$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa File: 14a64848-7c79-3fb9-8ab0-2b575e721f30.roa (raw, json) Hash identifier: uw7I0nhR3TC+3ZOG/O/jwHNRcGC23STZwDe/l6FEies= Subject key identifier: A8:93:3F:05:6E:0A:31:5E:52:9F:39:73:D1:BD:16:1A:0B:68:1D:FA Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584B8A7CD620198C0BBBDB5D5380 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 400400 IP address blocks: 199.250.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d6:20:19:8c:0b:bb:db:5d:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=f9130f29-f25e-484d-887b-96dc9fef57cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:80:b3:46:77:ea:11:ef:aa:6b:ba:27:cf: a1:e7:97:62:21:ac:06:c9:58:1e:67:55:b6:cc:9c: 17:40:04:a9:4c:b6:53:b8:2b:03:ec:86:4d:6b:17: 57:e9:53:18:f0:f8:d8:48:f6:cb:f3:31:75:12:eb: 33:dc:60:ca:af:32:5f:fb:7b:c5:29:bb:cb:22:88: 7d:d3:3f:fd:88:8b:f2:bf:e4:fb:f5:7a:5f:a4:34: 7e:d9:7b:64:04:9b:c2:09:85:3d:02:43:0a:f3:d6: 49:63:eb:17:cb:ef:6e:14:3c:3a:76:f2:3d:80:e7: 34:91:4d:50:d9:b9:96:08:5e:bc:28:e9:7e:c8:0c: e6:4a:c3:3d:17:45:37:2c:52:3b:bc:ae:40:c0:fd: a3:bc:8c:2a:f2:58:c1:5d:42:17:c4:34:22:42:5a: 5d:c0:8a:ac:69:f3:0f:a3:9d:d6:27:27:38:ba:9d: 6a:3b:10:4e:11:a7:67:d3:dd:f3:2b:27:cc:53:5c: d5:18:51:46:42:80:c0:30:75:53:08:40:68:44:01: ac:cf:78:fb:c3:41:db:77:0e:c4:9b:97:9c:d6:65: 80:7a:c5:47:91:f9:5c:25:83:9c:25:38:eb:bd:d6: a9:15:5f:a0:44:42:6e:fe:05:cb:b1:6a:7c:df:04: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:93:3F:05:6E:0A:31:5E:52:9F:39:73:D1:BD:16:1A:0B:68:1D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 199.250.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6c:3e:57:1a:77:37:a9:c9:39:63:ee:b1:6e:cc:57:71:a5: 6b:ad:9b:9e:cf:1f:bc:42:aa:21:00:38:55:39:3b:19:f1:81: 1e:25:cf:eb:84:d9:e5:32:a2:05:2d:1b:82:07:a5:24:59:60: d3:7b:be:4e:45:6c:53:74:29:6d:71:ab:bb:3b:03:84:74:25: e5:01:91:7f:ff:f5:2a:97:1e:dd:bd:20:df:b2:09:4d:0f:7d: 90:78:1a:a2:f4:5d:fe:76:e7:c5:63:f5:f5:df:29:9d:25:be: 0d:ec:dc:25:0b:3b:03:5b:55:9b:22:19:5d:49:28:51:67:8b: 64:10:67:6a:c6:e8:da:6d:43:3b:c5:18:45:7a:11:43:be:37: ba:27:4a:4f:de:c1:50:ff:3d:42:9f:f6:ac:53:68:98:1e:ef: 93:88:80:ee:4f:49:88:b4:fb:82:67:10:f4:51:ee:50:25:6c: cf:8e:e6:20:d2:0c:75:7a:ab:3b:b6:67:19:53:70:f2:0b:6f: 53:45:8c:06:75:c0:41:98:9a:d1:6b:1c:14:44:62:66:91:f8: ea:c0:66:0a:6e:8e:97:11:6e:59:73:e7:e2:2d:5c:3d:9f:49: 8b:68:ac:97:55:ff:3e:cb:54:d9:9e:aa:2c:62:97:02:4e:99: f0:82:91:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNYgGYwLu9tdU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjkxMzBmMjktZjI1ZS00ODRkLTg4N2ItOTZkYzlmZWY1N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuAs0Z36hHvqmu6J8+h55diIawGyVgeZ1W2 zJwXQASpTLZTuCsD7IZNaxdX6VMY8PjYSPbL8zF1Eusz3GDKrzJf+3vFKbvLIoh9 0z/9iIvyv+T79XpfpDR+2XtkBJvCCYU9AkMK89ZJY+sXy+9uFDw6dvI9gOc0kU1Q 2bmWCF68KOl+yAzmSsM9F0U3LFI7vK5AwP2jvIwq8ljBXUIXxDQiQlpdwIqsafMP o53WJyc4up1qOxBOEadn093zKyfMU1zVGFFGQoDAMHVTCEBoRAGsz3j7w0Hbdw7E m5ec1mWAesVHkflcJYOcJTjrvdapFV+gREJu/gXLsWp83wSkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiTPwVuCjFeUp85c9G9FhoLaB36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMTRhNjQ4NDgtN2M3OS0z ZmI5LThhYjAtMmI1NzVlNzIxZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFsPlcadzepyTlj7rFuzFdxpWutm57PH7xCqiEAOFU5OxnxgR4lz+uE 2eUyogUtG4IHpSRZYNN7vk5FbFN0KW1xq7s7A4R0JeUBkX//9SqXHt29IN+yCU0P fZB4GqL0Xf5258Vj9fXfKZ0lvg3s3CULOwNbVZsiGV1JKFFni2QQZ2rG6NptQzvF GEV6EUO+N7onSk/ewVD/PUKf9qxTaJge75OIgO5PSYi0+4JnEPRR7lAlbM+O5iDS DHV6qzu2ZxlTcPILb1NFjAZ1wEGYmtFrHBREYmaR+OrAZgpujpcRbllz5+ItXD2f SYtorJdV/z7LVNmeqixilwJOmfCCkSk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:08 2025 by rpki-client