$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa File: 789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json) Hash identifier: dSq71V5zTqbLb39VTMXcE7BVCcgaTfZmNR7V4Ot8mbs= Subject key identifier: 2F:4E:13:AE:EA:1E:28:F2:BA:7F:BE:1B:F5:0C:03:F6:99:57:FD:76 Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21 Certificate serial: 010D0C9F4328584B41E718FD7CB6E5AFFBEAEA00 Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 17056 IP address blocks: 199.168.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:18:fd:7c:b6:e5:af:fb:ea:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=b2d4ac52-5665-4dd1-b278-05fbb91af627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:b9:c3:54:93:52:16:7e:74:bb:49:20:f8: eb:30:1c:fb:b6:f7:0b:7f:59:e3:cb:72:28:17:18: 09:e4:d1:00:98:e7:c9:f0:af:9f:d8:f2:40:34:1f: ff:b8:d2:06:a8:85:6a:c2:b9:d6:b8:53:90:67:20: 97:f2:97:75:ae:86:8d:9c:f4:a9:6a:05:69:65:ad: b5:3a:07:e5:b7:d8:9c:4f:34:86:9d:85:b6:1c:3b: 1a:1f:d8:6f:de:5b:6a:5a:ce:6c:41:15:a7:bb:7d: da:93:de:27:24:7a:b2:da:74:98:d2:c8:fb:c1:82: 24:bb:9a:ad:db:fe:7b:37:e5:c4:cd:80:7f:32:b1: 3b:bc:3a:5b:8d:5b:fa:73:46:d6:75:1b:3b:6b:a2: 7a:5a:a8:25:fb:35:17:51:8f:10:51:fb:c2:5a:c1: e1:81:1b:6d:82:48:76:ee:f4:7f:d3:b6:4b:d8:18: ad:f1:ef:04:cd:85:43:ff:fe:68:c0:32:ab:38:e5: f5:42:59:48:85:a6:48:b8:d1:5d:97:ff:ca:89:89: ff:a8:cb:3d:66:ff:57:08:c7:bb:98:d9:1f:85:5c: 03:a7:d5:1a:54:9c:b8:32:4c:bb:2f:49:fe:aa:11: 2f:da:3b:c0:2c:66:fc:00:aa:54:57:ed:fc:5b:86: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:13:AE:EA:1E:28:F2:BA:7F:BE:1B:F5:0C:03:F6:99:57:FD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl X509v3 Authority Key Identifier: keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer sbgp-ipAddrBlock: critical IPv4: 199.168.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:42:a7:23:1e:06:af:d1:5b:b2:04:cf:73:3e:cb:7f:24: 2b:92:74:05:5d:5d:d3:7a:95:b6:85:9b:aa:54:08:1c:d7:2d: 0e:ad:7b:42:cb:69:9a:7c:8c:26:e6:d1:41:7c:2e:55:cd:18: c4:4e:18:58:f5:96:94:ad:b9:17:74:ce:f5:e1:13:ff:5c:12: ac:5a:6d:3a:fe:83:fd:43:cd:be:6a:aa:b7:e4:5f:a7:a1:9a: fe:c7:3c:49:0f:49:2c:24:bd:1c:b8:3f:69:6a:72:9d:e2:35: 1b:ef:6d:e7:3a:47:0f:6b:05:88:bc:fb:bf:10:37:3d:e0:c9: 1e:be:9a:eb:45:76:0b:0e:d0:ba:1b:6e:7e:75:df:c0:1b:d8: 3c:59:21:62:e9:8d:38:42:8f:3a:09:9c:4b:27:6f:65:8b:50: 96:8d:77:e5:aa:7e:d3:53:2b:95:e0:f3:3f:08:3c:0b:de:8d: bd:43:89:25:0e:86:33:76:f8:4e:5c:40:98:fd:23:78:44:60: c3:e2:9b:4f:c7:44:e6:a8:02:c6:5e:b9:4a:50:06:48:e6:c8: c3:5f:00:f5:fc:4c:f9:b9:47:f9:6c:99:9d:14:d1:53:3d:9b: 62:ef:0d:b5:77:1a:5b:68:25:1f:a3:58:f3:a5:d6:09:90:19: ad:5f:32:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xj9fLblr/vq6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm YTIxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YjJkNGFjNTItNTY2NS00ZGQxLWIyNzgtMDVmYmI5MWFmNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3e5w1STUhZ+dLtJIPjrMBz7tvcLf1njy3Io FxgJ5NEAmOfJ8K+f2PJANB//uNIGqIVqwrnWuFOQZyCX8pd1roaNnPSpagVpZa21 Ogflt9icTzSGnYW2HDsaH9hv3ltqWs5sQRWnu33ak94nJHqy2nSY0sj7wYIku5qt 2/57N+XEzYB/MrE7vDpbjVv6c0bWdRs7a6J6Wqgl+zUXUY8QUfvCWsHhgRttgkh2 7vR/07ZL2Bit8e8EzYVD//5owDKrOOX1QllIhaZIuNFdl//KiYn/qMs9Zv9XCMe7 mNkfhVwDp9UaVJy4Mky7L0n+qhEv2jvALGb8AKpUV+38W4bjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9OE67qHijyun++G/UMA/aZV/12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvNzg5ZGE2YTAtMmM3YS0z YTNkLTkxNDMtNTBkYTY5NGNhY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0 OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFqQqcjHgav0VuyBM9zPst/JCuSdAVdXdN6lbaFm6pUCBzXLQ6te0LL aZp8jCbm0UF8LlXNGMROGFj1lpStuRd0zvXhE/9cEqxabTr+g/1Dzb5qqrfkX6eh mv7HPEkPSSwkvRy4P2lqcp3iNRvvbec6Rw9rBYi8+78QNz3gyR6+mutFdgsO0Lob bn5138Ab2DxZIWLpjThCjzoJnEsnb2WLUJaNd+WqftNTK5Xg8z8IPAvejb1DiSUO hjN2+E5cQJj9I3hEYMPim0/HROaoAsZeuUpQBkjmyMNfAPX8TPm5R/lsmZ0U0VM9 m2LvDbV3GltoJR+jWPOl1gmQGa1fMng= -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:17 2025 by rpki-client