$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa File: 0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa (raw, json) Hash identifier: 5Pk4H3nezPxzPs2iH9gDDAmg8ws81364x83VVqTUR+g= Subject key identifier: 69:FC:4E:10:4E:35:5C:C4:29:FE:48:1C:C9:71:D1:CF:F8:4E:AA:0E Certificate issuer: /CN=250ff67c-5904-4655-8b50-832a485ad1b8 Certificate serial: 010D0C9F4328584B80B75B09120F9874A26A5606 Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 22483 IP address blocks: 199.247.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5b:09:12:0f:98:74:a2:6a:56:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=d98a8b9d-0540-4e2c-9d31-2b16fadbe555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:c3:50:6c:e6:b4:3b:fd:88:1b:50:b8:a2: 2d:7d:c6:40:55:4c:51:e8:6d:28:65:b8:f8:37:7d: 1d:87:03:a6:e5:f2:82:87:a5:e6:83:5c:26:2d:96: 87:37:d1:95:9b:bd:e2:b0:f9:f4:3f:ff:f1:95:d0: 80:4b:bf:30:2c:88:c8:6c:f3:b3:a9:e4:f4:6c:f9: 9c:1a:2b:1a:8e:a9:6b:27:89:5c:86:0b:a2:72:34: f8:78:2e:1d:c3:bd:4c:99:5f:6d:87:77:27:dd:bc: 57:16:fc:8d:c8:2d:68:fe:1a:3a:fb:79:c2:a6:4c: 7d:99:ed:fa:a0:54:e6:19:c3:d9:ab:f8:6c:a4:e8: 93:ba:d3:61:e6:4d:e5:b8:1e:7b:fb:d8:99:5a:37: 44:c5:28:a2:cb:b3:d9:5e:0a:26:fb:85:5d:a0:74: 55:04:f7:23:9b:e6:dd:eb:c4:5b:94:13:9e:76:d3: 23:dc:a5:ed:90:03:58:01:7a:24:a3:42:af:d1:80: b3:c5:23:ce:97:97:f9:ee:3f:72:7c:5a:4c:24:0d: 44:c7:4f:ec:99:63:1b:4d:0b:d7:be:ce:ae:8f:8a: e1:54:93:30:0f:3d:cf:0d:dd:6e:54:33:4b:8c:8d: f4:bd:a6:3e:9b:f4:d3:70:27:65:37:f6:30:6f:af: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:4E:10:4E:35:5C:C4:29:FE:48:1C:C9:71:D1:CF:F8:4E:AA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl X509v3 Authority Key Identifier: keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer sbgp-ipAddrBlock: critical IPv4: 199.247.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5f:80:41:4a:7b:59:0e:5d:7d:64:2b:ad:28:8e:cc:15:37: f4:2f:90:26:6e:a7:b1:d2:5a:9b:d0:58:17:c7:d4:01:de:f8: 29:e3:84:d3:9c:6a:09:c7:5e:4a:15:2f:6c:89:66:3e:90:76: d8:a8:23:0b:d9:a9:26:9a:5f:78:a8:a1:80:f5:54:9b:8f:d3: 80:8a:63:c7:40:39:4c:82:49:ec:61:a5:62:70:52:96:ab:90: 17:18:0c:53:8c:80:e5:5f:97:73:92:b0:cb:c9:aa:30:54:27: eb:ef:89:b1:dd:46:e7:64:d1:df:ca:37:79:49:7c:f8:b6:78: 89:57:6b:21:0d:7c:ac:bc:fb:27:ef:b9:c6:c3:39:10:cd:6d: e0:ed:b8:82:4d:d0:8e:a7:71:3b:57:40:dc:6b:7a:c1:7e:91: dd:9b:92:f7:19:f4:7b:9e:6d:9b:8c:3b:55:6f:d4:92:a4:17: 07:93:2c:dd:d8:47:71:cd:5b:b3:b9:0b:23:25:2a:b2:1e:d0: e0:76:22:08:e3:1c:e6:75:9e:86:95:82:bc:9a:a4:e3:a0:67: 56:cf:a4:3b:0c:cc:e6:f1:45:d2:a4:6f:fe:fe:71:40:10:d9: 86:72:55:aa:9f:85:8b:0a:31:fe:09:ca:e1:84:ef:84:a7:39: b2:b7:98:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1sJEg+YdKJqVgYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFk MWI4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZDk4YThiOWQtMDU0MC00ZTJjLTlkMzEtMmIxNmZhZGJlNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgLDUGzmtDv9iBtQuKItfcZAVUxR6G0oZbj4 N30dhwOm5fKCh6Xmg1wmLZaHN9GVm73isPn0P//xldCAS78wLIjIbPOzqeT0bPmc GisajqlrJ4lchguicjT4eC4dw71MmV9th3cn3bxXFvyNyC1o/ho6+3nCpkx9me36 oFTmGcPZq/hspOiTutNh5k3luB57+9iZWjdExSiiy7PZXgom+4VdoHRVBPcjm+bd 68RblBOedtMj3KXtkANYAXoko0Kv0YCzxSPOl5f57j9yfFpMJA1Ex0/smWMbTQvX vs6uj4rhVJMwDz3PDd1uVDNLjI30vaY+m/TTcCdlN/Ywb6+0swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn8ThBONVzEKf5IHMlx0c/4TqoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBm ZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvMGI2MDE2MTMtYmIyOS0z ZjdiLTlmZjktODg2ZjBjOWE3ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUwZmY2N2MtNTkwNC00NjU1LThi NTAtODMyYTQ4NWFkMWI4LzI1MGZmNjdjLTU5MDQtNDY1NS04YjUwLTgzMmE0ODVh ZDFiOC5jcmwwHwYDVR0jBBgwFoAU2WxV3mS4zLuq8SxpN5dSmXVVazkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJh NDg1YWQxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/dVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVfgEFKe1kOXX1kK60ojswVN/QvkCZup7HSWpvQWBfH1AHe+CnjhNOc agnHXkoVL2yJZj6QdtioIwvZqSaaX3iooYD1VJuP04CKY8dAOUyCSexhpWJwUpar kBcYDFOMgOVfl3OSsMvJqjBUJ+vvibHdRudk0d/KN3lJfPi2eIlXayENfKy8+yfv ucbDORDNbeDtuIJN0I6ncTtXQNxresF+kd2bkvcZ9HuebZuMO1Vv1JKkFweTLN3Y R3HNW7O5CyMlKrIe0OB2IgjjHOZ1noaVgryapOOgZ1bPpDsMzObxRdKkb/7+cUAQ 2YZyVaqfhYsKMf4JyuGE74SnObK3mKE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:08 2025 by rpki-client