$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa File: 10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json) Hash identifier: I72egbZNkXEGkgHQz0xZT5pgyndATe+18nCJm11NoVA= Subject key identifier: 0A:A0:73:A9:18:95:F2:30:37:17:62:1D:72:5F:C8:1C:53:37:20:92 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584B3C51ACF9C34A2F7AAF65FB00 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 125 IP address blocks: 199.64.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ac:f9:c3:4a:2f:7a:af:65:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=3ba4f90e-9ae6-425e-a0c2-ddb4383d3589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:9a:f1:7a:d7:a2:d6:91:d0:7f:47:f1:78: 92:da:44:49:bb:2e:a8:a2:13:1f:58:72:31:1e:01: b7:06:ec:cb:10:f3:86:cd:de:16:42:81:9e:af:68: 88:52:fa:01:04:e1:e9:c2:1a:80:8c:c3:f0:a9:68: 93:12:91:7c:b7:0e:a1:7c:a9:cf:63:ad:f4:e7:3b: d5:0d:6e:8a:a6:ef:cd:43:c0:d8:fe:ca:9f:d9:5d: 8f:91:60:35:9e:6a:85:3f:4e:a6:23:95:fb:fa:f6: 41:7e:e4:f0:71:f1:58:13:e7:59:99:00:15:54:90: 72:d0:f4:63:5b:fb:87:96:0f:62:4b:f2:e7:bf:f5: 1c:f2:73:60:0b:77:e2:18:aa:84:4a:f5:9c:e3:5e: dc:71:99:8f:f2:90:8d:28:82:2c:70:8a:f4:33:c4: 08:da:5b:cb:56:9e:b7:5b:66:40:e4:36:c6:e4:1b: b4:db:c3:cd:82:59:0c:87:5c:0a:c2:83:5f:43:2e: cc:02:64:37:b6:2f:ef:ea:ab:68:31:47:b7:d0:8c: 73:77:50:d8:58:fc:bd:8f:51:c5:7f:f5:ef:50:ef: 8f:ed:91:c9:56:0a:f2:34:a1:b1:9a:78:88:ee:a9: d2:e0:ec:6d:3c:ec:a2:3d:03:a6:bb:f6:d0:de:e3: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:73:A9:18:95:F2:30:37:17:62:1D:72:5F:C8:1C:53:37:20:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4c:19:ac:e4:26:bd:8a:88:92:31:37:61:80:c1:ae:de:0d: 80:5a:06:11:04:a0:7f:4b:14:1e:b0:2d:ac:4f:9c:2e:73:fd: 4b:3d:47:dc:6a:38:ca:9f:01:0f:ed:54:21:29:9a:03:af:be: 80:80:00:b1:66:0a:ae:b4:83:ea:8b:33:85:58:cc:96:d4:75: 39:43:cb:86:8f:ae:c5:36:d8:c5:48:91:31:4a:2c:f4:fd:43: e3:93:ea:37:ed:60:8f:20:3b:5f:98:58:2b:c1:38:e7:a2:c7: 02:a3:1d:dd:d8:e6:53:44:9f:05:27:9b:18:ff:d3:d5:5a:fc: ec:1d:8d:a5:44:af:e9:16:6d:bc:dc:8d:8d:86:6c:6d:52:a8: 6d:d6:6e:6b:cb:2b:a3:f2:84:18:b9:fa:38:25:69:28:d5:c7: df:01:71:1e:04:92:b5:8d:60:f8:02:f6:69:84:4a:a4:ef:0f: 1e:f1:fe:68:e2:4a:00:db:16:50:a7:d5:f4:c5:e6:e8:57:68: 47:10:70:07:dd:8e:4c:d1:8b:c4:06:f3:0d:49:c4:3b:25:3f: 9d:c5:19:be:5e:5c:0c:c0:f1:39:30:f5:eb:ae:03:b1:f4:19: 4c:bf:59:46:93:00:91:8c:fb:48:a5:60:7b:c1:e6:41:a5:45: 15:8f:1e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Uaz5w0oveq9l+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk M2JhNGY5MGUtOWFlNi00MjVlLWEwYzItZGRiNDM4M2QzNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ua8XrXotaR0H9H8XiS2kRJuy6oohMfWHIx HgG3BuzLEPOGzd4WQoGer2iIUvoBBOHpwhqAjMPwqWiTEpF8tw6hfKnPY6305zvV DW6Kpu/NQ8DY/sqf2V2PkWA1nmqFP06mI5X7+vZBfuTwcfFYE+dZmQAVVJBy0PRj W/uHlg9iS/Lnv/Uc8nNgC3fiGKqESvWc417ccZmP8pCNKIIscIr0M8QI2lvLVp63 W2ZA5DbG5Bu028PNglkMh1wKwoNfQy7MAmQ3ti/v6qtoMUe30Ixzd1DYWPy9j1HF f/XvUO+P7ZHJVgryNKGxmniI7qnS4OxtPOyiPQOmu/bQ3uP3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqgc6kYlfIwNxdiHXJfyBxTNyCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMTA5MDRmNWUtMzRmZC0z NjQ5LTlkMGQtMWU0M2ZjOWYxNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0CiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERMGazkJr2KiJIxN2GAwa7eDYBaBhEEoH9LFB6wLaxPnC5z/Us9R9xq OMqfAQ/tVCEpmgOvvoCAALFmCq60g+qLM4VYzJbUdTlDy4aPrsU22MVIkTFKLPT9 Q+OT6jftYI8gO1+YWCvBOOeixwKjHd3Y5lNEnwUnmxj/09Va/OwdjaVEr+kWbbzc jY2GbG1SqG3WbmvLK6PyhBi5+jglaSjVx98BcR4EkrWNYPgC9mmESqTvDx7x/mji SgDbFlCn1fTF5uhXaEcQcAfdjkzRi8QG8w1JxDslP53FGb5eXAzA8Tkw9euuA7H0 GUy/WUaTAJGM+0ilYHvB5kGlRRWPHuQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:29 2025 by rpki-client