$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa File: 0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa (raw, json) Hash identifier: /4Q8muUDLrR6vHU5av/O0uWDESHFPifdcuYU6Hr5cQI= Subject key identifier: F1:BE:37:0A:55:79:38:49:4C:2A:38:AF:AE:12:9A:F8:19:72:6C:EA Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Certificate serial: 010D0C9F4328584B3DB6FA47DB2ECA7D708F7D80 Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.59.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:fa:47:db:2e:ca:7d:70:8f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5f173e37-1f9c-43ff-8aaf-fc33e099fddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:5a:5f:f3:0d:28:6a:b7:28:33:5c:f3:dc: 99:a8:b7:4d:f2:4f:04:dd:ec:24:f4:0d:a5:82:45: 52:c6:de:6b:ed:d6:4c:39:04:83:be:c4:2d:d5:74: 6c:94:a7:6b:70:ce:77:3e:28:83:be:57:de:21:b9: 5e:8a:a5:6e:13:c1:ba:fa:84:49:e1:ac:7d:e0:4a: cf:93:a0:e1:b8:67:18:c1:c5:70:c0:d8:27:f8:0c: 8d:66:7c:74:1a:05:b8:f8:c5:92:25:42:31:95:a3: 82:f0:fd:27:d2:c3:02:68:ce:f6:bd:b2:4b:66:be: b7:52:9c:07:5e:95:49:fa:4b:72:5c:11:ab:3b:2a: ab:70:b4:09:fd:ba:57:25:85:df:f3:a6:51:70:68: 79:aa:f2:8f:44:d8:19:9d:c7:88:69:64:d1:06:2e: 3f:98:18:a4:14:85:46:fd:ac:e7:e4:a6:a8:ca:79: d7:24:32:96:ff:6a:64:08:ba:21:f2:a9:6b:83:5c: ce:1b:c5:cd:ea:ae:d7:b2:c9:d2:34:b8:0b:16:8e: ff:c7:e5:f2:c8:f9:b8:85:1f:94:db:f9:ba:0e:ec: a9:ef:ce:33:1b:35:00:fc:2e:f3:9b:9c:9a:60:1d: 40:d6:ba:d7:a2:9e:29:82:20:9e:7d:1b:bd:ad:7a: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BE:37:0A:55:79:38:49:4C:2A:38:AF:AE:12:9A:F8:19:72:6C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl X509v3 Authority Key Identifier: keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer sbgp-ipAddrBlock: critical IPv4: 199.59.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:08:32:6c:4d:b0:72:94:f1:49:53:7e:55:6f:a0:61:63:07: ef:93:f4:f0:5b:c2:68:cf:54:e9:db:92:54:56:68:12:2a:e6: 72:40:48:8e:6f:8d:8c:eb:0f:8c:fb:0e:85:85:96:6b:d2:03: 9f:4e:0b:c1:cf:70:1c:75:3a:e9:35:57:57:11:52:5a:96:93: 3c:8a:07:86:c0:07:67:ad:2d:4d:80:84:2a:7f:5c:a7:f6:b3: f5:14:35:66:3d:f1:b4:bd:59:52:29:46:e9:21:b6:13:59:59: 66:41:da:38:0a:bd:56:9c:7a:39:ce:79:4a:2c:cc:80:a9:7e: a3:03:4e:73:80:12:03:37:78:65:7a:dc:32:7f:da:ef:24:8b: 7e:97:2f:d3:24:c8:b7:cb:cf:7b:d3:c0:83:dd:fa:bf:36:7a: 83:a3:7c:ed:39:a5:32:70:44:fe:df:0a:81:be:e8:27:3d:8f: d3:6a:95:7d:8d:06:93:27:a1:83:93:0a:44:7e:ff:27:76:5b: 77:51:28:e1:3f:92:a7:c6:99:bc:f4:fe:f8:dc:8a:65:4c:3e: 5d:26:d0:54:6d:28:f0:2e:bd:d5:e1:c0:10:5c:87:b0:45:a2: b3:ba:a5:d0:88:19:f9:48:95:66:ad:dd:0d:96:1f:e4:53:3b: ac:34:e8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvpH2y7KfXCPfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi ZjY4MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWYxNzNlMzctMWY5Yy00M2ZmLThhYWYtZmMzM2UwOTlmZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr1aX/MNKGq3KDNc89yZqLdN8k8E3ewk9A2l gkVSxt5r7dZMOQSDvsQt1XRslKdrcM53PiiDvlfeIbleiqVuE8G6+oRJ4ax94ErP k6DhuGcYwcVwwNgn+AyNZnx0GgW4+MWSJUIxlaOC8P0n0sMCaM72vbJLZr63UpwH XpVJ+ktyXBGrOyqrcLQJ/bpXJYXf86ZRcGh5qvKPRNgZnceIaWTRBi4/mBikFIVG /azn5KaoynnXJDKW/2pkCLoh8qlrg1zOG8XN6q7XssnSNLgLFo7/x+XyyPm4hR+U 2/m6Duyp784zGzUA/C7zm5yaYB1A1rrXop4pgiCefRu9rXosjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG+NwpVeThJTCo4r64SmvgZcmzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvMGE0ZWE0N2MtMTE1MS0z NmUxLTlmMWYtNTFmZmY2MjllYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4 YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQIMmxNsHKU8UlTflVvoGFjB++T9PBbwmjPVOnbklRWaBIq5nJASI5v jYzrD4z7DoWFlmvSA59OC8HPcBx1Ouk1V1cRUlqWkzyKB4bAB2etLU2AhCp/XKf2 s/UUNWY98bS9WVIpRukhthNZWWZB2jgKvVacejnOeUoszICpfqMDTnOAEgM3eGV6 3DJ/2u8ki36XL9MkyLfLz3vTwIPd+r82eoOjfO05pTJwRP7fCoG+6Cc9j9NqlX2N BpMnoYOTCkR+/yd2W3dRKOE/kqfGmbz0/vjcimVMPl0m0FRtKPAuvdXhwBBch7BF orO6pdCIGflIlWat3Q2WH+RTO6w06LA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:58 2025 by rpki-client