$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa File: 2340e8a8-1dd4-36c3-827c-cb73821dd396.roa (raw, json) Hash identifier: XiFKDXjg67tI4ES6HmFSbUM15AIx93cfLT+nVVxnvq8= Subject key identifier: 3F:4D:B1:D3:94:4D:C1:13:F2:4A:E9:9B:C0:52:BE:C6:4B:26:E3:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072F4C66F29A57B80DF7C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 99.199.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2f:4c:66:f2:9a:57:b8:0d:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=8b756a0a-3074-460e-bbca-ea11d63fbf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:5a:f6:4d:89:51:f9:0b:82:48:16:78:f3: 82:25:a4:2a:c2:b3:8b:04:17:41:c6:80:71:1e:4d: b1:d0:27:07:d1:4e:a0:82:a1:4e:f3:8f:ad:08:b3: a4:ee:9f:84:3d:f8:3f:02:81:7c:4f:4e:0a:c6:e2: ed:0b:00:62:ef:18:86:02:e7:f4:71:a9:7c:51:a3: 36:bd:ff:44:94:51:e7:2f:16:7a:c5:e8:64:e2:fd: 88:f8:db:f0:6d:99:aa:e4:a0:6e:a4:d8:aa:fa:28: e2:5a:22:6c:df:6d:8a:e9:22:1c:4b:be:ca:38:7e: 5f:c5:dc:40:cd:f4:2a:cc:b4:a7:d4:5d:3c:b5:62: 37:f6:a2:46:91:d8:5c:8e:64:5e:3b:9a:cf:25:88: 37:a2:0c:98:40:a7:a8:3c:63:35:d0:6a:c5:97:21: 0b:7d:6d:8d:9e:10:80:a6:35:c9:1d:68:ee:92:60: 75:56:ab:23:03:44:80:e3:55:bb:1a:99:f8:40:c7: 6c:45:fb:91:c1:65:46:21:d5:9e:d2:5f:ad:1e:64: 8e:6a:ff:73:c1:22:46:69:fe:01:e4:ec:a9:dd:0b: 0c:c2:69:2a:43:3b:49:51:0a:9f:d3:6e:21:b1:85: a5:cb:5b:6f:50:51:b6:34:2f:4f:36:67:76:f4:af: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:B1:D3:94:4D:C1:13:F2:4A:E9:9B:C0:52:BE:C6:4B:26:E3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ee:49:5b:48:53:24:82:a9:31:0d:dc:b4:08:d2:5d:c9:03:3b: ae:e8:58:c4:8d:14:ff:73:f0:3b:1a:cc:54:ff:27:75:e8:f2: d6:3f:30:8f:a2:0f:e2:78:26:1e:ff:4e:1a:3c:7a:dc:53:c2: 4e:66:76:41:f8:46:0f:5e:aa:98:e2:7d:d5:f6:c5:fe:16:26: c2:5e:90:27:d8:b3:a2:70:15:d4:1c:47:a9:57:b2:6a:33:b5: f8:23:48:b6:c8:4f:bd:e3:a8:65:76:e7:e3:da:62:b5:e8:d6: e0:d9:bf:6e:26:fb:bf:f2:dd:a9:46:b8:30:71:47:c7:9b:de: 27:9b:a6:ee:e7:ec:f4:c6:5b:26:d9:c9:87:15:b1:87:04:ef: 3c:a3:95:7d:ec:88:10:d0:d0:22:67:dc:59:85:b2:e2:12:bf: d4:d3:62:17:70:9e:8f:63:10:7c:aa:34:c2:d1:9f:52:73:ef: 0b:7b:98:37:73:38:b0:2f:9e:64:dc:93:a3:04:cb:39:d9:23: 08:65:e3:26:01:67:87:67:4b:1d:9f:4a:9e:89:8f:74:06:07: b8:33:e2:6f:f7:7d:6d:00:db:8c:6e:35:fa:0f:fa:c1:c3:e7: 0d:98:60:3c:b6:15:b8:28:3c:77:87:2f:ef:e3:07:29:61:62: 68:d5:3b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy9MZvKaV7gN98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OGI3NTZhMGEtMzA3NC00NjBlLWJiY2EtZWExMWQ2M2ZiZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloxa9k2JUfkLgkgWePOCJaQqwrOLBBdBxoBx Hk2x0CcH0U6ggqFO84+tCLOk7p+EPfg/AoF8T04KxuLtCwBi7xiGAuf0cal8UaM2 vf9ElFHnLxZ6xehk4v2I+NvwbZmq5KBupNiq+ijiWiJs322K6SIcS77KOH5fxdxA zfQqzLSn1F08tWI39qJGkdhcjmReO5rPJYg3ogyYQKeoPGM10GrFlyELfW2NnhCA pjXJHWjukmB1VqsjA0SA41W7Gpn4QMdsRfuRwWVGIdWe0l+tHmSOav9zwSJGaf4B 5Oyp3QsMwmkqQztJUQqf024hsYWly1tvUFG2NC9PNmd29K9W+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9NsdOUTcET8krpm8BSvsZLJuPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0MGU4YTgtMWRkNC0z NmMzLTgyN2MtY2I3MzgyMWRkMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY8cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO5JW0hTJIKpMQ3ctAjSXckDO67oWMSNFP9z8DsazFT/J3Xo8tY/MI+i D+J4Jh7/Tho8etxTwk5mdkH4Rg9eqpjifdX2xf4WJsJekCfYs6JwFdQcR6lXsmoz tfgjSLbIT73jqGV25+PaYrXo1uDZv24m+7/y3alGuDBxR8eb3iebpu7n7PTGWybZ yYcVsYcE7zyjlX3siBDQ0CJn3FmFsuISv9TTYhdwno9jEHyqNMLRn1Jz7wt7mDdz OLAvnmTck6MEyznZIwhl4yYBZ4dnSx2fSp6Jj3QGB7gz4m/3fW0A24xuNfoP+sHD 5w2YYDy2FbgoPHeHL+/jBylhYmjVOxk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:50 2025 by rpki-client