$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa File: afe4eaec-855a-3198-8438-4f284572e247.roa (raw, json) Hash identifier: oAkU8xSHraKiEVWK6odXRoYdJZQ3rMElrSCqfineHjQ= Subject key identifier: 31:A8:E9:B7:3E:6D:A2:B6:DD:4A:07:25:9C:5B:83:BC:09:59:5B:B7 Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Certificate serial: 010D0C9F4328584B0FA6B725E613667DCF1E9580 Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 26548 IP address blocks: 199.96.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:b7:25:e6:13:66:7d:cf:1e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=5998423b-6429-4f56-b8cd-b8d2d9aa5bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:a4:6b:ad:2f:36:3c:c0:fa:8b:74:5e:c3: f4:52:4a:58:7d:c4:83:22:d8:16:2a:f5:b1:32:e2: fd:5f:a2:dd:57:ff:61:51:32:9c:30:26:83:3d:2c: 94:70:fa:a9:b5:86:39:9b:92:62:52:26:8b:c0:30: 0e:cc:96:e5:a0:57:d9:b4:a8:f7:82:03:b6:3f:56: c7:21:8e:4a:9f:5f:73:e4:b0:c1:b3:38:d2:83:27: 68:d7:96:d1:52:bf:83:21:75:41:0f:64:cb:1c:21: 30:f7:df:9a:27:81:a8:65:ed:7a:73:c1:81:45:c4: 35:1e:ac:05:92:a4:35:66:d9:26:b0:d3:3f:8c:b3: 64:c0:21:a6:e8:d3:90:24:67:44:9c:bc:03:bc:da: 43:6c:c9:7a:27:56:cc:6e:fc:2f:96:50:9e:88:33: 6f:64:b9:c6:46:fb:bf:db:75:8d:ab:39:19:58:89: 93:37:e9:0f:84:97:b1:d4:c9:52:fb:e0:f1:af:43: e6:50:e5:8b:3b:a0:21:97:38:a9:a2:1d:bf:71:5c: ca:e3:0c:d0:ed:45:0c:26:00:83:ec:71:c4:ea:78: 83:f6:dd:1f:74:6c:2a:69:60:b1:9c:63:01:b1:63: 1a:4b:16:68:03:aa:f5:0a:81:73:19:a5:c2:98:5d: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:E9:B7:3E:6D:A2:B6:DD:4A:07:25:9C:5B:83:BC:09:59:5B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl X509v3 Authority Key Identifier: keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer sbgp-ipAddrBlock: critical IPv4: 199.96.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d2:1f:41:17:76:5f:58:06:7a:74:2c:11:4f:18:76:c8:7f: 35:79:bf:8e:3d:ba:be:fb:d3:ef:2e:44:87:a9:f6:bc:1a:46: 90:26:b4:0d:bf:29:d9:93:bb:55:29:84:70:2b:2a:54:33:49: b2:a1:ef:7e:94:e0:20:ad:5a:37:9f:57:71:cc:50:c7:f0:ea: 64:f7:07:4a:06:5c:4c:10:aa:2f:d9:66:24:53:6e:ed:f0:55: ad:ea:88:65:72:a3:05:3e:d4:9a:27:f0:0c:6f:5e:3a:b0:f2: 11:99:d4:9b:93:dc:12:0a:d0:f9:b7:3c:2a:f8:aa:d6:09:3c: e8:d6:6a:03:00:d9:25:ea:9c:88:23:87:d4:4f:78:c5:02:1d: 7c:95:30:73:7c:14:15:6a:5c:48:f7:1d:2a:0f:eb:56:6f:60: 65:d6:5c:b6:df:ad:be:9c:e4:d3:a2:c6:15:e8:1a:04:5c:ea: f8:8d:ea:59:1f:c7:9f:c3:0a:c9:1a:95:97:9f:5f:e3:5d:b3: dd:d4:22:4b:53:05:48:96:5e:84:22:22:35:6c:a0:ba:7e:54: c8:a8:62:80:1a:55:fd:fb:a0:93:16:bd:f4:2f:66:ce:a1:ab: 4f:3b:d0:f6:db:bd:a2:8b:15:62:d4:f7:e1:89:d6:8c:b9:98: 52:b5:dd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPprcl5hNmfc8elYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh MzkxMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NTk5ODQyM2ItNjQyOS00ZjU2LWI4Y2QtYjhkMmQ5YWE1YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqaka60vNjzA+ot0XsP0UkpYfcSDItgWKvWx MuL9X6LdV/9hUTKcMCaDPSyUcPqptYY5m5JiUiaLwDAOzJbloFfZtKj3ggO2P1bH IY5Kn19z5LDBszjSgydo15bRUr+DIXVBD2TLHCEw99+aJ4GoZe16c8GBRcQ1HqwF kqQ1ZtkmsNM/jLNkwCGm6NOQJGdEnLwDvNpDbMl6J1bMbvwvllCeiDNvZLnGRvu/ 23WNqzkZWImTN+kPhJex1MlS++Dxr0PmUOWLO6Ahlzipoh2/cVzK4wzQ7UUMJgCD 7HHE6niD9t0fdGwqaWCxnGMBsWMaSxZoA6r1CoFzGaXCmF0npwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGo6bc+baK23UoHJZxbg7wJWVu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4 YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvYWZlNGVhZWMtODU1YS0z MTk4LTg0MzgtNGYyODQ1NzJlMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHSH0EXdl9YBnp0LBFPGHbIfzV5v449ur770+8uRIep9rwaRpAmtA2/ KdmTu1UphHArKlQzSbKh736U4CCtWjefV3HMUMfw6mT3B0oGXEwQqi/ZZiRTbu3w Va3qiGVyowU+1Jon8AxvXjqw8hGZ1JuT3BIK0Pm3PCr4qtYJPOjWagMA2SXqnIgj h9RPeMUCHXyVMHN8FBVqXEj3HSoP61ZvYGXWXLbfrb6c5NOixhXoGgRc6viN6lkf x5/DCskalZefX+Nds93UIktTBUiWXoQiIjVsoLp+VMioYoAaVf37oJMWvfQvZs6h q0870PbbvaKLFWLU9+GJ1oy5mFK13bs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:38 2025 by rpki-client