$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa File: 645aeec0-b007-3912-969c-643e5e0a0cd2.roa (raw, json) Hash identifier: 6gDkBaqzZxXQZZmMSL8ovQySvupxCMow1ewh3lUd+RQ= Subject key identifier: F4:1F:32:41:50:F8:AA:8B:56:04:B4:8C:F4:E2:3D:3C:76:CE:5D:6C Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5241D3CD58F0DA85412300 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 17359 IP address blocks: 199.255.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:41:d3:cd:58:f0:da:85:41:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0f705fd9-07b3-4149-8125-c17c96f0c770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:d6:09:28:de:dc:2c:16:c1:6a:10:eb:c6: 0d:c1:9f:06:e4:e8:0f:e0:0b:4c:d8:28:27:3c:3b: d9:f3:d2:9c:bc:0c:6e:ed:51:e3:61:2b:a6:be:c7: 47:56:c5:d6:6f:75:97:48:9e:37:c4:6d:ee:87:67: 2c:3d:fc:78:37:84:37:62:40:2d:bd:af:ef:3e:09: 94:1b:2d:23:02:c4:95:a2:8b:21:9d:2d:09:44:60: d2:50:11:7f:7f:a5:67:ce:03:98:bf:8d:b8:8a:9e: 93:01:71:59:9d:60:97:37:55:74:d6:f3:1e:55:7a: 37:b7:6f:91:bf:aa:16:cc:8f:1c:dd:3e:2c:36:d2: 7d:b7:85:24:09:0b:67:33:af:37:c7:4d:3f:29:e2: 9a:15:47:8e:c9:99:c8:13:59:b3:e6:4a:ce:3f:fa: e6:5a:57:03:a9:e1:fc:28:02:7d:68:4f:93:e3:06: ca:d0:33:dc:c3:ae:41:c9:e7:01:3d:3b:81:03:8f: fc:72:36:9e:18:dd:7c:55:9b:f8:9c:c3:ef:f7:8b: c4:a8:85:18:dd:6b:ab:0a:35:8c:db:10:29:8e:78: 9e:d2:4c:b3:b3:ce:2d:40:e9:29:8a:2b:62:d7:44: 7f:56:11:f1:c6:d1:f4:8b:75:c8:71:3c:6d:81:78: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:32:41:50:F8:AA:8B:56:04:B4:8C:F4:E2:3D:3C:76:CE:5D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/645aeec0-b007-3912-969c-643e5e0a0cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.255.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:54:f1:58:06:96:49:99:1e:36:fb:92:85:b0:95:49:c6: 58:dc:52:dc:8b:cd:e0:00:fc:ff:af:5d:ba:4c:4c:9b:9e:1e: d1:33:75:62:35:f4:35:62:de:9c:4f:60:06:43:8e:66:e4:b3: e7:da:0e:62:bf:1d:49:fc:57:a2:83:05:cd:ba:d9:7c:69:e9: 50:81:a3:7e:3d:94:bf:52:a2:ce:05:98:6b:70:70:59:1f:18: cc:da:55:99:f1:8c:17:97:92:90:cb:ba:4c:c1:e5:48:73:6b: ab:9a:8d:90:d3:b0:ab:62:79:8d:c5:22:72:4e:f8:82:b4:df: 4d:3b:0b:6d:8b:4a:d3:60:b9:55:43:fa:54:27:0c:2a:ba:de: 56:89:06:61:b8:e1:15:9e:ce:90:69:bd:72:5f:c9:eb:ec:9a: 74:e6:60:f2:ef:03:a0:d5:01:88:22:3a:b8:6c:8d:38:93:a5: 35:13:c2:10:7d:48:6b:ab:06:0c:98:ee:89:27:d3:8c:40:0d: c3:6b:4f:a6:d8:90:4e:eb:b7:aa:58:08:db:3a:f0:68:d8:64: 82:c0:54:a5:8d:3e:2e:02:01:8f:2a:52:67:22:7e:ec:88:13: e7:18:a5:71:0e:5e:a9:45:67:6f:b2:39:4a:5d:53:89:b4:98: ad:af:4e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkHTzVjw2oVBIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGY3MDVmZDktMDdiMy00MTQ5LTgxMjUtYzE3Yzk2ZjBjNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5fWCSje3CwWwWoQ68YNwZ8G5OgP4AtM2Cgn PDvZ89KcvAxu7VHjYSumvsdHVsXWb3WXSJ43xG3uh2csPfx4N4Q3YkAtva/vPgmU Gy0jAsSVooshnS0JRGDSUBF/f6VnzgOYv424ip6TAXFZnWCXN1V01vMeVXo3t2+R v6oWzI8c3T4sNtJ9t4UkCQtnM683x00/KeKaFUeOyZnIE1mz5krOP/rmWlcDqeH8 KAJ9aE+T4wbK0DPcw65ByecBPTuBA4/8cjaeGN18VZv4nMPv94vEqIUY3WurCjWM 2xApjnie0kyzs84tQOkpiiti10R/VhHxxtH0i3XIcTxtgXgiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQfMkFQ+KqLVgS0jPTiPTx2zl1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjQ1YWVlYzAtYjAwNy0z OTEyLTk2OWMtNjQzZTVlMGEwY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3RVPFYBpZJmR42+5KFsJVJxljcUtyLzeAA/P+vXbpMTJueHtEzdWI1 9DVi3pxPYAZDjmbks+faDmK/HUn8V6KDBc262Xxp6VCBo349lL9Sos4FmGtwcFkf GMzaVZnxjBeXkpDLukzB5Uhza6uajZDTsKtieY3FInJO+IK03007C22LStNguVVD +lQnDCq63laJBmG44RWezpBpvXJfyevsmnTmYPLvA6DVAYgiOrhsjTiTpTUTwhB9 SGurBgyY7okn04xADcNrT6bYkE7rt6pYCNs68GjYZILAVKWNPi4CAY8qUmcifuyI E+cYpXEOXqlFZ2+yOUpdU4m0mK2vTkA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:25:09 2025 by rpki-client