$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa File: 94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa (raw, json) Hash identifier: zydO2nzoX18k8/n0oI+IkhgpE4mytO4OISp7WlelBvM= Subject key identifier: D1:F1:3A:93:0C:C6:EE:21:5C:01:DD:0F:6E:7B:21:87:FB:F4:D4:6A Certificate issuer: /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78 Certificate serial: 010D0C9F4328584B7DECC4E32D9B8BA59C34E800 Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 26938 IP address blocks: 199.47.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c4:e3:2d:9b:8b:a5:9c:34:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=a21d7d64-b152-48f3-aeae-0b740dfc51b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:f0:06:0c:e7:0c:29:e6:ea:30:b0:53:3a: d0:39:a7:7a:bc:c0:1d:20:8d:42:d9:38:1f:f2:7c: 3a:ed:e6:3e:18:75:f6:2b:8d:cd:ad:c7:19:bf:f4: d7:de:d8:c1:2e:cd:8d:61:82:95:10:fb:ef:c2:e2: 27:02:0e:36:e6:6c:0a:67:a9:7f:7e:e4:9c:3f:a6: 0d:ab:cc:b3:39:9c:f4:8d:8e:16:ca:8e:fc:0e:4c: 85:3e:bb:4c:15:92:eb:17:fc:11:1a:4f:54:81:ad: e0:f9:3a:0d:15:50:3e:a5:2a:68:43:b8:58:be:9a: bf:cb:63:40:90:44:44:31:4c:7b:b5:64:c9:70:6f: c4:9f:2c:d1:a1:12:f1:b6:a7:38:92:9b:40:78:c6: c7:b3:36:f4:96:d9:9c:ad:a5:33:12:14:78:66:ad: a7:31:19:7d:f2:6d:a0:c1:68:2c:9d:48:d0:c0:45: 3a:7b:15:1a:2b:e8:3d:68:35:ed:bb:e0:1d:db:95: b1:0a:64:ac:52:08:e4:36:7d:29:e7:f6:c6:91:de: e9:3c:2d:eb:87:c6:77:fa:da:57:7c:85:74:49:4a: 53:37:5e:98:14:48:86:9c:ee:53:b6:f5:28:54:96: 23:55:20:d4:3b:26:e9:78:6d:35:29:02:a7:aa:8f: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:3A:93:0C:C6:EE:21:5C:01:DD:0F:6E:7B:21:87:FB:F4:D4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl X509v3 Authority Key Identifier: keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer sbgp-ipAddrBlock: critical IPv4: 199.47.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:6b:97:03:81:db:63:04:10:4d:0c:32:20:b9:ba:46:20:e0: a3:68:0e:48:6e:98:e3:a9:c4:43:15:97:d0:ca:ce:92:0d:c5: e4:46:70:b6:fe:4a:1b:e5:1d:5e:c5:c6:82:ac:e1:fa:7e:87: 4e:5d:8a:0d:cf:f7:86:1b:ef:7c:80:7e:71:d2:2d:18:f7:34: 33:02:51:2a:94:bc:23:d4:f1:88:30:9c:4c:44:5b:cb:fb:59: 19:61:66:54:94:22:da:0b:e0:85:d1:46:56:b6:e1:67:59:10: a9:39:05:cf:2f:fc:ff:fe:91:9a:90:b9:64:67:3e:24:95:2a: 7f:0a:08:3e:3f:56:e1:57:22:fe:3d:17:3c:e4:5d:12:70:12: c6:68:d6:bc:38:cc:aa:a7:25:c6:77:3c:63:3b:78:dd:87:f1: 7e:a7:3c:3b:6f:78:a1:d5:9c:38:01:72:e4:8b:ea:76:58:d8: 94:74:36:9a:6a:c4:ef:ab:60:b4:a5:24:eb:5f:ec:b9:3a:aa: 5a:0d:d1:61:14:98:a2:ab:8a:d8:19:7a:2c:ed:64:27:ee:70: 27:d6:96:dc:64:6c:a7:b3:d6:bf:9f:4d:af:5c:92:9b:04:df: ac:e5:86:fe:77:91:38:88:7c:9c:f7:d7:48:20:b5:a7:ff:b5: 27:75:37:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MTjLZuLpZw06AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk2YzFhNWEtNWI2NC00MzBhLThhZWEtYzU2ZDBjMzUw Yzc4MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YTIxZDdkNjQtYjE1Mi00OGYzLWFlYWUtMGI3NDBkZmM1MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWDwBgznDCnm6jCwUzrQOad6vMAdII1C2Tgf 8nw67eY+GHX2K43NrccZv/TX3tjBLs2NYYKVEPvvwuInAg425mwKZ6l/fuScP6YN q8yzOZz0jY4Wyo78DkyFPrtMFZLrF/wRGk9Uga3g+ToNFVA+pSpoQ7hYvpq/y2NA kEREMUx7tWTJcG/EnyzRoRLxtqc4kptAeMbHszb0ltmcraUzEhR4Zq2nMRl98m2g wWgsnUjQwEU6exUaK+g9aDXtu+Ad25WxCmSsUgjkNn0p5/bGkd7pPC3rh8Z3+tpX fIV0SUpTN16YFEiGnO5TtvUoVJYjVSDUOybpeG01KQKnqo832wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHxOpMMxu4hXAHdD257IYf79NRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTZj MWE1YS01YjY0LTQzMGEtOGFlYS1jNTZkMGMzNTBjNzgvOTRkZDFkOWYtMzQ4MC0z MGNlLTkxZjktMGIyNDNlNGNlYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDk2YzFhNWEtNWI2NC00MzBhLThh ZWEtYzU2ZDBjMzUwYzc4LzQ5NmMxYTVhLTViNjQtNDMwYS04YWVhLWM1NmQwYzM1 MGM3OC5jcmwwHwYDVR0jBBgwFoAUuQ9Gxm+I6AlD2Ns0Y/AbmsKOHAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTZjMWE1YS01YjY0LTQzMGEtOGFlYS1jNTZk MGMzNTBjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhrlwOB22MEEE0MMiC5ukYg4KNoDkhumOOpxEMVl9DKzpINxeRGcLb+ ShvlHV7FxoKs4fp+h05dig3P94Yb73yAfnHSLRj3NDMCUSqUvCPU8YgwnExEW8v7 WRlhZlSUItoL4IXRRla24WdZEKk5Bc8v/P/+kZqQuWRnPiSVKn8KCD4/VuFXIv49 FzzkXRJwEsZo1rw4zKqnJcZ3PGM7eN2H8X6nPDtveKHVnDgBcuSL6nZY2JR0Nppq xO+rYLSlJOtf7Lk6qloN0WEUmKKritgZeiztZCfucCfWltxkbKez1r+fTa9ckpsE 36zlhv53kTiIfJz310ggtaf/tSd1N1A= -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:08 2025 by rpki-client