$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/a8565368-cc11-3c52-b9d4-89901a547c14.roa File: a8565368-cc11-3c52-b9d4-89901a547c14.roa (raw, json) Hash identifier: JmGEEyabFLXE8oKZKGY9XG7TkwP6LNL0j+OK7WN31G4= Subject key identifier: 41:D3:A3:32:1F:D3:F8:D3:4C:6A:AA:51:38:91:B4:72:49:75:D2:C6 Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Certificate serial: 010D0C9F4328584B434C595781D59F645431DBC0 Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/a8565368-cc11-3c52-b9d4-89901a547c14.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 199.59.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:59:57:81:d5:9f:64:54:31:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6822e1f0-44ff-4ac4-817a-81c11d90cbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:1e:2b:f0:ee:f7:4f:17:1d:12:4a:84:1c: 38:a7:5d:80:4b:2e:3b:e6:c2:89:af:72:6f:de:41: 86:c2:72:40:fa:6f:ee:fc:d0:77:78:e9:a2:a9:0a: bb:76:57:3c:e9:4d:7a:e0:fb:37:cf:bd:4e:0a:a7: 6d:a7:33:8e:6e:1a:09:eb:f3:34:d5:6c:12:48:a6: b5:f5:b3:8c:54:61:aa:a8:50:4c:fb:37:5a:bb:f0: 1d:16:6a:cb:c4:bb:82:20:d9:22:f8:dd:88:27:6a: 55:a2:1a:ee:e4:be:1b:27:44:43:c8:4c:45:5d:df: 27:37:e0:10:50:03:bd:79:cd:5d:8c:27:dd:16:e8: 14:29:d3:48:d0:26:82:56:a6:17:ff:0a:67:38:2a: 23:ae:2f:93:d4:b3:75:9d:74:32:38:fc:d3:a0:2a: a6:d5:52:77:59:79:86:2b:fe:58:b1:f1:a4:9e:98: 7d:df:44:61:7d:2f:ee:e9:d4:f7:f8:93:c5:62:a4: 9c:c9:72:99:52:cc:9f:fe:61:cc:6a:e1:5e:e7:25: 64:a5:2e:dc:65:09:ec:5f:b8:a3:c5:b5:54:7d:d7: 1f:20:f4:ba:ac:b8:57:1d:5a:a0:84:03:9d:b8:04: fc:12:14:c7:62:5e:31:d9:e5:69:84:dc:50:77:40: c2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D3:A3:32:1F:D3:F8:D3:4C:6A:AA:51:38:91:B4:72:49:75:D2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/a8565368-cc11-3c52-b9d4-89901a547c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl X509v3 Authority Key Identifier: keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer sbgp-ipAddrBlock: critical IPv4: 199.59.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:81:cc:b5:b5:22:87:16:f6:42:e1:9d:cd:5a:ff:d5:e8:e4: 81:b3:13:63:d4:f7:ab:4f:45:0c:42:45:c7:f9:02:8b:f8:3c: b9:0f:71:20:37:e9:d4:25:ea:f7:51:f1:58:bd:3e:d0:42:27: f1:93:3b:3f:d8:58:66:23:72:8f:a5:d3:83:2e:dd:d2:85:e7: 51:fc:2b:79:9f:7b:05:c1:5c:4d:db:ef:7d:63:99:61:fd:4e: 7f:c9:fa:f6:53:b3:09:16:e5:a5:cf:40:4f:41:a9:0f:b7:a2: 28:db:00:27:dc:6c:e1:0b:24:2b:66:8f:75:b1:a6:70:f4:9c: 98:f2:9d:ef:ed:25:49:89:0f:cf:a6:3d:da:48:17:5f:5e:94: 47:5c:79:a5:d5:81:c0:55:59:37:c4:db:48:af:d3:b8:c4:86: 3c:5b:c3:45:3b:b3:56:f3:fc:83:49:cf:fd:f3:c0:12:97:dc: 13:82:39:bc:4b:51:43:b6:c6:36:01:6f:0e:0b:47:33:af:a5: 47:dd:67:66:67:8e:82:05:b2:01:7f:05:28:36:0d:d1:69:dc: 52:a5:be:3a:07:62:e5:54:74:6b:8e:bb:c1:1a:64:86:59:4b: db:69:b7:a2:9c:4d:05:4e:e9:5e:71:7e:a3:96:52:f6:e6:be: 90:42:6f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFlXgdWfZFQx28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi ZjY4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjgyMmUxZjAtNDRmZi00YWM0LTgxN2EtODFjMTFkOTBjYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmUeK/Du908XHRJKhBw4p12ASy475sKJr3Jv 3kGGwnJA+m/u/NB3eOmiqQq7dlc86U164Ps3z71OCqdtpzOObhoJ6/M01WwSSKa1 9bOMVGGqqFBM+zdau/AdFmrLxLuCINki+N2IJ2pVohru5L4bJ0RDyExFXd8nN+AQ UAO9ec1djCfdFugUKdNI0CaCVqYX/wpnOCojri+T1LN1nXQyOPzToCqm1VJ3WXmG K/5YsfGknph930RhfS/u6dT3+JPFYqScyXKZUsyf/mHMauFe5yVkpS7cZQnsX7ij xbVUfdcfIPS6rLhXHVqghAOduAT8EhTHYl4x2eVphNxQd0DC5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHTozIf0/jTTGqqUTiRtHJJddLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvYTg1NjUzNjgtY2MxMS0z YzUyLWI5ZDQtODk5MDFhNTQ3YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4 YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6BzLW1IocW9kLhnc1a/9Xo5IGzE2PU96tPRQxCRcf5Aov4PLkPcSA3 6dQl6vdR8Vi9PtBCJ/GTOz/YWGYjco+l04Mu3dKF51H8K3mfewXBXE3b731jmWH9 Tn/J+vZTswkW5aXPQE9BqQ+3oijbACfcbOELJCtmj3WxpnD0nJjyne/tJUmJD8+m PdpIF19elEdceaXVgcBVWTfE20iv07jEhjxbw0U7s1bz/INJz/3zwBKX3BOCObxL UUO2xjYBbw4LRzOvpUfdZ2ZnjoIFsgF/BSg2DdFp3FKlvjoHYuVUdGuOu8EaZIZZ S9tpt6KcTQVO6V5xfqOWUvbmvpBCbyI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:55 2025 by rpki-client