$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa File: c456b53c-367c-332e-a64e-6255602c852a.roa (raw, json) Hash identifier: O5H78slaxAmnLx5zZ27sJ9rZJq1CHRM3DKNWAwdU33g= Subject key identifier: 44:8A:B9:D8:B5:27:82:A6:11:13:FC:0F:5B:F8:69:90:4E:EE:85:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE0DFF859A87F68463AE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 199.223.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0d:ff:85:9a:87:f6:84:63:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7e9c1c89-f263-4572-b49b-62e7ec6d732e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:a3:cf:28:d4:57:a0:10:a5:26:07:1e:86: fb:89:5d:24:60:35:bf:d4:ac:82:83:42:d7:3f:99: 37:95:fc:aa:8d:96:5b:83:4f:ff:00:41:d0:db:da: d7:08:7d:ab:4d:9f:92:8c:fc:c1:4f:38:f3:14:4c: 02:c3:fa:07:7b:0f:0a:e8:ac:41:38:f6:6c:23:c6: 62:90:cf:c3:93:2e:bb:50:73:73:c3:db:2d:a6:c2: ba:66:56:f0:05:4c:92:01:cb:9d:72:9d:99:4c:5a: 4b:22:d3:12:be:81:b0:3b:06:78:77:e9:7a:18:cb: 15:a5:94:70:fa:db:6b:5f:63:9a:a7:ef:1d:32:44: cb:f8:7f:05:89:b6:7f:10:5c:25:85:f1:52:f8:f9: 8a:02:b4:f3:88:73:14:ff:40:0d:28:84:d7:c6:9c: e5:26:19:b2:aa:64:9e:d4:3a:d6:03:77:4a:f0:91: ec:59:e8:16:b2:02:8a:ad:b0:30:fc:b3:d2:61:c0: b3:1b:40:c1:af:cc:37:d8:a5:29:ab:02:43:36:48: 16:80:1d:3d:db:e3:9f:e6:57:c9:ad:7e:95:30:94: c8:e0:57:e7:96:76:c8:0e:d3:3f:7e:64:67:6c:91: 31:5e:0f:e4:82:dc:80:a4:3e:b3:63:b1:1a:97:ab: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:B9:D8:B5:27:82:A6:11:13:FC:0F:5B:F8:69:90:4E:EE:85:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3d:da:18:88:82:22:fd:bf:0b:9c:75:9f:af:71:61:28:37: 31:df:e0:60:1c:fd:ec:2d:7b:56:f9:c8:41:58:ff:6b:59:00: c2:b9:c7:39:17:3c:6f:76:f0:a8:e7:c9:79:30:0b:c0:22:8b: ab:cd:7a:e4:a0:77:49:62:81:6c:1a:c9:88:55:64:b3:81:78: e0:c1:f8:48:4c:0c:7c:81:77:19:41:f5:4f:f0:ac:5a:60:f3: 92:85:49:fb:b9:c8:0b:9e:55:49:51:99:77:44:ab:b1:fc:35: 8b:4f:ea:e2:d6:3f:ea:9f:62:29:0d:6b:f1:47:cb:6b:90:10: 61:9d:62:21:cf:0b:b7:4b:30:a5:ce:45:86:85:9b:54:78:ca: 19:d9:da:2f:8f:ea:50:ae:a7:36:55:7a:ce:35:62:3b:1d:35: 56:5d:28:a7:ce:80:48:ef:cc:e5:70:ab:54:5e:4e:dd:4b:80: 5e:15:84:49:8f:40:8d:af:bd:8d:d4:a7:5c:40:8b:b3:6e:5f: 6d:c3:1f:de:1f:89:c4:90:07:a9:7b:c8:ed:12:57:cd:e1:b8: bf:91:a0:59:e4:3f:c3:12:8a:4a:1b:89:fd:ed:31:76:5d:fa: 81:fd:2e:41:26:05:3a:f1:08:1e:94:79:37:f9:d6:c5:ac:c1: b2:84:0d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg3/hZqH9oRjrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2U5YzFjODktZjI2My00NTcyLWI0OWItNjJlN2VjNmQ3MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgKjzyjUV6AQpSYHHob7iV0kYDW/1KyCg0LX P5k3lfyqjZZbg0//AEHQ29rXCH2rTZ+SjPzBTzjzFEwCw/oHew8K6KxBOPZsI8Zi kM/Dky67UHNzw9stpsK6ZlbwBUySAcudcp2ZTFpLItMSvoGwOwZ4d+l6GMsVpZRw +ttrX2Oap+8dMkTL+H8FibZ/EFwlhfFS+PmKArTziHMU/0ANKITXxpzlJhmyqmSe 1DrWA3dK8JHsWegWsgKKrbAw/LPSYcCzG0DBr8w32KUpqwJDNkgWgB092+Of5lfJ rX6VMJTI4FfnlnbIDtM/fmRnbJExXg/kgtyApD6zY7Eal6vXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESKudi1J4KmERP8D1v4aZBO7oXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQ1NmI1M2MtMzY3Yy0z MzJlLWE2NGUtNjI1NTYwMmM4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE92hiIgiL9vwucdZ+vcWEoNzHf4GAc/ewte1b5yEFY/2tZAMK5xzkX PG928KjnyXkwC8Aii6vNeuSgd0ligWwayYhVZLOBeODB+EhMDHyBdxlB9U/wrFpg 85KFSfu5yAueVUlRmXdEq7H8NYtP6uLWP+qfYikNa/FHy2uQEGGdYiHPC7dLMKXO RYaFm1R4yhnZ2i+P6lCupzZVes41YjsdNVZdKKfOgEjvzOVwq1ReTt1LgF4VhEmP QI2vvY3Up1xAi7NuX23DH94ficSQB6l7yO0SV83huL+RoFnkP8MSikobif3tMXZd +oH9LkEmBTrxCB6UeTf51sWswbKEDbU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:12 2025 by rpki-client