$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/d93c4155-ed4b-32bb-921d-14c6c9460866.roa File: d93c4155-ed4b-32bb-921d-14c6c9460866.roa (raw, json) Hash identifier: zMjUhly3IurdgeqhrygQYGVlzaxSpeQx/0fHicR3UiA= Subject key identifier: 3D:4A:BC:AC:00:94:CF:CF:CD:B4:2A:24:68:80:A8:6D:4C:5C:25:4A Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584B821CD4720D0F20F3A75285C0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/d93c4155-ed4b-32bb-921d-14c6c9460866.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 59865 IP address blocks: 199.64.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d4:72:0d:0f:20:f3:a7:52:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=62ec279a-e95a-4414-b3c7-6e42e94ca360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:ab:ae:3b:09:e1:71:85:55:f5:07:b7:c1: 3e:26:21:3c:df:cb:c8:bc:5a:83:ff:16:60:bf:e8: 7a:32:6d:64:b1:53:b7:5a:7e:f1:3d:ff:13:93:ae: 9c:8a:e5:ee:02:10:66:3a:69:47:70:9f:db:b8:81: b2:06:b4:70:93:65:93:e4:c1:d8:12:a9:62:10:9f: fe:16:44:42:07:4b:c4:83:cc:c9:85:42:84:af:3c: c2:92:50:4b:82:77:4c:73:62:30:20:4c:07:3e:fb: d3:ac:0f:96:a1:85:2c:ff:c8:8c:a5:32:ce:a4:c3: 11:23:5d:65:d1:7c:e4:c2:6f:f8:6a:84:a1:b1:14: dd:3c:d8:5d:e5:39:e4:1b:2d:d2:ba:b8:e1:09:bf: 58:db:d4:8c:35:8d:48:b3:3f:c0:e4:43:65:6a:a3: 79:dd:07:09:66:0b:a0:5d:e2:15:17:03:6d:e3:18: 64:8e:41:9d:62:e8:79:ac:37:37:d7:89:6c:95:2a: 14:2a:79:fa:c4:e7:5c:1f:50:9c:12:96:a3:1a:d5: ad:cb:13:d9:a7:28:e1:1f:6c:97:ce:60:0b:d5:ea: 58:61:40:a5:96:a3:64:ca:71:31:a1:fc:39:ef:a1: f0:5a:10:91:4d:70:96:ca:33:89:2f:e8:ce:e4:99: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4A:BC:AC:00:94:CF:CF:CD:B4:2A:24:68:80:A8:6D:4C:5C:25:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/d93c4155-ed4b-32bb-921d-14c6c9460866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:69:bb:02:fa:bd:c0:8f:2d:d4:41:01:ff:04:ef:3f:e7:5b: 33:8d:ba:18:1d:f0:8d:60:86:21:d6:d5:a9:92:a8:26:de:01: cc:b6:09:ae:4e:db:f0:d4:81:60:29:1e:e9:d4:36:7a:15:88: 42:04:55:6a:6e:1f:1e:de:5d:f9:f4:7d:4a:d8:40:99:60:69: 92:e0:e6:76:51:ab:35:7c:ed:ac:1c:73:1e:60:5a:57:b6:52: 64:d7:9a:d8:d5:6b:59:17:b2:08:27:3c:90:a0:fa:95:b3:8d: a1:93:05:b7:3d:f8:cf:9d:d0:a8:e5:c0:8a:b3:00:e3:31:5e: 76:30:67:14:fb:f7:73:82:fb:38:ac:e1:2b:2a:09:88:2f:29: 65:80:80:30:8d:b6:71:4d:61:ff:8c:6b:02:ef:c7:1d:ea:79: de:39:57:46:a5:43:d9:d8:9d:39:43:63:aa:c8:8e:1d:c5:3e: ad:66:39:7e:0b:1b:21:ab:79:7f:28:51:53:5e:dc:52:dd:59: 70:24:43:41:98:cb:b7:0f:c2:d2:41:18:22:0a:b3:3e:a4:82: ff:db:63:87:29:60:0a:63:d5:af:6e:88:5c:61:90:40:0c:0a: 4c:e3:a7:b4:dc:8e:6d:0a:2f:5a:23:29:11:ab:a7:57:5c:e1: ee:8e:ca:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNRyDQ8g86dShcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NjJlYzI3OWEtZTk1YS00NDE0LWIzYzctNmU0MmU5NGNhMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnqrrjsJ4XGFVfUHt8E+JiE838vIvFqD/xZg v+h6Mm1ksVO3Wn7xPf8Tk66ciuXuAhBmOmlHcJ/buIGyBrRwk2WT5MHYEqliEJ/+ FkRCB0vEg8zJhUKErzzCklBLgndMc2IwIEwHPvvTrA+WoYUs/8iMpTLOpMMRI11l 0Xzkwm/4aoShsRTdPNhd5TnkGy3SurjhCb9Y29SMNY1Isz/A5ENlaqN53QcJZgug XeIVFwNt4xhkjkGdYuh5rDc314lslSoUKnn6xOdcH1CcEpajGtWtyxPZpyjhH2yX zmAL1epYYUCllqNkynExofw576HwWhCRTXCWyjOJL+jO5Jmu6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1KvKwAlM/PzbQqJGiAqG1MXCVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZDkzYzQxNTUtZWQ0Yi0z MmJiLTkyMWQtMTRjNmM5NDYwODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0A6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1puwL6vcCPLdRBAf8E7z/nWzONuhgd8I1ghiHW1amSqCbeAcy2Ca5O 2/DUgWApHunUNnoViEIEVWpuHx7eXfn0fUrYQJlgaZLg5nZRqzV87awccx5gWle2 UmTXmtjVa1kXsggnPJCg+pWzjaGTBbc9+M+d0KjlwIqzAOMxXnYwZxT793OC+zis 4SsqCYgvKWWAgDCNtnFNYf+MawLvxx3qed45V0alQ9nYnTlDY6rIjh3FPq1mOX4L GyGreX8oUVNe3FLdWXAkQ0GYy7cPwtJBGCIKsz6kgv/bY4cpYApj1a9uiFxhkEAM Ckzjp7Tcjm0KL1ojKRGrp1dc4e6Oyq8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:36 2025 by rpki-client