$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa File: 88284c80-4080-3740-a1d6-8df786cec5f4.roa (raw, json) Hash identifier: Z9YTQlDLAZIBhqa9V0d9q1oZ0Y6EH2LYcdYEehN6J5Q= Subject key identifier: C9:32:56:64:BA:89:C1:93:6D:93:B7:A7:8B:B0:7F:47:C1:1D:BD:3A Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F4328584B8BE20F97BDF3CFA0D6663AE0 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 715 IP address blocks: 199.120.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0f:97:bd:f3:cf:a0:d6:66:3a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=7e9f2d74-357c-4d86-89c9-b10530d804ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:93:dc:75:e2:9d:1c:17:a9:f8:42:7f:0f: c6:55:54:9d:b0:ec:4d:e4:01:92:59:ab:a7:47:8b: 13:f1:8c:c1:5d:fb:52:0d:3c:aa:30:7c:37:83:7d: 62:e8:b9:10:23:47:1e:3e:31:1b:8d:53:ed:a5:14: a0:c3:a7:e7:93:25:d8:72:48:19:eb:13:de:94:9f: 3f:5e:ff:08:5d:22:53:88:76:6c:74:da:4c:ba:31: f7:18:ef:71:da:2d:2b:de:65:0a:5f:33:12:87:14: 81:5c:6d:c6:0f:1f:89:d1:52:a7:e1:12:c4:e0:44: 23:9e:7f:c5:5d:fc:02:d7:24:5f:b2:45:51:c8:02: cb:a2:30:fd:25:4f:6d:24:55:45:39:51:3f:0c:5f: e3:a7:c1:0f:f0:8a:ab:c2:35:b3:f5:3d:1e:57:4d: c1:17:12:37:66:a1:79:71:e7:3f:f4:09:fe:75:6d: b0:fd:e2:97:0b:17:9f:6c:b5:f8:6b:c4:f6:49:3b: 4c:a8:f7:2f:33:aa:e9:7c:cd:c0:4e:71:79:4e:cc: ff:73:1a:8f:1e:93:c4:92:7f:27:52:a7:00:36:39: 66:e1:08:39:29:b3:ea:1d:1b:da:1c:93:99:13:7f: 2d:74:b1:41:30:f4:6c:32:3c:fb:dc:94:d6:94:73: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:56:64:BA:89:C1:93:6D:93:B7:A7:8B:B0:7F:47:C1:1D:BD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d6:d4:3d:b7:86:58:0a:da:94:79:1f:2d:89:68:82:fb:51: f2:ea:1e:8a:9c:48:85:7a:03:4b:be:30:cc:48:c5:0a:6f:06: 79:27:69:7d:91:2a:f4:60:5b:c9:23:00:20:02:ce:6f:1d:40: 87:ac:25:74:d0:37:9b:16:1c:c9:97:3b:cf:63:b2:3c:fb:28: 42:02:bb:d7:47:2b:e4:85:6a:08:17:f8:87:06:06:3a:68:47: dd:1b:dd:f9:7b:bb:51:0c:9c:a5:13:f1:b4:d8:ca:f4:9a:fd: 22:c1:3c:cb:d5:99:4d:6b:7f:1a:c5:af:f8:eb:57:75:e1:f5: 05:c9:9b:29:aa:08:f8:ea:d7:90:b7:5e:44:fe:18:46:40:ab: c2:cf:91:f0:f8:15:39:71:07:a9:d3:0b:16:dd:4c:11:f0:33: a8:94:fd:e8:f9:ee:fa:23:c0:02:e0:64:35:b3:73:3d:ee:08: 37:67:a4:20:3b:16:84:c1:04:ad:e6:5b:14:e6:27:b1:5a:0f: 3e:40:02:2f:1b:ab:f4:02:dd:0b:2a:ff:54:04:98:03:12:ac: ad:64:b7:a7:a4:e7:77:a2:72:dc:6d:ef:94:46:f5:c8:7a:a9: d3:3b:63:83:e8:8a:00:d7:5e:4c:91:14:00:a1:25:3c:cb:95: 38:cd:64:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g+XvfPPoNZmOuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk N2U5ZjJkNzQtMzU3Yy00ZDg2LTg5YzktYjEwNTMwZDgwNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1yT3HXinRwXqfhCfw/GVVSdsOxN5AGSWaun R4sT8YzBXftSDTyqMHw3g31i6LkQI0cePjEbjVPtpRSgw6fnkyXYckgZ6xPelJ8/ Xv8IXSJTiHZsdNpMujH3GO9x2i0r3mUKXzMShxSBXG3GDx+J0VKn4RLE4EQjnn/F XfwC1yRfskVRyALLojD9JU9tJFVFOVE/DF/jp8EP8IqrwjWz9T0eV03BFxI3ZqF5 cec/9An+dW2w/eKXCxefbLX4a8T2STtMqPcvM6rpfM3ATnF5Tsz/cxqPHpPEkn8n UqcANjlm4Qg5KbPqHRvaHJOZE38tdLFBMPRsMjz73JTWlHN7cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkyVmS6icGTbZO3p4uwf0fBHb06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvODgyODRjODAtNDA4MC0z NzQwLWExZDYtOGRmNzg2Y2VjNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXW1D23hlgK2pR5Hy2JaIL7UfLqHoqcSIV6A0u+MMxIxQpvBnknaX2R KvRgW8kjACACzm8dQIesJXTQN5sWHMmXO89jsjz7KEICu9dHK+SFaggX+IcGBjpo R90b3fl7u1EMnKUT8bTYyvSa/SLBPMvVmU1rfxrFr/jrV3Xh9QXJmymqCPjq15C3 XkT+GEZAq8LPkfD4FTlxB6nTCxbdTBHwM6iU/ej57vojwALgZDWzcz3uCDdnpCA7 FoTBBK3mWxTmJ7FaDz5AAi8bq/QC3Qsq/1QEmAMSrK1kt6ek53eictxt75RG9ch6 qdM7Y4PoigDXXkyRFAChJTzLlTjNZE4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:33 2025 by rpki-client