$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a4e4fb9f-8207-3d9c-b743-a0a2d054b1e7.roa File: a4e4fb9f-8207-3d9c-b743-a0a2d054b1e7.roa (raw, json) Hash identifier: zXu5JHVTJvwMJDO4Ji0qFw1FHRT8tQXvyzpDBbDf3/o= Subject key identifier: AF:E7:C6:D9:F6:F2:CE:A9:5A:42:89:63:36:02:99:84:E3:34:11:78 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B9646A5E958997BA96826A180 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a4e4fb9f-8207-3d9c-b743-a0a2d054b1e7.roa Signing time: Mon 20 Oct 2025 18:21:18 +0000 ROA not before: Mon 20 Oct 2025 18:21:18 +0000 ROA not after: Sun 18 Jan 2026 19:21:18 +0000 asID: 32771 IP address blocks: 199.247.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:46:a5:e9:58:99:7b:a9:68:26:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Oct 20 18:21:18 2025 GMT Not After : Jan 18 19:21:18 2026 GMT Subject: CN=a55768a8-aaa7-4ba0-b9b6-d21f752bf7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:ea:33:dd:8f:25:32:8c:1d:bf:0e:a0:c5: 95:c5:bb:9a:b4:f5:af:aa:70:56:cf:cd:a2:6e:e2: 12:98:b3:96:fe:61:09:56:62:dd:d7:0b:bb:0f:5a: cb:8f:2a:24:4d:0b:5a:4c:3a:10:af:09:db:3b:14: 4d:ca:e1:f7:83:0c:9c:5b:9f:ac:11:e5:8b:1e:4f: 3c:1b:a3:eb:8d:5c:03:8d:6e:82:f2:8a:6d:40:06: 9f:0a:24:36:50:dd:b2:fd:11:44:90:08:98:e9:22: 15:8a:23:46:49:52:79:f7:77:83:d9:ec:62:57:6c: d0:8f:93:82:11:40:ea:62:da:d5:88:09:e5:26:44: 20:80:43:8b:7f:03:3c:8c:19:f0:49:15:59:f3:60: 0b:c9:46:9c:d7:58:38:b3:e7:6a:10:70:74:cd:c6: a5:c3:b6:63:b0:95:2c:4d:4e:2b:a5:71:fc:e0:e0: 26:2b:2e:aa:43:8c:fb:97:b8:8d:83:43:99:5c:ae: 32:d2:01:d1:25:a4:a9:50:09:e1:43:1e:30:3e:7c: 28:59:b5:fb:4c:43:0e:00:93:67:bc:b5:23:99:e6: 1f:8e:d1:65:85:29:f8:54:8d:5d:0e:14:37:c9:d8: 6c:68:7b:3d:e2:93:d4:ed:5e:27:05:41:c9:ed:16: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:C6:D9:F6:F2:CE:A9:5A:42:89:63:36:02:99:84:E3:34:11:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/a4e4fb9f-8207-3d9c-b743-a0a2d054b1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv4: 199.247.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e6:1a:1f:54:11:e0:97:8f:e9:b8:46:0d:5f:d7:c3:1c:08: 7f:67:2b:ae:8a:51:cb:29:32:51:50:24:19:fa:26:b6:5a:9d: 8e:1f:8e:21:13:bc:a2:0c:83:87:5c:48:e0:32:46:4f:d7:03: 4b:47:8d:c8:05:a9:e6:43:e1:fa:30:51:b4:7b:f6:61:30:49: 24:14:3e:1e:f8:1c:16:61:45:68:62:dd:67:c2:57:0f:65:f6: d4:06:61:e7:5a:c9:60:05:77:78:bc:4e:45:57:73:ca:9c:e3: 14:55:2d:e7:4e:68:a9:9d:da:c7:e5:ab:82:77:2d:26:18:eb: 9a:e8:25:53:35:f5:ce:55:fe:1b:5e:9c:4c:1e:21:34:81:30: 24:08:e9:91:43:9e:5f:f2:39:ad:b0:5f:58:c1:e5:db:df:a0: 33:5f:17:5e:ff:b1:21:35:5b:18:d4:8a:cc:f4:8d:fd:cf:5e: bd:05:d0:93:f9:63:e5:94:44:c0:4f:fb:d2:d0:e4:27:d8:d6: 6a:50:72:e3:e0:0c:33:41:36:7f:0b:d7:4a:76:fb:69:01:e2: 24:5e:48:61:8c:45:48:e2:91:64:5b:63:67:92:35:88:83:23: 44:a9:6a:00:e9:18:6f:01:2d:a2:06:2b:a6:33:ec:74:f2:c0: c3:f6:3d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWRqXpWJl7qWgmoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MTAyMDE4MjExOFoXDTI2MDExODE5MjExOFowLzEtMCsGA1UEAxMk YTU1NzY4YTgtYWFhNy00YmEwLWI5YjYtZDIxZjc1MmJmN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPqM92PJTKMHb8OoMWVxbuatPWvqnBWz82i buISmLOW/mEJVmLd1wu7D1rLjyokTQtaTDoQrwnbOxRNyuH3gwycW5+sEeWLHk88 G6PrjVwDjW6C8optQAafCiQ2UN2y/RFEkAiY6SIViiNGSVJ593eD2exiV2zQj5OC EUDqYtrViAnlJkQggEOLfwM8jBnwSRVZ82ALyUac11g4s+dqEHB0zcalw7ZjsJUs TU4rpXH84OAmKy6qQ4z7l7iNg0OZXK4y0gHRJaSpUAnhQx4wPnwoWbX7TEMOAJNn vLUjmeYfjtFlhSn4VI1dDhQ3ydhsaHs94pPU7V4nBUHJ7Raw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/nxtn28s6pWkKJYzYCmYTjNBF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvYTRlNGZiOWYtODIwNy0z ZDljLWI3NDMtYTBhMmQwNTRiMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvmGh9UEeCXj+m4Rg1f18McCH9nK66KUcspMlFQJBn6JrZanY4fjiET vKIMg4dcSOAyRk/XA0tHjcgFqeZD4fowUbR79mEwSSQUPh74HBZhRWhi3WfCVw9l 9tQGYedayWAFd3i8TkVXc8qc4xRVLedOaKmd2sflq4J3LSYY65roJVM19c5V/hte nEweITSBMCQI6ZFDnl/yOa2wX1jB5dvfoDNfF17/sSE1WxjUisz0jf3PXr0F0JP5 Y+WURMBP+9LQ5CfY1mpQcuPgDDNBNn8L10p2+2kB4iReSGGMRUjikWRbY2eSNYiD I0SpagDpGG8BLaIGK6Yz7HTywMP2Peg= -----END CERTIFICATE-----Generated at Tue Oct 21 11:57:59 2025 by rpki-client