$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa File: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (raw, json) Hash identifier: mlS9oEbUQf8RAOFeZizzR6oQjGXYKsuHw9FOkBVSeXc= Subject key identifier: D2:29:39:6E:74:4F:05:08:EC:0F:E5:B1:EA:B7:00:A5:67:37:8E:2B Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584B84E78053084A854E94B17280 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 26677 IP address blocks: 199.212.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:53:08:4a:85:4e:94:b1:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ae0d59ed-a707-4913-89e7-a279e98d159c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:5d:a0:4b:bb:52:40:6d:27:53:43:8e:9c: 45:ea:6b:cd:9e:db:64:97:54:4d:a7:94:bb:fb:c5: 59:e7:da:0f:83:d1:8e:33:ef:af:f8:38:d0:a5:05: 52:b4:5b:9f:82:e0:1f:d8:0b:28:e5:12:a1:af:b4: a6:4e:4d:bf:dd:67:c2:0e:4c:bc:b3:bc:65:f1:63: d3:2c:85:8e:a1:5d:20:79:d0:56:2a:7c:b7:04:7c: c0:d1:91:82:19:1f:6f:ee:8a:50:a0:b8:2c:e8:81: e4:4a:12:4f:f7:42:3b:9f:ca:13:6a:60:8f:de:cf: d7:c9:6f:ea:f4:28:f3:3d:fe:64:f4:6b:45:42:5e: 51:1d:52:3a:bb:7a:97:a8:e0:8e:d3:fa:49:2f:cc: ee:a4:4f:4c:09:6c:2e:4f:3e:e9:dd:91:56:34:cc: da:a3:10:08:03:13:16:a0:51:9f:21:51:92:99:3c: 62:76:21:f5:35:84:7a:48:09:83:e7:22:3c:f2:9d: e2:61:70:c4:34:2c:a9:3b:ee:dd:51:bd:73:f3:19: d9:24:a8:56:81:35:fb:50:7f:0a:80:2f:01:e4:90: 42:0a:84:17:c8:a9:7c:42:31:fc:81:44:7c:d8:d0: 53:05:16:d1:60:c7:91:6c:ce:bb:8b:7d:b2:f4:5b: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:39:6E:74:4F:05:08:EC:0F:E5:B1:EA:B7:00:A5:67:37:8E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 199.212.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:b1:c9:28:04:a0:68:54:5d:b5:a7:65:56:f1:9d:68:09: 07:15:ba:54:6b:53:cc:45:b4:6b:5b:da:89:2e:c4:0f:b8:bd: 36:78:77:52:89:d3:40:68:e0:d1:f3:e8:7e:74:65:d8:9a:73: 94:14:d2:51:8d:b8:c4:1a:5b:8a:9a:28:dc:f7:de:75:c0:33: 92:72:b9:95:2c:ea:93:3d:fd:ec:58:be:0b:e5:eb:c3:b7:20: ba:32:d1:4a:75:ad:93:01:ba:2b:26:e8:4a:da:ce:c3:2e:6a: 7d:1c:4f:55:ac:75:f3:ac:4a:07:17:92:71:76:db:ae:11:bc: 88:fe:a6:5e:44:89:2e:c0:01:d1:c6:ca:bb:82:db:4f:ad:1e: 57:06:55:d7:27:da:7e:92:27:ff:36:5b:f6:79:f1:82:76:7c: 39:09:eb:7d:f9:ff:6d:eb:b6:37:12:89:ee:21:bd:f2:03:3f: 8c:73:91:7e:18:f1:7a:74:60:f2:cc:6d:60:bd:b0:d7:83:7b: eb:57:a7:78:af:42:d8:c8:f9:bf:9e:fd:a5:1a:67:fb:fd:0d: b8:9c:c6:54:be:9e:66:d4:9f:40:d3:86:fb:5a:29:e5:f9:dd: 5d:98:c3:69:ec:7b:cf:bf:48:d9:11:c3:7a:3d:43:6f:0b:45: f2:97:5d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54BTCEqFTpSxcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWUwZDU5ZWQtYTcwNy00OTEzLTg5ZTctYTI3OWU5OGQxNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc5doEu7UkBtJ1NDjpxF6mvNnttkl1RNp5S7 +8VZ59oPg9GOM++v+DjQpQVStFufguAf2Aso5RKhr7SmTk2/3WfCDky8s7xl8WPT LIWOoV0gedBWKny3BHzA0ZGCGR9v7opQoLgs6IHkShJP90I7n8oTamCP3s/XyW/q 9CjzPf5k9GtFQl5RHVI6u3qXqOCO0/pJL8zupE9MCWwuTz7p3ZFWNMzaoxAIAxMW oFGfIVGSmTxidiH1NYR6SAmD5yI88p3iYXDENCypO+7dUb1z8xnZJKhWgTX7UH8K gC8B5JBCCoQXyKl8QjH8gUR82NBTBRbRYMeRbM67i32y9FvwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIpOW50TwUI7A/lseq3AKVnN44rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNmY2MmQ1ZjAtNjc0Mi0z ODdiLThmNzYtMmZkMWMzYWQ0OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP/sckoBKBoVF21p2VW8Z1oCQcVulRrU8xFtGtb2okuxA+4vTZ4d1KJ 00Bo4NHz6H50Zdiac5QU0lGNuMQaW4qaKNz33nXAM5JyuZUs6pM9/exYvgvl68O3 ILoy0Up1rZMBuism6ErazsMuan0cT1WsdfOsSgcXknF2264RvIj+pl5EiS7AAdHG yruC20+tHlcGVdcn2n6SJ/82W/Z58YJ2fDkJ6335/23rtjcSie4hvfIDP4xzkX4Y 8Xp0YPLMbWC9sNeDe+tXp3ivQtjI+b+e/aUaZ/v9DbicxlS+nmbUn0DThvtaKeX5 3V2Yw2nse8+/SNkRw3o9Q28LRfKXXbM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:50 2025 by rpki-client