$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa File: 12c8b264-052f-356f-a94d-718e65321e32.roa (raw, json) Hash identifier: BveWGXrDp0fsCT0yFEnj+uDF95YLsB2DY51bmwHoWD4= Subject key identifier: A6:FC:A4:1B:93:5E:E4:1D:39:A8:A5:B0:10:22:62:A0:CE:12:72:A2 Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F4328584B821CBD899BA999E137EA0100 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14007 IP address blocks: 199.101.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bd:89:9b:a9:99:e1:37:ea:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9847ae5a-9c46-4de7-8e66-036a60f3490b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:1e:0b:22:86:a8:95:b1:48:61:d5:9b:95: 59:65:54:5f:12:d9:c4:3e:65:1d:8c:f0:ec:91:8f: af:f6:4c:5f:f0:f7:e3:86:fd:53:cc:52:1b:24:64: 0c:1b:67:17:63:a4:9c:4e:73:3f:b7:72:5b:54:57: fa:83:47:0f:f1:a5:19:99:ba:4d:b7:94:83:df:8e: c8:12:30:de:d3:03:f7:f8:7f:56:c2:df:fb:c6:f8: 52:33:33:68:2c:6b:d6:77:6d:22:8d:cc:c9:27:db: 4c:6d:fe:f7:76:bc:81:0d:9f:31:83:bd:3b:54:06: cd:28:50:85:aa:e7:80:23:45:aa:7d:a3:5e:6a:19: bd:10:59:e8:6a:1e:18:27:c8:6f:8c:10:59:25:2a: 3c:c7:21:b2:ce:cc:54:a1:ce:6e:6e:07:43:bd:ae: a0:0c:d4:7f:99:8d:4f:27:57:e8:23:ee:a3:3a:e5: a5:59:30:41:fb:6a:78:08:d4:2c:0e:a9:72:5c:b8: a5:35:1f:ba:e3:80:30:8d:78:57:2a:d5:f4:40:d8: 43:bd:d0:05:b2:77:40:34:94:f8:39:4a:fc:74:06: 47:46:1f:b1:d6:ac:d7:ec:ed:2c:6b:e8:e8:3b:af: 2e:27:55:69:11:6d:84:c6:79:41:59:23:51:2b:7b: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:A4:1B:93:5E:E4:1D:39:A8:A5:B0:10:22:62:A0:CE:12:72:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv4: 199.101.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:aa:70:49:d9:0e:d1:45:d8:f6:5d:63:c0:c4:53:96:ba:21: 99:34:4f:11:a5:b0:a1:74:0a:d7:0b:ff:6e:06:d9:03:1a:e5: 69:63:97:7e:9e:a4:db:5d:4f:8f:a5:4e:a3:f0:1d:ce:5f:ae: 88:2e:ea:74:f8:c8:e6:f4:31:57:94:c5:80:4c:12:9a:9b:c4: 3c:8b:e2:fb:44:56:40:3e:9b:de:64:28:45:43:d8:17:ba:65: c8:8c:a4:3e:6c:60:c3:e8:f2:09:0b:64:40:25:2b:bd:97:d8: d0:0f:ad:41:f9:56:f5:90:76:54:2b:65:7b:36:c4:0b:16:7d: 63:f7:32:37:27:53:9a:71:a5:d0:7e:eb:08:e6:6a:28:dd:68: 82:71:65:e8:54:e1:1f:3e:12:01:59:dc:aa:5f:c4:2f:61:21: c5:b1:c4:88:6c:fa:6f:62:a3:a8:c7:db:c1:7b:1b:96:ee:c4: 40:54:d9:ab:2d:f2:fa:81:fd:f4:93:4b:ef:83:26:3a:58:ed: 3a:fc:9f:fa:85:5e:70:5a:4e:b2:21:25:84:21:b4:db:ad:25: 1e:17:ee:4d:d2:66:8d:4f:cf:1a:01:a1:98:81:f2:7a:30:cd: 56:93:f9:99:ea:37:e4:7d:43:21:2a:42:24:22:58:10:bf:79: a4:0a:b5:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHL2Jm6mZ4TfqAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTg0N2FlNWEtOWM0Ni00ZGU3LThlNjYtMDM2YTYwZjM0OTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq4eCyKGqJWxSGHVm5VZZVRfEtnEPmUdjPDs kY+v9kxf8Pfjhv1TzFIbJGQMG2cXY6ScTnM/t3JbVFf6g0cP8aUZmbpNt5SD347I EjDe0wP3+H9Wwt/7xvhSMzNoLGvWd20ijczJJ9tMbf73dryBDZ8xg707VAbNKFCF queAI0WqfaNeahm9EFnoah4YJ8hvjBBZJSo8xyGyzsxUoc5ubgdDva6gDNR/mY1P J1foI+6jOuWlWTBB+2p4CNQsDqlyXLilNR+644AwjXhXKtX0QNhDvdAFsndANJT4 OUr8dAZHRh+x1qzX7O0sa+joO68uJ1VpEW2ExnlBWSNRK3topwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb8pBuTXuQdOailsBAiYqDOEnKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvMTJjOGIyNjQtMDUyZi0z NTZmLWE5NGQtNzE4ZTY1MzIxZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSqcEnZDtFF2PZdY8DEU5a6IZk0TxGlsKF0CtcL/24G2QMa5Wljl36e pNtdT4+lTqPwHc5frogu6nT4yOb0MVeUxYBMEpqbxDyL4vtEVkA+m95kKEVD2Be6 ZciMpD5sYMPo8gkLZEAlK72X2NAPrUH5VvWQdlQrZXs2xAsWfWP3MjcnU5pxpdB+ 6wjmaijdaIJxZehU4R8+EgFZ3KpfxC9hIcWxxIhs+m9io6jH28F7G5buxEBU2ast 8vqB/fSTS++DJjpY7Tr8n/qFXnBaTrIhJYQhtNutJR4X7k3SZo1PzxoBoZiB8now zVaT+ZnqN+R9QyEqQiQiWBC/eaQKtV4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:47 2025 by rpki-client