$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa File: 8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa (raw, json) Hash identifier: 1NRGU+njV/4QLLEim+AtWLEP0UVsYgZdy20Ton4LLNI= Subject key identifier: 5D:F1:20:3C:4E:F1:A3:2C:E4:FD:13:DF:C6:BE:A2:F8:F3:24:BE:9C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B87B2200294905C1C651830C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 199.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:20:02:94:90:5c:1c:65:18:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=2f30687f-f5f8-4e68-a2a2-d33a419ef918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:3a:05:de:e4:51:2b:e2:67:c3:aa:2c:dc: d5:54:56:6f:cf:b0:44:bc:cb:43:02:93:28:f5:a0: 81:ec:47:a1:60:da:af:4f:e4:9f:05:db:7f:95:32: d9:04:05:78:20:c6:a9:01:14:4a:a5:7e:ea:7a:88: 37:64:27:68:27:5b:c4:6d:33:4a:2e:2a:7c:36:7e: a4:75:74:64:83:f1:6a:36:94:b0:4e:65:df:f9:e3: d6:ac:72:c0:66:1f:ac:b5:c0:3d:9e:0b:76:5e:06: ae:4b:7b:5a:18:54:70:2b:55:39:bb:fb:76:48:19: 39:ef:e1:66:b0:26:1b:18:8d:17:b1:8d:af:5a:35: a8:e7:34:0a:36:f7:47:3c:d1:55:21:28:f5:03:4a: 42:bb:9e:f2:43:65:12:d5:ee:ca:22:99:7f:7d:e4: 86:d3:ef:1e:16:86:e3:3f:2d:63:b1:86:b5:ef:e5: a0:6c:18:16:4c:c7:48:33:c8:cf:3a:33:88:fd:2c: 8f:f0:09:fd:34:c4:6d:25:ed:da:b5:24:8a:80:f0: 80:4d:c8:f6:1f:bb:58:46:ba:76:3c:bd:d7:88:61: f4:99:1b:bd:f1:00:cd:27:9e:97:a6:1a:73:10:05: 69:44:ae:d3:3f:6d:1a:f0:cc:18:d2:a7:bd:2b:47: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:20:3C:4E:F1:A3:2C:E4:FD:13:DF:C6:BE:A2:F8:F3:24:BE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:07:d3:15:03:bb:1f:4f:69:dd:af:0a:4b:67:a3:90:18:b6: 62:e6:d7:f1:c2:1c:82:3b:f5:c8:75:18:35:d5:ed:ad:b8:cb: 19:18:3d:28:b8:81:9e:db:53:58:0f:08:5f:45:42:ec:fe:c2: cb:60:f9:84:d6:c7:79:4d:2c:79:9f:ba:d9:d3:f2:32:d7:c3: e9:e5:95:ec:9e:bd:34:c5:74:5b:14:7a:cb:2b:61:21:bd:07: 20:f0:dc:e7:0f:b5:5e:c0:b6:20:71:79:cc:a1:8e:4e:c2:e3: a3:4d:06:4c:58:3f:ab:9a:48:93:23:e6:f5:aa:3d:57:31:2c: d8:7a:f2:3d:6c:35:97:58:78:ec:49:6f:14:56:75:ad:5e:ff: 53:61:45:7b:d1:e7:c0:7d:76:dc:a5:dd:6b:5b:c5:9e:12:e4: 0a:09:3f:5f:9b:95:a6:bd:c6:5f:10:d4:6e:7a:fd:ed:9c:33: 53:39:98:4f:b0:33:b3:70:51:25:72:9a:ff:d3:e7:d0:5f:0c: 55:8a:6b:1b:07:6d:e9:9e:ac:28:89:d8:04:76:69:1c:b2:9a: f8:7e:e5:1e:71:ae:77:e2:c5:16:c2:12:5e:8f:e8:25:c3:7c: 0c:e1:4e:60:2c:93:39:b1:23:1d:10:62:43:cd:da:d8:75:95: 4c:65:8d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiAClJBcHGUYMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MmYzMDY4N2YtZjVmOC00ZTY4LWEyYTItZDMzYTQxOWVmOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03k6Bd7kUSviZ8OqLNzVVFZvz7BEvMtDApMo 9aCB7EehYNqvT+SfBdt/lTLZBAV4IMapARRKpX7qeog3ZCdoJ1vEbTNKLip8Nn6k dXRkg/FqNpSwTmXf+ePWrHLAZh+stcA9ngt2XgauS3taGFRwK1U5u/t2SBk57+Fm sCYbGI0XsY2vWjWo5zQKNvdHPNFVISj1A0pCu57yQ2US1e7KIpl/feSG0+8eFobj Py1jsYa17+WgbBgWTMdIM8jPOjOI/SyP8An9NMRtJe3atSSKgPCATcj2H7tYRrp2 PL3XiGH0mRu98QDNJ56XphpzEAVpRK7TP20a8MwY0qe9K0eIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3xIDxO8aMs5P0T38a+ovjzJL6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGI2N2IzYzUtYTFjNC0z M2FmLTlkNzctNDIzNDliNGM2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxyNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcH0xUDux9Pad2vCktno5AYtmLm1/HCHII79ch1GDXV7a24yxkYPSi4 gZ7bU1gPCF9FQuz+wstg+YTWx3lNLHmfutnT8jLXw+nlleyevTTFdFsUessrYSG9 ByDw3OcPtV7AtiBxecyhjk7C46NNBkxYP6uaSJMj5vWqPVcxLNh68j1sNZdYeOxJ bxRWda1e/1NhRXvR58B9dtyl3WtbxZ4S5AoJP1+blaa9xl8Q1G56/e2cM1M5mE+w M7NwUSVymv/T59BfDFWKaxsHbemerCiJ2AR2aRyymvh+5R5xrnfixRbCEl6P6CXD fAzhTmAskzmxIx0QYkPN2th1lUxljUo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:30:23 2025 by rpki-client