOG25DunX6u1K8tviV3/IED6s8QfpyizYySSC2THCgCUrMfkBTe4P /FRxYKq6/BNp14WYIJLGcwvPSkbDNZjIaqvaLaewdY8grDdkETGD2ibL7NV3ncsT pFh3pY4cMSAqOR/CdRa0l1X+3mAbrX7363QJDyCxzDygDO/VTOl1UCmoHy5RjJHA OGt82h8+yqLJYyKZ8fYijLYAgj8TjzB0ftsgYbQNLZBYwWkOaejl+sZhbEMlKrFF gmgeJJ9gRIlVeskWblQacYlA4jRzO60= -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:24 2025 by rpki-client