$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa File: bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa (raw, json) Hash identifier: yv3Dd1U+/OZuTq9MofabopGf7P6BWmlGpH3ynIvIamA= Subject key identifier: 47:A8:8A:29:79:9F:99:E6:89:8E:AF:42:05:23:DA:3B:21:B4:A7:51 Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Certificate serial: 010D0C9F4328584B67973EFF353694387A93D1B0 Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 28931 IP address blocks: 199.201.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3e:ff:35:36:94:38:7a:93:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9aefb555-4136-4b5c-b697-8f0f1a660244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:97:5b:d6:13:bb:34:b2:87:45:34:b6:cb: d3:6f:3c:e9:3f:b8:99:81:d8:a6:4c:31:64:01:19: 93:e4:28:0f:d6:4a:7d:25:97:05:e2:2b:2d:a3:5d: d1:42:be:9a:b9:c1:56:10:a4:5d:0c:b7:e6:f2:dd: e3:8c:f1:5d:72:c6:c4:cd:33:00:ef:b3:e2:34:6a: 1d:46:08:ea:3b:23:be:3d:ab:76:69:c1:15:ee:f2: 08:02:9d:ce:7e:32:fc:b0:ea:03:ba:15:a4:04:62: f7:16:25:07:39:5f:39:58:75:e8:ff:12:1a:62:0c: 10:38:ee:d3:ae:1f:fb:e8:8d:66:6e:ac:4a:b8:e1: 33:2e:7b:85:15:7c:b3:7c:34:9c:10:1e:ac:9d:7c: 8b:d8:ac:27:06:0c:99:6f:98:27:13:2b:6d:5e:a4: cd:a5:75:33:93:23:0e:2e:43:c8:88:60:d0:57:1c: f6:f3:79:14:e9:54:6f:97:05:78:6e:74:60:4a:93: 18:74:5c:36:ea:4c:1e:6a:f8:a6:89:88:d2:a9:c4: a3:04:6e:35:98:59:9f:7d:e0:7c:3a:a3:05:86:ac: 49:23:2c:24:12:c9:9b:b3:d8:5e:53:9d:3b:fc:17: c2:48:95:ce:cd:b2:a3:bf:7c:aa:81:06:c1:72:4f: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A8:8A:29:79:9F:99:E6:89:8E:AF:42:05:23:DA:3B:21:B4:A7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl X509v3 Authority Key Identifier: keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer sbgp-ipAddrBlock: critical IPv4: 199.201.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8d:67:9c:28:7c:d1:0e:4a:fa:df:07:16:6b:b7:d2:6a:ce: 75:a4:46:41:46:f2:c5:41:1e:de:f8:3a:5f:08:99:b3:68:a1: 42:38:c2:01:90:fb:fb:02:b6:27:f6:45:7f:65:91:01:9b:9d: 63:d0:b2:7a:e5:e5:47:7d:2e:11:c7:e9:de:95:09:0a:ff:98: 10:af:fd:1f:73:47:f1:bc:97:a5:de:88:09:b1:50:d5:1e:bc: 15:19:f9:f0:d4:d7:51:0c:65:fc:ad:af:72:aa:dd:64:fb:5f: a0:eb:7d:66:1b:cc:3f:51:0b:6f:82:c1:5c:72:58:5a:80:e1: 49:f5:a6:1e:e7:c5:8c:18:eb:a4:13:02:7a:d7:a2:85:e9:a7: 53:d4:df:35:a5:be:04:b0:19:a2:4b:3d:7c:f4:a6:cf:c9:da: 80:7d:a4:1f:f7:43:b3:82:00:c4:d1:37:fb:02:52:b8:ff:cd: 86:86:ee:ff:88:e2:ef:a1:ee:e9:3f:4a:a7:a4:2f:09:85:8f: b9:c4:ed:af:b8:65:5b:9e:96:a5:a0:37:c0:ca:d2:f8:25:14: c9:2e:d0:2a:c3:46:bd:c9:42:a0:74:de:6f:05:17:81:9c:26: b1:71:b6:97:87:f4:b1:a1:87:32:f5:95:45:e8:6d:f0:84:5e: d4:15:df:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlz7/NTaUOHqT0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy YWEyMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWFlZmI1NTUtNDEzNi00YjVjLWI2OTctOGYwZjFhNjYwMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3uXW9YTuzSyh0U0tsvTbzzpP7iZgdimTDFk ARmT5CgP1kp9JZcF4isto13RQr6aucFWEKRdDLfm8t3jjPFdcsbEzTMA77PiNGod RgjqOyO+Pat2acEV7vIIAp3OfjL8sOoDuhWkBGL3FiUHOV85WHXo/xIaYgwQOO7T rh/76I1mbqxKuOEzLnuFFXyzfDScEB6snXyL2KwnBgyZb5gnEyttXqTNpXUzkyMO LkPIiGDQVxz283kU6VRvlwV4bnRgSpMYdFw26kweavimiYjSqcSjBG41mFmffeB8 OqMFhqxJIywkEsmbs9heU507/BfCSJXOzbKjv3yqgQbBck/VMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeoiil5n5nmiY6vQgUj2jshtKdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYmZmNTliMmEtYjdlOC0z M2YwLThkNTUtNzJhMTg2OWUxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1 OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0 MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4 ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFONZ5wofNEOSvrfBxZrt9JqznWkRkFG8sVBHt74Ol8ImbNooUI4wgGQ +/sCtif2RX9lkQGbnWPQsnrl5Ud9LhHH6d6VCQr/mBCv/R9zR/G8l6XeiAmxUNUe vBUZ+fDU11EMZfytr3Kq3WT7X6DrfWYbzD9RC2+CwVxyWFqA4Un1ph7nxYwY66QT AnrXooXpp1PU3zWlvgSwGaJLPXz0ps/J2oB9pB/3Q7OCAMTRN/sCUrj/zYaG7v+I 4u+h7uk/SqekLwmFj7nE7a+4ZVuelqWgN8DK0vglFMku0CrDRr3JQqB03m8FF4Gc JrFxtpeH9LGhhzL1lUXobfCEXtQV3/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:18 2025 by rpki-client