$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa File: e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (raw, json) Hash identifier: YvybMhwm6VJ5BTRueVAe8bH0Gb9Uhtz93moV6F7Aa50= Subject key identifier: C1:C0:13:A1:BF:0B:33:47:94:F5:3A:F8:A0:D5:E9:01:38:5A:34:6C Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584B84E78041AA6582F95A8B5680 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 65104 IP address blocks: 199.212.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:41:aa:65:82:f9:5a:8b:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f0af9f9d-c86a-4648-9c61-9cc5868f5c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:f1:cc:ac:37:d0:fa:59:51:8a:10:38:35: c3:08:e8:f4:e3:d4:68:6f:0f:dc:04:6c:be:67:c9: 2e:f5:21:7b:18:1f:81:55:f2:81:e4:53:a2:19:29: 80:f7:eb:2d:c3:0e:83:e4:53:d1:8c:c2:8d:a9:9d: 86:8a:9b:05:c6:65:61:fb:89:ff:77:41:c9:9b:46: be:60:ef:74:ea:48:e5:cc:ba:6e:38:c8:46:70:78: 9a:9a:b7:48:10:e2:8b:4b:b0:24:c9:53:5a:fd:55: 6b:0c:fd:bc:b4:30:90:a7:f0:59:6a:6a:1b:48:48: 24:fa:40:22:95:01:fc:84:f1:d4:78:1d:4c:bb:a5: 72:c8:8a:53:1f:2b:a8:46:cc:97:9e:e7:e3:47:dd: af:a8:e2:7b:fb:1b:7a:68:b2:83:5d:be:86:0f:a0: 34:0d:11:a2:7e:df:3f:c9:ca:29:07:bb:33:87:58: a7:8e:9a:ab:d5:55:a1:3f:9d:56:34:87:14:3f:95: 76:58:24:5d:6d:cd:23:da:67:21:df:db:59:da:3d: 5e:67:e0:a6:b1:79:3c:49:56:cc:89:ed:b1:1e:98: 8e:cb:22:66:0f:fe:b0:e5:7a:c7:f3:82:c3:15:d4: f1:cc:d9:ac:24:16:18:54:06:36:34:74:a7:51:51: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C0:13:A1:BF:0B:33:47:94:F5:3A:F8:A0:D5:E9:01:38:5A:34:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 199.212.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:cd:20:91:6f:8f:2b:36:8e:0c:a7:04:70:ae:da:ed:eb: ef:63:83:cc:b0:09:a1:05:24:43:7f:d4:23:f7:c7:2f:d2:92: 9a:b8:28:c4:5a:ce:34:32:c0:96:51:08:e7:b2:00:9c:eb:b2: c2:45:e5:df:64:a8:94:f9:24:20:c9:24:29:28:b8:63:6c:d6: 24:8c:3c:80:7a:c2:69:e5:d1:24:74:82:9e:34:c4:cc:cb:bc: 32:ac:1d:16:66:8d:b4:1f:a7:c1:55:6d:95:77:5a:9c:d6:f9: 0d:bd:71:b3:d2:16:2d:88:0e:58:bc:fd:18:d6:ce:01:1e:ba: 30:8d:6c:c1:4f:6c:36:27:bc:90:4d:77:61:29:82:1d:04:35: ad:e4:58:e5:1e:93:e5:b2:d6:37:f7:0b:87:f7:4b:20:1f:29: cf:5b:aa:a5:fb:23:ce:24:fc:15:d3:a2:62:03:28:02:d2:75: a8:81:13:81:f3:09:52:c0:e6:17:bd:94:13:24:f2:d6:95:8c: 18:64:e2:55:ad:00:e6:ed:39:83:75:85:7e:82:ad:0c:7e:15: f8:14:39:47:e3:c6:e7:0a:3f:61:60:ac:de:bf:b2:34:9f:1d: 18:61:c1:e8:72:73:b1:9b:fe:13:5d:8e:10:4b:8c:f4:82:3c: b1:2e:0e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54BBqmWC+VqLVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjBhZjlmOWQtYzg2YS00NjQ4LTljNjEtOWNjNTg2OGY1YzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsPxzKw30PpZUYoQODXDCOj049Robw/cBGy+ Z8ku9SF7GB+BVfKB5FOiGSmA9+stww6D5FPRjMKNqZ2GipsFxmVh+4n/d0HJm0a+ YO906kjlzLpuOMhGcHiamrdIEOKLS7AkyVNa/VVrDP28tDCQp/BZamobSEgk+kAi lQH8hPHUeB1Mu6VyyIpTHyuoRsyXnufjR92vqOJ7+xt6aLKDXb6GD6A0DRGift8/ ycopB7szh1injpqr1VWhP51WNIcUP5V2WCRdbc0j2mch39tZ2j1eZ+CmsXk8SVbM ie2xHpiOyyJmD/6w5XrH84LDFdTxzNmsJBYYVAY2NHSnUVEhmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHAE6G/CzNHlPU6+KDV6QE4WjRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvZTViMzEyNTAtNGE1My0z YzdlLTliMjItNjVhMzUyNGI1NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz6zSCRb48rNo4MpwRwrtrt6+9jg8ywCaEFJEN/1CP3xy/Skpq4KMRa zjQywJZRCOeyAJzrssJF5d9kqJT5JCDJJCkouGNs1iSMPIB6wmnl0SR0gp40xMzL vDKsHRZmjbQfp8FVbZV3WpzW+Q29cbPSFi2IDli8/RjWzgEeujCNbMFPbDYnvJBN d2Epgh0ENa3kWOUek+Wy1jf3C4f3SyAfKc9bqqX7I84k/BXTomIDKALSdaiBE4Hz CVLA5he9lBMk8taVjBhk4lWtAObtOYN1hX6CrQx+FfgUOUfjxucKP2FgrN6/sjSf HRhhwehyc7Gb/hNdjhBLjPSCPLEuDoI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:53 2025 by rpki-client