$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa File: 0fa850de-079b-3985-8c4e-c1c41937a99b.roa (raw, json) Hash identifier: 0+vyLeR4guKpe1ucSQWpJk67oNLhBmNtEBQt+MYR620= Subject key identifier: C2:1E:EE:80:16:2B:D8:61:61:B5:B4:69:F7:2D:A6:0C:25:F4:86:31 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584B821E1F7EE01DDE6596169380 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 199.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1f:7e:e0:1d:de:65:96:16:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=5a9a21c0-f071-4136-b0b4-060ebd15e620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:82:ce:9a:07:f8:de:40:e1:0e:c8:fe:43: f4:0f:fc:d7:03:50:ec:37:a9:63:24:1b:3d:04:ff: 8a:d1:68:44:73:99:19:e0:f8:89:8d:7f:16:24:05: af:8c:27:20:eb:31:6b:d3:66:28:3b:16:87:8c:d5: 8d:ab:34:0e:55:91:81:b7:32:c4:87:e8:ed:e8:41: 0a:7a:71:03:da:0d:2b:a9:d7:9f:5d:05:3e:cb:3f: 65:10:07:fc:9b:18:0c:c4:ed:dc:71:c2:1e:ed:36: 8c:38:53:5b:8a:f7:7b:f9:0e:38:e2:25:7c:64:b8: b6:48:31:da:53:b4:c6:a4:5a:bd:ed:4c:a3:7b:e9: c6:64:f1:75:33:46:da:25:74:b0:ef:05:b6:d6:df: 77:00:df:7e:c5:f8:3f:ef:61:6b:77:d6:6a:c2:96: 27:b0:fe:61:fa:4f:7e:a4:3d:6c:b5:4c:61:49:1b: fb:7c:08:f2:7d:7a:f9:7d:9f:17:53:af:c9:dc:e5: 5c:90:d0:3d:3b:13:14:33:6d:29:83:19:49:0a:3e: e2:2b:de:8b:e6:85:22:ab:1f:7c:9f:fd:d7:20:04: e2:6f:33:a7:2a:78:94:4b:31:b4:69:c8:d1:37:8b: 2a:bb:5d:0f:4e:98:3e:6d:21:f1:75:44:96:62:d2: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:EE:80:16:2B:D8:61:61:B5:B4:69:F7:2D:A6:0C:25:F4:86:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d6:71:93:fa:18:ff:12:25:37:cb:87:80:8f:41:32:5a:12: 76:ff:6d:ab:45:da:00:c9:32:c1:95:2b:9a:16:ea:8d:be:b8: e0:62:93:85:db:11:71:bf:17:47:4c:ef:38:93:09:bd:3a:97: cb:55:6d:6b:e9:f9:91:66:3e:46:57:4b:e9:f0:47:97:92:49: 80:b4:71:f8:77:8d:46:34:46:d6:85:fd:35:3e:03:64:9d:e9: a8:09:a3:90:b3:84:d9:4c:0e:3c:ec:56:ce:db:be:d7:ea:96: 83:e9:f4:78:18:d4:b3:ad:e2:89:b1:2c:73:03:f4:e7:8b:a1: 05:9e:e0:7b:5c:88:74:70:88:b7:33:40:13:4a:72:5f:dc:10: d3:5e:2d:2b:ff:5c:4c:67:67:f2:2c:5a:fd:7f:d7:54:eb:7c: 40:67:e3:2a:96:74:bc:92:1b:20:e7:cd:52:6f:9e:3f:44:83: 32:39:5d:86:b2:f1:e0:09:15:bc:e9:91:f5:02:87:5d:05:e1: 7b:9e:ba:a1:30:31:64:d8:31:5d:a4:ef:1c:d3:fb:c7:5f:4b: bf:69:32:22:63:98:d9:aa:5e:3b:b6:2a:79:1b:f3:32:c1:62: 0a:99:36:9b:ab:59:60:6b:00:ea:33:4f:3a:c2:b2:22:d4:2d: ee:05:7a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh9+4B3eZZYWk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NWE5YTIxYzAtZjA3MS00MTM2LWIwYjQtMDYwZWJkMTVlNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXuCzpoH+N5A4Q7I/kP0D/zXA1DsN6ljJBs9 BP+K0WhEc5kZ4PiJjX8WJAWvjCcg6zFr02YoOxaHjNWNqzQOVZGBtzLEh+jt6EEK enED2g0rqdefXQU+yz9lEAf8mxgMxO3cccIe7TaMOFNbivd7+Q444iV8ZLi2SDHa U7TGpFq97Uyje+nGZPF1M0baJXSw7wW21t93AN9+xfg/72Frd9ZqwpYnsP5h+k9+ pD1stUxhSRv7fAjyfXr5fZ8XU6/J3OVckNA9OxMUM20pgxlJCj7iK96L5oUiqx98 n/3XIATibzOnKniUSzG0acjRN4squ10PTpg+bSHxdUSWYtKrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIe7oAWK9hhYbW0afctpgwl9IYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMGZhODUwZGUtMDc5Yi0z OTg1LThjNGUtYzFjNDE5MzdhOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHWcZP6GP8SJTfLh4CPQTJaEnb/batF2gDJMsGVK5oW6o2+uOBik4Xb EXG/F0dM7ziTCb06l8tVbWvp+ZFmPkZXS+nwR5eSSYC0cfh3jUY0RtaF/TU+A2Sd 6agJo5CzhNlMDjzsVs7bvtfqloPp9HgY1LOt4omxLHMD9OeLoQWe4HtciHRwiLcz QBNKcl/cENNeLSv/XExnZ/IsWv1/11TrfEBn4yqWdLySGyDnzVJvnj9EgzI5XYay 8eAJFbzpkfUCh10F4XueuqEwMWTYMV2k7xzT+8dfS79pMiJjmNmqXju2Knkb8zLB YgqZNpurWWBrAOozTzrCsiLULe4FeoI= -----END CERTIFICATE-----Generated at Mon Oct 20 01:22:10 2025 by rpki-client