$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa File: 609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa (raw, json) Hash identifier: QVe/BGUZZ1U4qULVs01FB47i01RDMnXX5YLMnbuadNI= Subject key identifier: C4:55:80:B3:7C:B4:F9:41:4A:FC:37:E2:42:E2:0E:1C:C6:27:B4:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE09B30D5E5E18E8B07C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 199.223.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:09:b3:0d:5e:5e:18:e8:b0:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4d4329fc-5ea3-43ab-9945-269af7988590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:0c:44:3f:c0:5e:84:84:93:70:9a:18:b9: f0:ba:62:20:93:c3:7e:59:e3:1d:e7:aa:b7:fa:ff: d7:4c:e1:14:74:11:b8:aa:90:1a:5b:4b:06:8d:fd: 6c:8d:a7:bb:3d:e8:43:cf:b4:1c:8d:3f:8d:17:35: 9e:77:eb:41:73:29:fb:a7:0b:25:5f:6b:cc:22:ff: 72:c0:3e:d2:96:52:eb:f2:31:2c:f3:e4:4e:8c:bb: 63:97:d8:0d:98:14:42:20:64:da:cf:52:db:c6:f5: cf:c5:0a:1f:59:83:26:5e:3c:13:f6:57:11:1c:d4: 32:b3:8e:04:0f:e5:7a:28:43:be:ba:c4:bf:ac:82: 10:51:6e:2a:09:0b:00:b3:d6:07:5e:15:9d:7a:f3: 1d:fa:de:62:7f:f4:16:ec:c7:8c:62:58:0f:09:53: 3b:44:96:d1:df:a3:2a:e0:a2:19:8a:4c:a3:96:1e: 21:0e:bf:10:44:cc:56:9d:8a:f3:39:25:35:4e:83: 00:28:7f:a1:db:89:d2:19:7b:cb:b4:47:a7:f0:3f: 4c:61:36:39:4b:5b:e2:19:c6:ce:7e:31:d3:e6:72: da:96:00:86:2a:0c:f1:a9:9b:19:63:9d:e1:d1:8a: 77:5b:88:be:99:bf:43:da:ba:85:8a:dc:4f:ff:29: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:80:B3:7C:B4:F9:41:4A:FC:37:E2:42:E2:0E:1C:C6:27:B4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:31:50:12:a6:59:22:3b:c2:5c:a5:7c:b9:7a:0a:d0:b7:01: 34:bf:ff:3a:0c:54:a4:eb:f7:b5:57:87:40:86:37:68:81:02: 18:e8:08:bc:a6:e5:64:20:dc:12:36:01:01:90:ec:58:5c:3a: 2d:00:77:ad:94:72:2b:73:a1:b6:18:75:c6:d8:08:fe:6c:a3: 89:f8:5c:53:3c:8c:42:74:2b:a3:e9:af:e7:3c:4a:1e:7f:6f: 2b:b4:13:72:bd:f6:a8:0b:a3:11:bf:64:6f:b3:e2:3e:ad:77: 7c:02:bc:b5:2b:4e:8c:90:6f:01:8a:8d:89:39:ba:12:a5:1c: 16:cb:0c:aa:9e:bb:f6:4e:20:11:3b:af:d7:5c:de:af:04:3c: 2d:4b:1e:57:77:22:5e:c0:e5:8b:62:9c:e9:50:f0:73:27:6d: f2:30:40:ea:7a:9b:4a:4e:fe:4c:f5:5b:c7:f8:fa:f5:46:eb: b6:e6:84:f3:e3:57:cb:ca:82:0f:fd:48:8a:1c:c6:4f:ca:3f: 49:4a:7c:5c:d1:55:01:82:0d:13:47:08:16:a4:9d:50:d9:c3: ec:47:bf:c6:57:68:a1:f6:c4:be:d7:90:17:09:23:52:eb:19: 50:ff:02:4f:96:d5:0a:c4:42:d3:d6:db:bf:27:ef:c6:b2:44: d9:ae:b4:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgmzDV5eGOiwfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGQ0MzI5ZmMtNWVhMy00M2FiLTk5NDUtMjY5YWY3OTg4NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWIMRD/AXoSEk3CaGLnwumIgk8N+WeMd56q3 +v/XTOEUdBG4qpAaW0sGjf1sjae7PehDz7QcjT+NFzWed+tBcyn7pwslX2vMIv9y wD7SllLr8jEs8+ROjLtjl9gNmBRCIGTaz1LbxvXPxQofWYMmXjwT9lcRHNQys44E D+V6KEO+usS/rIIQUW4qCQsAs9YHXhWdevMd+t5if/QW7MeMYlgPCVM7RJbR36Mq 4KIZikyjlh4hDr8QRMxWnYrzOSU1ToMAKH+h24nSGXvLtEen8D9MYTY5S1viGcbO fjHT5nLalgCGKgzxqZsZY53h0Yp3W4i+mb9D2rqFitxP/ylaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRVgLN8tPlBSvw34kLiDhzGJ7TlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjA5Y2Q0OTQtZTNiOC0z ZDJjLTg4MTAtNDhlMGUxYjFhNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcxUBKmWSI7wlylfLl6CtC3ATS//zoMVKTr97VXh0CGN2iBAhjoCLym 5WQg3BI2AQGQ7FhcOi0Ad62UcitzobYYdcbYCP5so4n4XFM8jEJ0K6Ppr+c8Sh5/ byu0E3K99qgLoxG/ZG+z4j6td3wCvLUrToyQbwGKjYk5uhKlHBbLDKqeu/ZOIBE7 r9dc3q8EPC1LHld3Il7A5YtinOlQ8HMnbfIwQOp6m0pO/kz1W8f4+vVG67bmhPPj V8vKgg/9SIocxk/KP0lKfFzRVQGCDRNHCBaknVDZw+xHv8ZXaKH2xL7XkBcJI1Lr GVD/Ak+W1QrEQtPW278n78ayRNmutMk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:03 2025 by rpki-client