$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa File: 53432681-c412-3881-b43f-45740527d50d.roa (raw, json) Hash identifier: Qwq2qwKWfLD8eLrVCkDkMcUgQF7tZPqStdLqUdDFlNA= Subject key identifier: 24:FA:F9:E9:B5:59:EF:C6:87:46:CF:26:67:02:96:F0:12:EA:A0:5F Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B64CCA8ABBD43A6B442CDD020 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 21554 IP address blocks: 199.248.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a8:ab:bd:43:a6:b4:42:cd:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=506e2eaa-9dd3-4a8f-8a79-75e46b3dc70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:4f:1e:c4:42:4b:e5:dc:66:b5:19:63:cf: 07:f7:06:d1:ea:94:a1:df:f5:44:15:de:98:85:bb: 25:6d:2c:a6:b5:af:61:34:29:7e:1a:16:f2:42:b7: 9b:03:e4:6d:70:68:06:6e:f9:3f:d6:c2:ae:89:ac: 25:4a:8d:c0:5f:cb:77:fe:cc:38:0b:4e:bd:0e:83: 21:5f:59:72:73:fa:56:65:f6:18:c0:c2:f9:17:2f: d2:c5:51:0f:b9:ab:2b:57:92:cf:1b:e5:92:65:06: e4:d4:bb:56:e8:12:a0:67:f5:60:0a:ff:c7:f1:42: 00:e7:8d:ff:33:f0:48:ed:5a:64:81:27:74:ee:7a: 05:b3:ff:97:95:e4:8e:23:d3:13:d7:72:1c:4f:6e: 36:a9:c7:ff:51:29:3b:9d:a0:86:05:3f:8e:e2:83: 32:47:bd:b8:27:de:49:88:43:4d:81:75:9e:26:c3: 79:2f:d1:31:18:f9:ee:af:44:54:9f:c2:9f:74:eb: e5:82:76:71:2a:91:cc:04:7a:ef:d0:47:5d:f8:69: 7d:7b:7e:5f:e2:02:d4:83:ac:0d:fa:ef:1d:b2:47: 92:94:8b:15:72:59:9b:78:17:a7:84:7f:98:5e:28: 5b:c3:38:ac:f2:ef:2c:0d:85:76:91:76:4d:d1:b7: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:F9:E9:B5:59:EF:C6:87:46:CF:26:67:02:96:F0:12:EA:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 199.248.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2b:f7:0a:d5:dd:fe:3f:48:ff:80:73:a8:05:30:65:40:f2: c4:1b:b5:27:7b:20:82:13:78:d0:fe:10:a9:43:db:67:8a:6f: 67:97:0b:96:fa:16:57:f5:bc:31:a5:31:0d:d0:fa:f4:b1:88: b2:47:14:e2:05:fa:05:cc:30:67:5d:6c:cc:8e:fa:33:ab:4a: 08:27:a2:39:05:44:b8:64:1f:d0:be:c6:d8:34:26:15:7c:c7: 68:20:eb:06:e5:61:97:7c:0c:51:1f:5d:5a:68:74:de:5e:3d: f2:b0:69:18:1d:90:4b:e8:14:67:2d:c4:fe:6d:18:e2:a1:d7: 36:28:6c:49:97:11:f7:42:53:13:d8:dc:4b:22:c4:7c:58:5a: 7c:a7:60:ca:4b:08:35:fd:da:7e:b8:35:f4:64:80:ee:8d:93: d6:c9:a6:3a:60:f5:b6:29:6f:fc:7c:7b:8d:14:cc:86:86:6a: 31:c4:79:97:48:40:5e:5f:c8:05:24:0c:62:35:9f:46:5d:cc: 63:91:39:32:b8:a3:cb:fe:aa:44:bf:9e:d6:c5:3a:90:a1:15: 37:39:02:a1:d2:f5:20:5a:33:5d:f4:00:0a:a0:ae:99:82:85: 5c:9b:e7:7a:c8:f9:2b:19:5a:55:6b:c6:58:0e:97:7a:df:f4: 24:25:5a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKirvUOmtELN0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTA2ZTJlYWEtOWRkMy00YThmLThhNzktNzVlNDZiM2RjNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvRPHsRCS+XcZrUZY88H9wbR6pSh3/VEFd6Y hbslbSymta9hNCl+GhbyQrebA+RtcGgGbvk/1sKuiawlSo3AX8t3/sw4C069DoMh X1lyc/pWZfYYwML5Fy/SxVEPuasrV5LPG+WSZQbk1LtW6BKgZ/VgCv/H8UIA543/ M/BI7VpkgSd07noFs/+XleSOI9MT13IcT242qcf/USk7naCGBT+O4oMyR724J95J iENNgXWeJsN5L9ExGPnur0RUn8KfdOvlgnZxKpHMBHrv0Edd+Gl9e35f4gLUg6wN +u8dskeSlIsVclmbeBenhH+YXihbwzis8u8sDYV2kXZN0bdvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT6+em1We/Gh0bPJmcClvAS6qBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNTM0MzI2ODEtYzQxMi0z ODgxLWI0M2YtNDU3NDA1MjdkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/g/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwr9wrV3f4/SP+Ac6gFMGVA8sQbtSd7IIITeND+EKlD22eKb2eXC5b6 Flf1vDGlMQ3Q+vSxiLJHFOIF+gXMMGddbMyO+jOrSggnojkFRLhkH9C+xtg0JhV8 x2gg6wblYZd8DFEfXVpodN5ePfKwaRgdkEvoFGctxP5tGOKh1zYobEmXEfdCUxPY 3EsixHxYWnynYMpLCDX92n64NfRkgO6Nk9bJpjpg9bYpb/x8e40UzIaGajHEeZdI QF5fyAUkDGI1n0ZdzGOROTK4o8v+qkS/ntbFOpChFTc5AqHS9SBaM130AAqgrpmC hVyb53rI+SsZWlVrxlgOl3rf9CQlWnc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:08 2025 by rpki-client