$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9f0805ec-0ee2-3f14-bf49-82e4b35d1eb4.roa File: 9f0805ec-0ee2-3f14-bf49-82e4b35d1eb4.roa (raw, json) Hash identifier: Ox8yvKPxi6tJt3jOsOd0UXd+chTAF/xHNwvOKC6FwSs= Subject key identifier: 84:DB:95:35:A3:B8:8D:55:DE:BA:71:93:71:C7:EA:C4:9C:67:DC:00 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B4E053C44BD34B8BA594BB980 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9f0805ec-0ee2-3f14-bf49-82e4b35d1eb4.roa Signing time: Wed 24 Sep 2025 21:11:18 +0000 ROA not before: Wed 24 Sep 2025 21:11:18 +0000 ROA not after: Tue 23 Dec 2025 22:11:18 +0000 asID: 39600 IP address blocks: 200.229.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:05:3c:44:bd:34:b8:ba:59:4b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 24 21:11:18 2025 GMT Not After : Dec 23 22:11:18 2025 GMT Subject: CN=4262a834-1573-4d96-8474-9d4a9e6e15e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:57:fa:3c:e9:1f:e1:fa:e3:e4:e3:ce:a4: bf:1c:6c:d8:ff:22:90:07:eb:85:8e:c5:90:3f:8a: 0f:ff:84:89:38:03:ea:ef:ab:0e:8c:53:46:8c:a3: 9c:d5:fa:99:83:b2:be:28:37:e6:fd:08:f4:33:b9: 96:7b:d5:aa:26:cb:45:7f:20:a2:01:a8:2c:7a:dc: 4b:e5:c2:b8:93:4b:5a:a5:db:b2:36:d4:c6:2a:e8: 24:85:37:18:1c:1b:5d:6d:66:5b:e5:67:ec:e9:66: 23:c0:09:1e:57:ce:0f:e0:1a:f9:13:dd:14:57:86: dc:29:a6:6d:90:ff:42:e0:9e:0d:06:21:f1:c6:a5: f0:75:c7:c5:af:9b:c3:9b:11:8a:04:7e:29:62:52: 65:1f:72:b4:d6:f3:8a:dc:3e:47:ba:63:2a:e0:04: d2:6e:db:0f:32:2a:5d:51:aa:9c:b4:fc:e7:94:f9: 26:9f:1e:f2:31:1c:49:f4:60:0b:dd:3d:8b:7a:ed: 2d:73:52:a8:3b:50:76:4c:2b:76:57:00:a4:82:dd: 12:b3:bc:51:ca:6a:a8:b4:6e:30:83:7a:25:12:c6: ea:c8:33:22:fa:c2:d2:c5:93:62:21:3d:2d:51:6e: be:ba:9a:1b:2a:a0:48:10:e9:b9:6a:9f:5b:e5:97: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DB:95:35:A3:B8:8D:55:DE:BA:71:93:71:C7:EA:C4:9C:67:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9f0805ec-0ee2-3f14-bf49-82e4b35d1eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1f:fc:31:49:ff:91:70:2b:ba:f9:35:d4:60:33:83:7a:e5: 19:9c:b5:4c:59:cd:a2:45:6f:75:6e:78:ef:9b:f1:20:cd:ac: b4:63:7c:ef:e6:e7:b7:11:1a:6a:c5:cb:1c:61:e8:b3:56:52: 84:0e:ae:34:2c:d4:d7:68:fd:ec:0d:42:23:65:d8:76:92:00: f8:f0:28:18:1d:4f:6e:02:00:99:21:d7:8d:08:18:ed:fa:43: 55:d3:68:74:63:09:7f:04:bf:cd:35:0d:40:27:4e:83:8f:53: 19:6d:a9:44:0d:0f:1c:2d:bb:76:50:c7:e5:01:18:a8:b2:90: d9:6f:06:5a:a2:98:bc:98:4a:25:40:3d:d4:7a:2e:14:0b:71: 54:bf:2a:8a:1c:23:42:84:01:64:8e:e2:33:08:b4:22:dc:76: 8b:9c:0f:fa:a9:6e:20:17:5f:72:3c:d1:cd:d6:60:04:c9:56: c9:48:f4:0a:59:15:ec:32:1d:db:2f:c4:30:bd:73:e6:b4:c3: c9:56:5e:a9:62:c1:3e:25:91:c2:4b:25:95:3f:37:94:3f:e4: 71:a2:f8:03:db:a6:27:36:63:36:68:4f:0b:01:b9:a9:7e:b3: 5d:50:eb:42:62:7a:5b:d8:fc:2f:74:dd:3d:54:03:1d:8e:0f: e7:9b:51:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOBTxEvTS4ullLuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkyNDIxMTExOFoXDTI1MTIyMzIyMTExOFowLzEtMCsGA1UEAxMk NDI2MmE4MzQtMTU3My00ZDk2LTg0NzQtOWQ0YTllNmUxNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvVX+jzpH+H64+TjzqS/HGzY/yKQB+uFjsWQ P4oP/4SJOAPq76sOjFNGjKOc1fqZg7K+KDfm/Qj0M7mWe9WqJstFfyCiAagsetxL 5cK4k0tapduyNtTGKugkhTcYHBtdbWZb5Wfs6WYjwAkeV84P4Br5E90UV4bcKaZt kP9C4J4NBiHxxqXwdcfFr5vDmxGKBH4pYlJlH3K01vOK3D5HumMq4ATSbtsPMipd UaqctPznlPkmnx7yMRxJ9GAL3T2Leu0tc1KoO1B2TCt2VwCkgt0Ss7xRymqotG4w g3olEsbqyDMi+sLSxZNiIT0tUW6+upobKqBIEOm5ap9b5ZdyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITblTWjuI1V3rpxk3HH6sScZ9wAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOWYwODA1ZWMtMGVlMi0z ZjE0LWJmNDktODJlNGIzNWQxZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkf/DFJ/5FwK7r5NdRgM4N65RmctUxZzaJFb3VueO+b8SDNrLRjfO/m 57cRGmrFyxxh6LNWUoQOrjQs1Ndo/ewNQiNl2HaSAPjwKBgdT24CAJkh140IGO36 Q1XTaHRjCX8Ev801DUAnToOPUxltqUQNDxwtu3ZQx+UBGKiykNlvBlqimLyYSiVA PdR6LhQLcVS/KoocI0KEAWSO4jMItCLcdoucD/qpbiAXX3I80c3WYATJVslI9ApZ FewyHdsvxDC9c+a0w8lWXqliwT4lkcJLJZU/N5Q/5HGi+APbpic2YzZoTwsBual+ s11Q60JielvY/C903T1UAx2OD+ebUVk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:24 2025 by rpki-client