$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa File: 7d2b49f2-50db-3b34-86b9-b831e6782c65.roa (raw, json) Hash identifier: jNYM1vmgZNol1hWuCsLx5JSkNaVBFKB/EE2xHpbYdmA= Subject key identifier: 0F:2E:15:0A:5C:A6:5A:10:5F:FE:59:B9:22:43:D3:3C:71:1C:2B:68 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584B8EACEB2C1A5C7E1D93D21BC0 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13638 IP address blocks: 199.38.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:eb:2c:1a:5c:7e:1d:93:d2:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=21bbbd4b-33a7-47d3-aaac-52e302977270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:77:2a:49:42:76:67:18:7a:76:3f:03:fe: 73:f7:0c:9d:6b:b1:c9:32:37:19:82:90:73:52:1e: d4:c0:4f:97:eb:97:e8:ed:29:47:15:74:1e:92:17: 64:92:df:f2:41:6b:13:3b:73:ff:02:b6:c3:51:82: 18:5c:38:04:9d:42:50:c9:22:f4:31:65:fc:a5:1a: ba:b6:22:17:9c:e9:95:3d:8f:5c:a6:c5:d8:5c:93: 3a:78:2b:cc:fe:af:1d:70:d7:ed:b0:bf:6a:db:af: e6:1b:f0:c8:88:29:ab:29:17:60:42:c8:bd:c6:ed: bb:81:18:47:82:d4:b3:2e:3e:bb:d0:87:24:00:75: 39:5d:d4:62:2e:73:37:31:cc:a9:9e:87:7c:69:6e: ce:ac:fe:f8:95:ce:b6:1f:b0:76:83:4a:b5:55:80: f2:f8:65:14:bf:3c:07:ec:df:d2:74:88:ad:04:72: 14:32:1c:cd:45:92:c6:13:b2:ed:ae:bf:8c:c4:8e: 66:d8:ae:bd:20:d9:bc:9e:a4:85:c9:6e:48:60:73: 6a:80:69:f7:45:62:08:a9:e1:43:fb:0d:52:23:50: 27:45:a3:84:f2:7d:86:6c:e6:f7:bf:13:35:e8:99: 13:98:0b:83:2c:61:2d:12:c9:e8:25:57:35:e6:11: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:15:0A:5C:A6:5A:10:5F:FE:59:B9:22:43:D3:3C:71:1C:2B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:46:93:9f:6b:6e:48:dc:c7:58:73:72:89:eb:7d:40:bf:00: b8:70:a0:58:2e:9f:4b:a2:4c:d3:57:97:23:9d:3c:6b:9a:1a: fd:51:53:e0:e3:32:6c:fd:f4:28:32:4b:84:42:92:80:e8:71: 57:68:f9:05:c5:87:7a:2a:19:33:b1:6a:c2:5c:2a:bb:6f:6a: 42:8f:64:13:42:5f:76:fb:62:ac:b3:69:ca:bd:01:50:fc:34: 98:2e:bc:52:d6:42:c3:c3:7a:7c:a5:1a:3b:3e:07:f8:4a:6e: 01:ea:73:e4:fe:d2:66:63:b7:a9:d6:bf:f8:ae:b5:bc:c0:44: f8:f8:d1:af:99:8c:9a:8d:b7:cc:e5:a3:80:f6:30:93:c2:79: c2:32:05:d3:b1:a6:5c:25:3a:0f:66:f5:45:2b:ce:b0:60:74: 61:26:ee:d5:45:b6:04:a4:cf:32:b3:19:dc:4a:40:db:28:29: 87:e1:ff:f1:0d:6a:eb:24:50:76:47:e0:06:a1:45:9d:be:c0: 8e:0c:63:1f:f5:8d:08:14:d4:ed:84:dd:71:f6:2c:7f:95:57: 79:34:1a:ea:7f:f7:42:a3:e3:4d:7f:fc:eb:0f:27:99:54:86: 84:b8:56:8e:b2:ed:36:19:0c:37:8a:a7:4b:a9:db:45:e9:5a: b6:3e:38:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOssGlx+HZPSG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjFiYmJkNGItMzNhNy00N2QzLWFhYWMtNTJlMzAyOTc3MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WR3KklCdmcYenY/A/5z9wyda7HJMjcZgpBz Uh7UwE+X65fo7SlHFXQekhdkkt/yQWsTO3P/ArbDUYIYXDgEnUJQySL0MWX8pRq6 tiIXnOmVPY9cpsXYXJM6eCvM/q8dcNftsL9q26/mG/DIiCmrKRdgQsi9xu27gRhH gtSzLj670IckAHU5XdRiLnM3Mcypnod8aW7OrP74lc62H7B2g0q1VYDy+GUUvzwH 7N/SdIitBHIUMhzNRZLGE7Ltrr+MxI5m2K69INm8nqSFyW5IYHNqgGn3RWIIqeFD +w1SI1AnRaOE8n2GbOb3vxM16JkTmAuDLGEtEsnoJVc15hEbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8uFQpcploQX/5ZuSJD0zxxHCtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvN2QyYjQ5ZjItNTBkYi0z YjM0LTg2YjktYjgzMWU2NzgyYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxybMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBGk59rbkjcx1hzconrfUC/ALhwoFgun0uiTNNXlyOdPGuaGv1RU+Dj Mmz99CgyS4RCkoDocVdo+QXFh3oqGTOxasJcKrtvakKPZBNCX3b7Yqyzacq9AVD8 NJguvFLWQsPDenylGjs+B/hKbgHqc+T+0mZjt6nWv/iutbzARPj40a+ZjJqNt8zl o4D2MJPCecIyBdOxplwlOg9m9UUrzrBgdGEm7tVFtgSkzzKzGdxKQNsoKYfh//EN auskUHZH4AahRZ2+wI4MYx/1jQgU1O2E3XH2LH+VV3k0Gup/90Kj401//OsPJ5lU hoS4Vo6y7TYZDDeKp0up20XpWrY+OBU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:15 2025 by rpki-client