$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa File: bc5198a2-5c79-324a-aece-a03c1b919441.roa (raw, json) Hash identifier: fFOGNQs5CEuAOiszfTDe6nzptczA7Iew797hT/ZrMME= Subject key identifier: 11:4B:18:60:67:88:DF:0E:F5:D4:D6:A0:65:64:E2:B3:41:E7:45:4A Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB621BA79E0739240FD00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 199.193.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:21:ba:79:e0:73:92:40:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=2de3b2a8-c8bb-4eb2-8347-00a1c4794c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e4:5f:6e:e5:92:90:df:b9:2d:7d:ff:6c:45: aa:e2:53:0c:ab:db:26:50:dc:83:ef:48:04:e4:71: 7e:6e:02:16:0b:ec:f6:9f:15:81:3c:e4:7e:7e:f4: 27:a5:db:8c:46:50:9a:1f:fc:66:bc:b3:b0:be:da: b7:96:65:6c:6b:e0:94:92:c2:9b:f9:3c:b8:0d:e7: a7:15:ee:d0:01:c3:5e:58:37:f6:98:43:78:f4:a7: 99:58:d3:58:62:ac:77:15:06:ed:f7:e1:39:18:f4: 49:d8:52:92:c5:4e:44:5f:ee:32:28:69:46:3f:ea: 32:c0:5b:36:43:a6:54:41:e4:66:da:c6:65:7c:b7: 6c:9c:35:3a:0e:bf:d4:43:88:80:98:a9:e4:99:9d: 7a:44:7d:4f:d7:6b:14:5e:46:9c:3c:d7:b5:8d:1b: e5:54:15:4d:a0:fd:5c:0e:07:76:63:e5:d6:ed:2c: 9a:20:6b:68:22:43:36:9a:53:c7:59:1e:5a:e2:6a: 6a:b9:bd:cc:fc:cf:08:54:95:63:2c:59:f4:9a:2b: b9:98:5f:5b:1a:6c:09:5c:22:2f:4c:4b:0a:e0:da: 71:e8:4d:f7:1d:c0:3f:52:a7:b9:a7:5d:7f:52:de: e9:2e:99:7f:97:41:c3:6b:ce:11:e0:29:00:b3:e2: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:18:60:67:88:DF:0E:F5:D4:D6:A0:65:64:E2:B3:41:E7:45:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:de:e2:da:0e:b3:9c:27:c2:c1:c6:31:c2:a3:98:7a:a3:16: 80:d1:45:a6:4b:a4:95:29:f8:ad:73:ea:fc:76:88:d3:f8:30: 73:42:bc:ea:84:d6:e4:0b:89:f4:f4:4e:92:69:8e:3c:2c:ed: 1e:49:f9:44:90:99:e9:99:c7:1c:84:fe:9c:c8:ea:36:7a:80: eb:e5:83:00:6e:2d:81:ce:3d:0a:27:e0:c8:62:53:eb:6d:25: a9:f3:b7:2d:e8:e4:c4:56:96:7a:d4:99:03:9b:41:d4:14:3e: 7b:4b:4a:50:6e:28:fb:3b:22:35:a0:12:7d:cb:57:d6:4a:bf: f6:f4:bc:61:c8:6c:14:a7:56:d4:7b:95:35:27:b8:5b:7a:cf: 1a:a2:ce:70:52:a1:8d:21:d3:30:2f:1a:cd:9a:03:70:e4:ac: 98:07:e5:6f:47:62:77:92:ba:c5:61:3c:d4:6e:c0:3e:77:26: 10:d7:45:5d:a0:f2:4e:e9:8e:5d:fb:3c:44:b1:ad:d7:c9:8f: 4b:63:b0:a6:32:87:da:ae:66:a6:a6:69:39:f7:fa:c9:bc:4a: 25:69:7f:c3:6f:7c:72:34:d1:c9:5d:04:05:79:cb:e5:6c:a1: 28:be:5f:bd:52:9e:2f:66:ab:5a:16:cc:d4:74:20:fa:09:20: 98:03:b7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLYhunngc5JA/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MmRlM2IyYTgtYzhiYi00ZWIyLTgzNDctMDBhMWM0Nzk0YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uRfbuWSkN+5LX3/bEWq4lMMq9smUNyD70gE 5HF+bgIWC+z2nxWBPOR+fvQnpduMRlCaH/xmvLOwvtq3lmVsa+CUksKb+Ty4Deen Fe7QAcNeWDf2mEN49KeZWNNYYqx3FQbt9+E5GPRJ2FKSxU5EX+4yKGlGP+oywFs2 Q6ZUQeRm2sZlfLdsnDU6Dr/UQ4iAmKnkmZ16RH1P12sUXkacPNe1jRvlVBVNoP1c Dgd2Y+XW7SyaIGtoIkM2mlPHWR5a4mpqub3M/M8IVJVjLFn0miu5mF9bGmwJXCIv TEsK4Npx6E33HcA/Uqe5p11/Ut7pLpl/l0HDa84R4CkAs+ImZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFLGGBniN8O9dTWoGVk4rNB50VKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmM1MTk4YTItNWM3OS0z MjRhLWFlY2UtYTAzYzFiOTE5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADve4toOs5wnwsHGMcKjmHqjFoDRRaZLpJUp+K1z6vx2iNP4MHNCvOqE 1uQLifT0TpJpjjws7R5J+USQmemZxxyE/pzI6jZ6gOvlgwBuLYHOPQon4MhiU+tt Janzty3o5MRWlnrUmQObQdQUPntLSlBuKPs7IjWgEn3LV9ZKv/b0vGHIbBSnVtR7 lTUnuFt6zxqiznBSoY0h0zAvGs2aA3DkrJgH5W9HYneSusVhPNRuwD53JhDXRV2g 8k7pjl37PESxrdfJj0tjsKYyh9quZqamaTn3+sm8SiVpf8NvfHI00cldBAV5y+Vs oSi+X71Sni9mq1oWzNR0IPoJIJgDt8w= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:17 2025 by rpki-client