$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa File: 8bd5e447-a1f6-3074-970e-47f889f55781.roa (raw, json) Hash identifier: hTA7BfEheN6MFo2GY7kV5SXveZRxKlFgMY83mNxQpQA= Subject key identifier: 60:3E:FD:CF:3A:9A:70:EA:35:04:55:32:82:50:35:3E:7C:91:56:E2 Certificate issuer: /CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Certificate serial: 010D0C9F4328584B60E5D9EB0DB2D5DC7AA25000 Authority key identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa Signing time: Wed 01 Oct 2025 15:28:25 +0000 ROA not before: Wed 01 Oct 2025 15:28:25 +0000 ROA not after: Tue 30 Dec 2025 16:28:25 +0000 asID: 19272 IP address blocks: 199.180.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:e5:d9:eb:0d:b2:d5:dc:7a:a2:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Validity Not Before: Oct 1 15:28:25 2025 GMT Not After : Dec 30 16:28:25 2025 GMT Subject: CN=d7f51b32-65bd-46fa-9c00-5e2afb56433f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:59:6a:16:dd:01:03:33:80:c5:5d:6d:f3: 69:51:09:2b:6e:ae:ad:d1:bd:dc:a6:0c:f0:98:3f: 7d:60:26:e6:52:e3:50:11:bc:94:4a:8f:e2:d7:36: b8:15:25:1d:71:54:74:8e:87:70:00:b2:59:ba:3b: c4:7a:4b:53:5a:14:8c:88:7e:81:f2:5f:88:f5:e2: ff:ed:6d:0d:5e:36:89:89:00:cd:d5:fa:7d:39:4a: b9:39:91:e6:0e:cd:81:81:dc:18:b5:54:d3:ff:c3: 31:3d:0f:84:d2:19:87:05:28:05:3b:ab:da:a6:8c: 6c:a1:fc:bd:9a:2a:bd:96:7f:c2:6a:0d:f6:8b:16: b0:90:c9:fb:06:6d:7d:01:ec:d8:57:77:34:b3:52: dd:1a:9b:e4:e6:a1:68:a6:cf:8b:a2:9e:1f:1a:ce: db:8e:0c:39:01:7b:28:bb:fb:1e:0d:21:08:d5:28: 28:ce:df:bf:77:63:13:53:33:0a:60:d7:6e:0a:23: 11:fc:8f:21:7f:0f:d4:1e:25:49:5a:6e:39:58:be: 26:f8:9e:29:b6:d6:d7:0f:00:cb:57:92:de:79:60: b3:ed:35:66:a7:17:2f:7b:7b:22:15:43:f8:7a:6f: 93:dd:a4:cf:7d:ea:e2:7d:18:c2:01:0c:a5:c1:ba: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3E:FD:CF:3A:9A:70:EA:35:04:55:32:82:50:35:3E:7C:91:56:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.crl X509v3 Authority Key Identifier: keyid:F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer sbgp-ipAddrBlock: critical IPv4: 199.180.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:d2:40:9c:8e:18:69:a0:aa:a8:9a:0e:06:49:82:8e:3b:47: a6:8f:20:dd:07:c7:5d:4c:be:b8:1e:84:0d:40:f7:fc:94:9e: af:fc:12:77:3f:a7:d5:05:f9:4e:07:b2:b4:bc:88:72:ea:e0: e0:ff:6c:24:d1:79:38:6f:6c:ce:18:74:2c:d6:20:6b:96:7e: 71:b7:01:22:16:59:4b:5d:46:f2:1c:96:48:e1:53:44:d7:59: 58:ed:9c:f8:af:9b:92:6b:ea:50:bc:14:18:1d:bb:32:22:35: 3c:54:03:06:14:1b:96:7b:00:31:22:84:b6:3d:91:5b:a4:e9: d7:1b:ec:8c:86:e3:fa:75:b6:18:5e:e9:fa:a1:2c:59:54:c8: 05:17:ae:f7:12:a5:ce:aa:39:a4:f3:40:f5:ed:4a:54:97:9c: ae:18:fd:01:2f:71:50:64:20:1e:62:e4:a8:1a:f5:ca:94:bc: da:04:3e:81:c1:08:47:9c:58:e7:63:23:ec:1c:84:2f:fa:f8: 52:c1:c6:43:9d:2e:13:4d:e4:90:4d:fc:4e:d2:f2:29:29:76: fd:3e:b3:33:c6:22:64:3a:09:34:1e:bb:c1:0e:b7:f4:56:e8: 0e:e1:95:b2:4a:0a:6e:c0:5c:af:35:e6:d8:12:3c:31:64:ac: 18:05:d5:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtg5dnrDbLV3HqiUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjY2UzOTgtZTRkYS00ZDVkLThjYmMtZWY4OTY4YmVj OGZlMB4XDTI1MTAwMTE1MjgyNVoXDTI1MTIzMDE2MjgyNVowLzEtMCsGA1UEAxMk ZDdmNTFiMzItNjViZC00NmZhLTljMDAtNWUyYWZiNTY0MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7dZahbdAQMzgMVdbfNpUQkrbq6t0b3cpgzw mD99YCbmUuNQEbyUSo/i1za4FSUdcVR0jodwALJZujvEektTWhSMiH6B8l+I9eL/ 7W0NXjaJiQDN1fp9OUq5OZHmDs2BgdwYtVTT/8MxPQ+E0hmHBSgFO6vapoxsofy9 miq9ln/Cag32ixawkMn7Bm19AezYV3c0s1LdGpvk5qFops+Lop4fGs7bjgw5AXso u/seDSEI1Sgozt+/d2MTUzMKYNduCiMR/I8hfw/UHiVJWm45WL4m+J4pttbXDwDL V5LeeWCz7TVmpxcve3siFUP4em+T3aTPferifRjCAQylwbqRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA+/c86mnDqNQRVMoJQNT58kVbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmNj ZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5NjhiZWM4ZmUvOGJkNWU0NDctYTFmNi0z MDc0LTk3MGUtNDdmODg5ZjU1NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjY2UzOTgtZTRkYS00ZDVkLThj YmMtZWY4OTY4YmVjOGZlL2RiY2NlMzk4LWU0ZGEtNGQ1ZC04Y2JjLWVmODk2OGJl YzhmZS5jcmwwHwYDVR0jBBgwFoAU8g69JNqSmGX8MtPrXPHKEQP2NNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5 NjhiZWM4ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx7RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDSQJyOGGmgqqiaDgZJgo47R6aPIN0Hx11MvrgehA1A9/yUnq/8Enc/ p9UF+U4HsrS8iHLq4OD/bCTReThvbM4YdCzWIGuWfnG3ASIWWUtdRvIclkjhU0TX WVjtnPivm5Jr6lC8FBgduzIiNTxUAwYUG5Z7ADEihLY9kVuk6dcb7IyG4/p1thhe 6fqhLFlUyAUXrvcSpc6qOaTzQPXtSlSXnK4Y/QEvcVBkIB5i5Kga9cqUvNoEPoHB CEecWOdjI+wchC/6+FLBxkOdLhNN5JBN/E7S8ikpdv0+szPGImQ6CTQeu8EOt/RW 6A7hlbJKCm7AXK815tgSPDFkrBgF1QE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:17 2025 by rpki-client