$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa File: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (raw, json) Hash identifier: 99kuPm/1Z9fmxZRwb2YGXfNc5SaOOJWGwqDxpLNyY58= Subject key identifier: 3A:F3:89:FF:0E:80:ED:27:20:55:6F:8C:F1:97:9D:29:99:3E:B7:49 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584B84E7806690698EF25724B980 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 65104 IP address blocks: 199.212.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:66:90:69:8e:f2:57:24:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=0c97afe8-7f7e-48a7-be58-9994d64d960f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:1a:58:81:2e:de:a4:29:ca:88:ef:d8:1f: 84:01:f2:f7:1a:05:0b:d1:84:42:dc:a4:c5:b9:ef: 76:6e:c6:39:2a:31:71:50:58:2e:cc:f8:69:28:dd: c6:dc:25:f2:c6:8a:21:67:25:3d:44:7b:ff:d8:e2: e8:8f:2d:af:27:a6:ce:3f:0c:f4:c6:38:ec:c4:e7: 73:3e:b2:04:33:65:8b:ff:26:08:6e:59:6a:d7:95: 7d:24:7c:1d:e2:8c:69:71:70:1e:a1:0b:6f:3a:f2: c5:d2:17:64:f1:45:65:9c:5d:ba:3c:82:df:d5:d3: 9e:c4:69:74:71:05:89:ac:73:f6:a8:3b:75:f4:19: 3d:70:7d:90:54:c8:91:44:32:bf:93:f1:57:c1:0d: 1c:45:eb:8b:85:30:6a:86:c3:0e:27:70:8d:b3:09: ba:1c:e5:d0:3c:43:c1:17:fe:2c:1e:28:5d:10:e0: ad:fe:67:61:fc:40:7d:9a:fe:e3:58:46:e9:3b:ab: 22:96:d0:93:9c:4e:39:6e:b5:9f:13:4f:e8:d7:dc: 7e:ff:f0:01:b8:3b:25:10:3c:84:2e:f5:ae:e5:38: 4b:1e:58:2c:d9:b4:7e:90:1e:b4:ff:5b:f3:cd:5a: 02:ae:d2:cd:3b:40:d5:e1:66:e6:7a:65:a0:95:ea: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:89:FF:0E:80:ED:27:20:55:6F:8C:F1:97:9D:29:99:3E:B7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 199.212.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ee:cd:7f:19:1f:33:95:f6:64:76:8b:b2:16:79:f0:1d:26: eb:43:b4:82:9a:da:9b:c5:58:49:12:cd:b9:b0:af:99:22:95: ed:7d:90:03:24:ef:3a:1a:5c:9f:1a:4c:6b:30:37:35:30:57: 00:91:3a:34:da:b7:f4:db:3b:22:2f:76:2e:19:40:4e:a9:c2: 58:53:89:b6:fb:7f:e9:08:6c:6b:d2:01:73:a6:0a:07:85:c8: 43:14:35:33:ce:44:c1:da:0f:4b:b9:2c:7d:17:8e:62:c1:b9: e8:e7:a8:0d:fa:dd:15:b0:a1:ff:e4:c8:61:7e:81:17:f2:d3: 15:cc:62:c5:2c:13:e0:26:ba:7c:98:cf:dc:f9:b2:da:bc:d1: cd:00:cc:d1:93:08:47:0a:da:4a:8e:9a:9a:10:e2:d8:d1:fc: 97:5a:1c:73:d2:da:f8:6a:f5:85:10:9d:63:e9:05:d0:93:41: 0e:5e:8c:d4:ab:29:93:52:0e:51:9c:a6:1a:2f:7a:d1:19:35: 5e:33:18:06:eb:af:e6:39:71:d6:70:16:95:3e:69:e6:39:93: 15:28:91:27:09:8f:f4:21:cb:5f:f4:af:58:c1:8c:0a:63:6a: bf:87:a8:40:7b:8c:95:b3:bb:9f:b3:e7:c6:cd:d5:22:cb:d0: c3:89:f1:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54BmkGmO8lckuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MGM5N2FmZTgtN2Y3ZS00OGE3LWJlNTgtOTk5NGQ2NGQ5NjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E4aWIEu3qQpyojv2B+EAfL3GgUL0YRC3KTF ue92bsY5KjFxUFguzPhpKN3G3CXyxoohZyU9RHv/2OLojy2vJ6bOPwz0xjjsxOdz PrIEM2WL/yYIbllq15V9JHwd4oxpcXAeoQtvOvLF0hdk8UVlnF26PILf1dOexGl0 cQWJrHP2qDt19Bk9cH2QVMiRRDK/k/FXwQ0cReuLhTBqhsMOJ3CNswm6HOXQPEPB F/4sHihdEOCt/mdh/EB9mv7jWEbpO6siltCTnE45brWfE0/o19x+//ABuDslEDyE LvWu5ThLHlgs2bR+kB60/1vzzVoCrtLNO0DV4WbmemWglepS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrzif8OgO0nIFVvjPGXnSmZPrdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNTU0YjUxNTMtYmQxNC0z ZmEyLWIxMWUtY2Q1MzllNmUyOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvuzX8ZHzOV9mR2i7IWefAdJutDtIKa2pvFWEkSzbmwr5kile19kAMk 7zoaXJ8aTGswNzUwVwCROjTat/TbOyIvdi4ZQE6pwlhTibb7f+kIbGvSAXOmCgeF yEMUNTPORMHaD0u5LH0XjmLBuejnqA363RWwof/kyGF+gRfy0xXMYsUsE+AmunyY z9z5stq80c0AzNGTCEcK2kqOmpoQ4tjR/JdaHHPS2vhq9YUQnWPpBdCTQQ5ejNSr KZNSDlGcphovetEZNV4zGAbrr+Y5cdZwFpU+aeY5kxUokScJj/Qhy1/0r1jBjApj ar+HqEB7jJWzu5+z58bN1SLL0MOJ8Uk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:04 2025 by rpki-client