$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa File: d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa (raw, json) Hash identifier: YtHYbal4zVfTjCbTUYT04iKbLxRu5+hHa7JLg2oMqcU= Subject key identifier: 2C:3F:EA:82:59:5E:92:65:07:D8:15:35:68:CC:68:E8:A4:12:9C:46 Certificate issuer: /CN=2d723287-d624-4178-939e-a7d8be3facc5 Certificate serial: 010D0C9F4328584B80B75D41C1C39FDBDFE88680 Authority key identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 49544 IP address blocks: 199.27.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5d:41:c1:c3:9f:db:df:e8:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d723287-d624-4178-939e-a7d8be3facc5 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=cf95629f-9541-41ae-9545-2e5a9b96d5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:02:3a:3e:fa:3a:75:5e:69:28:73:24:49: 40:da:09:e6:59:77:dd:f8:93:93:2a:f0:27:ca:39: 88:41:df:a7:48:a6:c4:8a:f3:1c:a8:a1:e9:38:78: 98:c0:80:c3:0d:33:ba:5a:eb:ef:79:08:b3:b5:d0: 94:d9:60:6e:ff:4d:a5:f0:1d:08:d6:f5:1c:15:9d: 85:a5:8e:05:0b:55:e2:58:79:eb:08:43:3e:f8:9e: de:bd:d5:d8:3c:52:5b:be:f9:7d:ed:33:4a:65:89: d2:98:ac:c7:ef:82:fa:4c:fa:53:30:63:9e:3d:65: 2d:5d:15:78:a5:fa:d2:80:4d:57:25:11:ad:85:a7: 1c:36:28:95:e5:19:7a:1a:9f:9b:c2:cc:b3:d7:10: c7:95:45:b6:d0:a4:9e:18:e2:56:a0:02:03:52:bc: 98:3c:ca:ec:ad:d1:0c:d8:03:1a:b7:f5:91:1d:c1: 90:a0:b9:7f:34:12:68:47:4f:07:08:6c:7d:34:d4: 19:56:de:22:da:a0:f0:3d:6b:a9:8c:8f:61:4c:0a: 93:9a:48:68:84:15:98:8f:a6:95:3f:a5:eb:84:75: b0:4b:61:95:07:5a:cb:cd:d7:dc:48:d8:82:66:e5: 79:58:f1:bb:a6:38:0f:09:3b:19:f1:4d:77:5d:06: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3F:EA:82:59:5E:92:65:07:D8:15:35:68:CC:68:E8:A4:12:9C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl X509v3 Authority Key Identifier: keyid:60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer sbgp-ipAddrBlock: critical IPv4: 199.27.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fd:61:ae:2b:3f:0c:2a:4d:0a:9a:dc:fd:64:69:b0:dd:4b: d9:51:dc:2d:73:6f:ab:91:e6:cd:d8:26:28:22:4c:35:c7:76: 69:7c:0e:17:44:53:28:50:13:aa:e6:5b:7b:58:fa:4a:bb:d6: 28:e7:e6:9d:f3:88:db:0f:d0:15:a2:80:31:ba:b4:71:f3:b5: 33:7f:bf:3a:5d:34:51:5d:cb:4b:6c:7e:51:44:fc:a9:da:a8: 21:24:76:ad:14:5b:28:a5:53:67:2c:d6:bd:fb:e8:72:e1:76: cb:d4:90:3c:2b:8e:b9:97:df:70:58:b2:46:ad:84:76:47:51: 9a:54:1e:d3:75:a5:10:be:f9:15:23:d1:1e:fb:97:33:b0:9a: eb:69:cd:d2:f4:2c:03:ef:49:e4:c6:e3:25:1a:e8:6e:ac:af: 28:13:91:1d:c7:6f:2b:7f:47:8c:be:0e:68:dd:1b:bb:d8:c5: e6:66:1c:80:08:69:84:f1:7d:34:64:1f:c2:75:65:01:1d:df: e2:d7:44:63:28:b9:a9:a4:06:67:42:c5:d1:88:5f:a9:c6:49: e7:42:5b:7e:88:3f:e7:36:12:9b:dc:4f:1a:7e:ed:ab:57:e4: 17:fa:08:05:d4:c1:d0:2c:b9:cc:73:45:46:84:45:8e:fa:f0: 10:1a:9f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt11BwcOf29/ohoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ3MjMyODctZDYyNC00MTc4LTkzOWUtYTdkOGJlM2Zh Y2M1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Y2Y5NTYyOWYtOTU0MS00MWFlLTk1NDUtMmU1YTliOTZkNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih4COj76OnVeaShzJElA2gnmWXfd+JOTKvAn yjmIQd+nSKbEivMcqKHpOHiYwIDDDTO6WuvveQiztdCU2WBu/02l8B0I1vUcFZ2F pY4FC1XiWHnrCEM++J7evdXYPFJbvvl97TNKZYnSmKzH74L6TPpTMGOePWUtXRV4 pfrSgE1XJRGthaccNiiV5Rl6Gp+bwsyz1xDHlUW20KSeGOJWoAIDUryYPMrsrdEM 2AMat/WRHcGQoLl/NBJoR08HCGx9NNQZVt4i2qDwPWupjI9hTAqTmkhohBWYj6aV P6XrhHWwS2GVB1rLzdfcSNiCZuV5WPG7pjgPCTsZ8U13XQbDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw/6oJZXpJlB9gVNWjMaOikEpxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcy MzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4YmUzZmFjYzUvZDk4OTFiMjYtMWIxYS0z ZGI3LWE1Y2QtNWNiMTliZTgyNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ3MjMyODctZDYyNC00MTc4LTkz OWUtYTdkOGJlM2ZhY2M1LzJkNzIzMjg3LWQ2MjQtNDE3OC05MzllLWE3ZDhiZTNm YWNjNS5jcmwwHwYDVR0jBBgwFoAUYP5Vqphf36l3O/uBP1OeYAqlpdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcyMzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4 YmUzZmFjYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz9Ya4rPwwqTQqa3P1kabDdS9lR3C1zb6uR5s3YJigiTDXHdml8DhdE UyhQE6rmW3tY+kq71ijn5p3ziNsP0BWigDG6tHHztTN/vzpdNFFdy0tsflFE/Kna qCEkdq0UWyilU2cs1r376HLhdsvUkDwrjrmX33BYskathHZHUZpUHtN1pRC++RUj 0R77lzOwmutpzdL0LAPvSeTG4yUa6G6srygTkR3Hbyt/R4y+DmjdG7vYxeZmHIAI aYTxfTRkH8J1ZQEd3+LXRGMouamkBmdCxdGIX6nGSedCW36IP+c2EpvcTxp+7atX 5Bf6CAXUwdAsucxzRUaERY768BAan1o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:21:29 2025 by rpki-client