$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa File: 42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa (raw, json) Hash identifier: Cwz853G7J2NBpXBJTo/FRZcsx12PYjRxzrlFwJ5fXRc= Subject key identifier: 23:D4:60:8C:55:7C:69:48:72:4F:25:F0:6B:A4:47:EF:93:CD:C6:54 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B583C8EC2E9A131638EF0A1A0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 199.192.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:c2:e9:a1:31:63:8e:f0:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1884f4b6-9eaa-4a38-b959-b073e3843136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:67:e6:67:49:d6:f5:ea:7c:ab:d6:65:95: c3:87:58:2b:1d:3d:f2:1c:03:9c:3c:40:ee:d9:e1: e2:1c:d5:8f:be:a0:6f:bd:d2:f6:03:01:63:77:f6: f6:c7:fc:de:d8:07:96:9e:f6:4b:61:bc:ba:29:06: 7c:f7:78:10:2f:0b:ca:a9:ac:ee:42:09:e0:62:1d: 84:76:f3:97:ea:8a:52:06:d7:18:b4:77:10:f9:bf: b2:94:f6:0e:7e:ee:c1:ce:92:1a:a9:5e:d6:d0:a7: 2d:47:d4:0b:44:64:e7:2b:b7:5b:26:fc:c0:35:f5: aa:d4:61:02:56:e0:7a:f8:4d:4d:3c:37:d5:1e:25: 2b:d2:3d:df:fb:8c:78:55:0b:c6:53:57:f8:fd:02: 2d:de:1d:89:4f:de:8d:cc:42:a9:ba:2d:1b:a6:4a: 18:e6:ad:57:f8:39:4f:2e:31:51:14:7f:6d:0a:ab: 62:f5:cd:3c:fe:d1:ed:85:05:a8:6a:68:dc:fa:be: 02:6a:e9:dc:21:7f:9e:18:84:24:7d:72:0e:1e:63: 95:16:f7:eb:5c:4c:45:86:fa:d7:29:b6:24:18:e9: 35:8b:8e:b9:9f:d3:55:34:a5:48:7e:fe:7b:a1:f2: 35:0a:51:cb:11:4b:3b:b1:09:e6:eb:cf:4e:4c:c2: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:60:8C:55:7C:69:48:72:4F:25:F0:6B:A4:47:EF:93:CD:C6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f4:79:82:0b:6a:99:29:c8:25:3b:34:60:9c:29:02:5f:f2: 30:a8:0b:78:d4:d1:9c:5a:f5:fb:ea:76:40:f0:2a:a8:51:49: 79:66:01:3a:97:7a:17:50:96:1d:85:4f:69:27:e0:a9:d0:dc: 8a:8a:0b:a5:f4:50:4c:50:ee:a1:02:d5:a8:99:fa:27:55:e4: 8a:04:14:3a:99:b9:ac:e9:9d:8e:94:aa:d9:d6:fe:5e:64:46: 9c:bf:a8:e0:cd:34:8c:e0:d5:11:76:c4:b9:61:d8:be:e7:b6: f2:c0:55:1e:96:db:d1:f5:8c:fa:f8:81:a9:25:23:50:77:85: eb:ee:aa:63:90:4e:b5:1e:32:27:dc:f8:84:4e:23:0b:3c:7c: bf:a0:ae:4a:e8:40:d3:ec:22:73:b4:df:e1:92:7a:8b:83:4a: 72:c8:de:2c:dc:bc:ae:d9:ae:7c:08:c7:5d:9b:65:6a:ae:b7: be:0a:75:9b:84:5f:70:51:a3:df:e9:b7:0f:23:10:c8:24:9d: 42:35:70:8d:5d:28:e6:e7:5e:7a:44:ed:8f:61:1e:ac:aa:3e: 7e:d5:6e:5b:14:47:8a:3e:34:f9:a5:c9:e2:ab:16:14:85:de: ed:2f:f1:f5:6a:c0:0d:51:11:06:95:4c:35:41:7a:e1:f6:40: 07:d6:50:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI7C6aExY47woaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTg4NGY0YjYtOWVhYS00YTM4LWI5NTktYjA3M2UzODQzMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirhn5mdJ1vXqfKvWZZXDh1grHT3yHAOcPEDu 2eHiHNWPvqBvvdL2AwFjd/b2x/ze2AeWnvZLYby6KQZ893gQLwvKqazuQgngYh2E dvOX6opSBtcYtHcQ+b+ylPYOfu7BzpIaqV7W0KctR9QLRGTnK7dbJvzANfWq1GEC VuB6+E1NPDfVHiUr0j3f+4x4VQvGU1f4/QIt3h2JT96NzEKpui0bpkoY5q1X+DlP LjFRFH9tCqti9c08/tHthQWoamjc+r4CauncIX+eGIQkfXIOHmOVFvfrXExFhvrX KbYkGOk1i465n9NVNKVIfv57ofI1ClHLEUs7sQnm689OTMIdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPUYIxVfGlIck8l8GukR++TzcZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIyNjNjYmQtM2YzNC0z ZTI0LTg5YTQtMGRlZjEzYWEwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8DCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj0eYILapkpyCU7NGCcKQJf8jCoC3jU0Zxa9fvqdkDwKqhRSXlmATqX ehdQlh2FT2kn4KnQ3IqKC6X0UExQ7qEC1aiZ+idV5IoEFDqZuazpnY6UqtnW/l5k Rpy/qODNNIzg1RF2xLlh2L7ntvLAVR6W29H1jPr4gaklI1B3hevuqmOQTrUeMifc +IROIws8fL+grkroQNPsInO03+GSeouDSnLI3izcvK7ZrnwIx12bZWqut74KdZuE X3BRo9/ptw8jEMgknUI1cI1dKObnXnpE7Y9hHqyqPn7VblsUR4o+NPmlyeKrFhSF 3u0v8fVqwA1REQaVTDVBeuH2QAfWUIM= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:38 2025 by rpki-client