$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa File: 433d179c-4969-3563-a5ea-e66616c2bfa0.roa (raw, json) Hash identifier: BlrD4Qp122GyS7oQmLjTWccVclEfuzeKTKqkTnYvwtQ= Subject key identifier: 9C:3D:73:B1:ED:F2:1F:CC:F9:8C:0E:15:22:2C:63:AA:A5:E3:5E:C6 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B3FC40AEB69D00E1369A40700 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa Signing time: Fri 19 Sep 2025 18:38:38 +0000 ROA not before: Fri 19 Sep 2025 18:38:38 +0000 ROA not after: Thu 18 Dec 2025 19:38:38 +0000 asID: 399839 IP address blocks: 200.229.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:c4:0a:eb:69:d0:0e:13:69:a4:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 19 18:38:38 2025 GMT Not After : Dec 18 19:38:38 2025 GMT Subject: CN=6a09c84a-7d7f-4cdd-8e6e-fd91a8918fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:cc:5a:a6:05:91:8a:9d:34:bb:53:cb:61: 9b:72:df:34:c8:25:7d:60:fa:2d:21:13:b3:4b:5f: 5a:6a:fb:6e:53:df:4d:8a:0e:fb:ed:12:59:a4:23: 5a:6f:36:a4:17:83:7b:22:bb:ff:5f:85:26:bc:02: ce:12:17:f4:67:97:d4:84:3e:80:e2:1c:13:27:11: 2c:cc:82:a8:27:07:f1:c0:b2:5b:87:02:f2:fe:9a: 90:b1:81:fc:ad:54:d2:c4:e4:d6:dc:a9:1b:d5:36: 97:64:43:a1:ee:69:ff:af:3b:c6:8a:30:d8:34:e7: a5:e5:1d:47:b3:84:95:7e:f6:90:6a:2b:6b:1e:95: 2a:7f:fc:24:b0:35:fa:0f:4b:41:a4:21:fd:9e:24: ac:81:c2:dc:07:c8:8f:8d:55:26:3b:f2:55:86:2b: 3a:03:73:81:61:ac:d0:53:f7:9a:e9:78:37:2c:cc: 1b:b6:1c:f6:6a:58:57:24:c5:65:a5:2e:48:6d:b0: 37:38:79:f0:80:f6:80:f0:d7:89:40:f6:1b:a6:96: 76:ff:c8:ca:65:b4:58:8d:ac:fe:bd:60:a5:b4:6b: a6:3f:af:c4:9e:78:45:2c:57:2a:7b:ed:eb:7b:00: 95:d5:70:57:89:ca:33:73:c8:85:df:17:42:5b:6d: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3D:73:B1:ED:F2:1F:CC:F9:8C:0E:15:22:2C:63:AA:A5:E3:5E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/433d179c-4969-3563-a5ea-e66616c2bfa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:21:5d:15:37:2a:d6:36:cf:c6:be:13:30:36:ca:ba:2a: 2a:7b:34:69:88:aa:fb:33:8e:49:cb:dd:b3:fd:7a:45:44:f5: be:75:4c:16:8b:61:d8:50:63:bd:25:5e:14:5b:b9:5b:4c:70: 30:0e:02:26:08:2e:3a:a5:60:94:46:5a:27:58:77:ca:64:91: 7e:1a:44:d0:13:e0:64:c8:ee:23:39:a3:97:09:3f:8c:d1:b1: 68:9d:d1:52:04:b6:c4:f8:da:74:43:8a:01:10:0b:cf:81:1a: 07:32:c9:f1:7d:c2:25:02:3c:5d:0d:f3:1c:5f:60:ec:69:7c: 89:1b:b5:cb:0e:01:8b:8a:04:dc:6d:9a:38:f5:54:d7:17:2f: 17:b4:dc:39:46:d8:4c:b6:37:d8:35:56:99:23:99:2e:f0:69: ae:1a:62:6c:3d:fb:fd:95:3d:9f:69:47:58:32:f0:f2:d1:4e: 23:4e:50:fe:67:00:4f:bd:53:3a:14:7e:28:56:0e:3b:26:5d: e9:53:e9:6c:ff:7e:59:5d:f2:bf:49:26:55:70:af:8b:7f:f3: f8:58:b7:28:cf:59:95:af:9e:4b:f8:a1:af:eb:f8:40:3a:77: 2a:68:f9:6e:1d:5f:07:ce:9b:b8:7d:7d:b9:cc:52:f1:1b:36: 58:2f:03:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/xArradAOE2mkBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkxOTE4MzgzOFoXDTI1MTIxODE5MzgzOFowLzEtMCsGA1UEAxMk NmEwOWM4NGEtN2Q3Zi00Y2RkLThlNmUtZmQ5MWE4OTE4ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp7MWqYFkYqdNLtTy2Gbct80yCV9YPotIROz S19aavtuU99Nig777RJZpCNabzakF4N7Irv/X4UmvALOEhf0Z5fUhD6A4hwTJxEs zIKoJwfxwLJbhwLy/pqQsYH8rVTSxOTW3Kkb1TaXZEOh7mn/rzvGijDYNOel5R1H s4SVfvaQaitrHpUqf/wksDX6D0tBpCH9niSsgcLcB8iPjVUmO/JVhis6A3OBYazQ U/ea6Xg3LMwbthz2alhXJMVlpS5IbbA3OHnwgPaA8NeJQPYbppZ2/8jKZbRYjaz+ vWCltGumP6/EnnhFLFcqe+3rewCV1XBXicozc8iF3xdCW20CPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw9c7Ht8h/M+YwOFSIsY6ql417GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDMzZDE3OWMtNDk2OS0z NTYzLWE1ZWEtZTY2NjE2YzJiZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ5IV0VNyrWNs/GvhMwNsq6Kip7NGmIqvszjknL3bP9ekVE9b51TBaL YdhQY70lXhRbuVtMcDAOAiYILjqlYJRGWidYd8pkkX4aRNAT4GTI7iM5o5cJP4zR sWid0VIEtsT42nRDigEQC8+BGgcyyfF9wiUCPF0N8xxfYOxpfIkbtcsOAYuKBNxt mjj1VNcXLxe03DlG2Ey2N9g1VpkjmS7waa4aYmw9+/2VPZ9pR1gy8PLRTiNOUP5n AE+9UzoUfihWDjsmXelT6Wz/flld8r9JJlVwr4t/8/hYtyjPWZWvnkv4oa/r+EA6 dypo+W4dXwfOm7h9fbnMUvEbNlgvA4w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:42:05 2025 by rpki-client