$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa File: 6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa (raw, json) Hash identifier: yLBqJDpk+n9bV9xCIuyx85IByWXe4unELJxgpji9h9E= Subject key identifier: 61:F4:84:D6:C2:88:3D:82:D1:74:82:8C:AB:99:54:B4:EF:4C:3F:68 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B663201D5109765E1A9619100 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 25961 IP address blocks: 199.91.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:01:d5:10:97:65:e1:a9:61:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=0f389cf4-b3b7-4d79-9e2f-0e951c1d61ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:7a:b8:e6:52:ae:18:9d:ed:c0:ee:60:43: 52:4f:f1:71:5e:0e:c1:28:2d:cc:8a:3b:5f:9b:b8: 16:56:01:70:94:66:ba:d9:39:ad:80:48:b1:36:2c: 93:a3:e0:fe:d5:f7:e9:32:e0:c5:5d:11:4f:e4:00: e3:4f:d8:44:d0:ae:e3:ef:bd:c1:9b:8e:45:21:80: 63:38:27:7d:fa:42:d2:f1:e9:59:f9:34:bc:77:2f: 28:7c:36:e7:13:eb:ae:2c:65:ad:28:9a:15:e9:e5: 14:17:7e:80:fb:95:82:23:88:47:2c:af:19:7d:88: d7:79:68:4d:39:f7:c7:c1:d5:18:b8:1e:a2:c5:00: 28:25:af:50:ca:3e:cf:57:db:f8:25:e3:b1:e3:7d: 33:58:a8:df:26:70:b3:f0:82:ae:78:d7:27:9b:e1: f1:86:39:3f:54:ba:ae:dd:16:7e:56:73:18:a6:8e: f0:60:9b:73:00:a4:7a:c5:d4:50:85:33:76:ed:37: fb:69:73:2c:57:a1:11:70:10:49:5c:73:b6:99:67: 43:0a:a6:9f:ef:ac:e5:7c:38:6d:9c:f0:7d:46:1f: bf:35:92:b6:6b:40:63:70:83:18:0f:fb:c0:b4:2c: 36:9a:56:54:c3:96:ca:bb:8d:a8:74:80:3e:a5:3c: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F4:84:D6:C2:88:3D:82:D1:74:82:8C:AB:99:54:B4:EF:4C:3F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:99:fc:6d:85:06:29:c7:08:5b:72:16:a0:75:25:e9:cd:dd: 6e:ed:d0:58:5c:d5:32:90:1d:e9:ac:d6:c2:64:0f:6b:50:04: 2e:c6:1b:c2:ed:aa:b9:40:59:d5:13:11:3e:bf:64:de:7a:ce: 63:47:f8:01:c3:dc:92:76:d4:04:24:f0:db:88:f1:7e:ac:51: 41:4f:ec:62:7c:78:7e:00:a4:2b:07:50:f0:16:d9:26:27:d3: 52:d3:f7:b3:59:e3:35:22:71:dd:59:22:cd:67:b6:4c:19:07: df:22:01:4f:00:a8:4c:07:9d:fe:26:18:f4:f0:7f:0c:be:66: f9:67:1a:a1:12:6a:22:79:f7:ce:08:6c:cf:a3:93:31:03:ac: 9e:d0:6a:e4:c1:75:af:fe:72:ed:f5:05:85:58:88:9b:e5:c7: 9e:9e:25:16:9e:49:cb:45:38:c1:8c:f0:8c:bf:1d:6e:83:62: 94:89:67:a8:20:98:a0:0a:13:0c:83:ac:aa:7c:48:8c:53:5c: fd:31:95:a0:80:f4:98:6a:6f:21:50:c1:a8:47:b4:8a:6c:98: c4:32:f5:32:9d:89:02:95:f3:11:08:b8:7a:2f:0f:e0:ba:a7: dc:13:36:5c:cf:b1:29:a6:68:32:02:2c:27:20:1b:39:89:68: db:aa:68:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgHVEJdl4alhkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MGYzODljZjQtYjNiNy00ZDc5LTllMmYtMGU5NTFjMWQ2MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EJ6uOZSrhid7cDuYENST/FxXg7BKC3Mijtf m7gWVgFwlGa62TmtgEixNiyTo+D+1ffpMuDFXRFP5ADjT9hE0K7j773Bm45FIYBj OCd9+kLS8elZ+TS8dy8ofDbnE+uuLGWtKJoV6eUUF36A+5WCI4hHLK8ZfYjXeWhN OffHwdUYuB6ixQAoJa9Qyj7PV9v4JeOx430zWKjfJnCz8IKueNcnm+Hxhjk/VLqu 3RZ+VnMYpo7wYJtzAKR6xdRQhTN27Tf7aXMsV6ERcBBJXHO2mWdDCqaf76zlfDht nPB9Rh+/NZK2a0BjcIMYD/vAtCw2mlZUw5bKu42odIA+pTx48QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH0hNbCiD2C0XSCjKuZVLTvTD9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNmZhODllMzQtNWM3OC0z YmIxLTgwNWUtZDViNzE5MWIyMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiZ/G2FBinHCFtyFqB1JenN3W7t0Fhc1TKQHems1sJkD2tQBC7GG8Lt qrlAWdUTET6/ZN56zmNH+AHD3JJ21AQk8NuI8X6sUUFP7GJ8eH4ApCsHUPAW2SYn 01LT97NZ4zUicd1ZIs1ntkwZB98iAU8AqEwHnf4mGPTwfwy+ZvlnGqESaiJ5984I bM+jkzEDrJ7QauTBda/+cu31BYVYiJvlx56eJRaeSctFOMGM8Iy/HW6DYpSJZ6gg mKAKEwyDrKp8SIxTXP0xlaCA9JhqbyFQwahHtIpsmMQy9TKdiQKV8xEIuHovD+C6 p9wTNlzPsSmmaDICLCcgGzmJaNuqaMA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:21:56 2025 by rpki-client