$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa File: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (raw, json) Hash identifier: dL/Z978i5tCWB4h91FdHzjgHqDDmo08w24zC1ZvC9Gg= Subject key identifier: CE:B9:E4:BC:33:0F:8E:1B:4A:0B:45:62:A0:6F:0F:99:07:97:52:C7 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584B821CC3F65369627BF68C4A80 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14525 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c3:f6:53:69:62:7b:f6:8c:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=926cb21c-43e2-41f8-b22e-f2b4dc9a1de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:21:4b:12:b2:34:bb:fe:a5:20:46:b3:d2: 7c:0b:d4:fe:d0:b9:9e:33:43:1b:b5:59:1f:10:8f: ef:a2:58:5d:7b:27:56:40:40:f4:77:63:e5:1b:ab: 29:89:38:6e:fc:68:fe:b6:2f:43:e5:9a:99:a6:6d: 50:a2:7d:10:96:ae:b1:20:79:11:f3:53:51:2e:d1: bd:1f:88:6a:f4:dd:f8:9d:aa:8e:e7:d8:0b:0a:f1: 92:fd:0e:0e:e4:c2:58:de:23:7c:be:78:8b:89:2d: 02:d2:d2:af:db:42:da:2e:54:8b:98:63:d6:15:5f: 16:fc:fe:95:b3:60:56:66:f8:b8:d8:f9:21:6f:0e: 5c:af:44:dc:ad:cd:ac:10:f6:ad:c6:5b:e4:4d:35: 5b:5d:8d:e3:0c:59:6e:fb:9f:ab:42:35:2f:7c:89: 4e:1f:98:b4:c0:3a:ae:31:9e:37:89:f7:97:11:48: 24:a7:53:36:82:aa:0b:ff:90:1f:cd:08:4e:30:d8: 54:88:38:a1:4a:4f:cd:3b:ec:af:eb:95:ea:e6:fa: c6:14:6a:5b:47:c5:e0:56:a5:36:e4:c0:99:7a:c5: f1:bd:5d:a5:22:20:f4:dc:7b:00:93:29:2d:b6:e7: 1a:de:ba:ee:47:93:9e:49:56:bd:05:86:cd:4d:8e: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:E4:BC:33:0F:8E:1B:4A:0B:45:62:A0:6F:0F:99:07:97:52:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a2:6c:0a:3d:3e:85:ac:18:d1:f8:f1:01:1a:be:83:04:f5: 8a:b8:db:0f:dc:6e:c3:45:fa:19:e5:40:c4:e1:fa:41:39:33: c1:bf:d7:fc:77:17:1b:c5:5a:e4:36:b6:3e:f9:bb:06:97:70: f8:9d:ec:5e:1f:e0:91:b4:22:5d:56:cc:2c:f7:eb:99:d8:06: 27:2e:fd:47:35:fc:05:98:2b:fd:5f:92:18:46:a1:c2:8c:ef: bc:8d:4c:a2:52:b3:99:48:f2:0d:f9:54:a5:ee:7f:7a:64:8e: 3e:a7:d6:5f:d0:62:98:b4:03:b8:37:5a:d4:65:c3:e1:d1:04: 88:e3:b7:49:c7:c0:da:4d:47:c7:ac:71:5b:4f:e5:ea:fd:20: 82:13:27:70:e9:e7:f2:fa:30:4f:3f:0a:cc:58:ab:87:3c:52: b7:aa:08:ca:91:0e:ab:4f:ba:a8:a6:55:33:98:34:ab:75:ee: fb:0f:89:bf:ea:80:01:1d:b9:d6:a2:2d:89:82:ae:2a:03:fd: 12:ae:91:58:1f:03:65:a1:cd:34:f0:eb:ce:81:c2:55:7e:b8: b9:fa:6e:37:f3:9d:94:79:f4:8b:84:9c:c0:fb:92:9d:8f:7d: 5c:43:15:b9:7b:de:8e:67:b2:d9:07:fb:0b:db:a4:34:b2:b2: 42:8d:dc:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMP2U2lie/aMSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTI2Y2IyMWMtNDNlMi00MWY4LWIyMmUtZjJiNGRjOWExZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4hSxKyNLv+pSBGs9J8C9T+0LmeM0MbtVkf EI/volhdeydWQED0d2PlG6spiThu/Gj+ti9D5ZqZpm1Qon0Qlq6xIHkR81NRLtG9 H4hq9N34naqO59gLCvGS/Q4O5MJY3iN8vniLiS0C0tKv20LaLlSLmGPWFV8W/P6V s2BWZvi42Pkhbw5cr0Tcrc2sEPatxlvkTTVbXY3jDFlu+5+rQjUvfIlOH5i0wDqu MZ43ifeXEUgkp1M2gqoL/5AfzQhOMNhUiDihSk/NO+yv65Xq5vrGFGpbR8XgVqU2 5MCZesXxvV2lIiD03HsAkykttuca3rruR5OeSVa9BYbNTY5HdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM655LwzD44bSgtFYqBvD5kHl1LHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMGNhOWZiNzEtNGQ1NC0z ZDMzLTk4MDUtNGU2NTg1ZjcxNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeibAo9PoWsGNH48QEavoME9Yq42w/cbsNF+hnlQMTh+kE5M8G/1/x3 FxvFWuQ2tj75uwaXcPid7F4f4JG0Il1WzCz365nYBicu/Uc1/AWYK/1fkhhGocKM 77yNTKJSs5lI8g35VKXuf3pkjj6n1l/QYpi0A7g3WtRlw+HRBIjjt0nHwNpNR8es cVtP5er9IIITJ3Dp5/L6ME8/CsxYq4c8UreqCMqRDqtPuqimVTOYNKt17vsPib/q gAEdudaiLYmCrioD/RKukVgfA2WhzTTw686BwlV+uLn6bjfznZR59IuEnMD7kp2P fVxDFbl73o5nstkH+wvbpDSyskKN3Ms= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:15 2025 by rpki-client