$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/3183c044-0002-3ef7-b663-dadd3d577517.roa File: 3183c044-0002-3ef7-b663-dadd3d577517.roa (raw, json) Hash identifier: AlERT3ptTE3mWiFCyNT5tqK9pyT3VK5qCpLoe6OlQ8k= Subject key identifier: F0:E1:D8:15:D2:62:FD:CF:16:5B:8E:79:C7:EC:B4:3A:CE:1E:C4:58 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B3D37C0D74F01D62BC2C37440 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/3183c044-0002-3ef7-b663-dadd3d577517.roa Signing time: Thu 18 Sep 2025 20:44:21 +0000 ROA not before: Thu 18 Sep 2025 20:44:21 +0000 ROA not after: Wed 17 Dec 2025 21:44:21 +0000 asID: 23280 IP address blocks: 199.45.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:37:c0:d7:4f:01:d6:2b:c2:c3:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Sep 18 20:44:21 2025 GMT Not After : Dec 17 21:44:21 2025 GMT Subject: CN=f7025a64-c40b-4ed7-b2e3-2d0e0f61c4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:99:15:43:ba:b1:05:83:5a:d5:8c:3e:07: c3:71:9c:15:68:e0:0a:5d:65:87:f8:14:dc:aa:05: 4f:88:bf:85:5e:c3:0a:80:ef:c7:f4:65:61:4d:02: a7:32:5f:ca:da:79:7d:94:78:a4:84:f4:22:f5:5f: e8:23:63:79:b3:a5:04:2d:c7:d2:2a:c1:8f:e9:90: 49:6a:5c:cf:24:b7:74:73:9d:1a:2d:bf:cc:62:a1: d7:bf:78:dd:27:f2:56:bf:84:bc:42:eb:f6:d9:9b: 5c:ee:ac:8a:19:2b:1a:b3:15:4b:06:0e:bb:36:56: e7:51:89:34:94:7e:91:8b:48:38:bf:3b:a6:28:5d: fd:74:58:76:f1:9e:45:90:59:27:06:7c:51:a5:5b: d1:9d:74:64:4b:01:0c:bb:09:7e:b6:7d:e9:8c:90: 55:64:32:c8:9e:2a:87:d0:e5:9e:3b:c4:9d:65:ba: 21:84:0b:89:7a:a8:61:3d:da:98:a0:f8:6d:70:0d: e3:1f:7b:fc:78:03:11:32:7a:94:09:a8:b4:64:68: ba:09:7b:9d:0e:0d:c0:2a:45:3c:dd:6d:a8:a9:85: 72:50:34:f9:f4:3f:ba:be:c8:6a:9a:77:d7:d7:b3: 46:55:5d:1a:ce:1f:ef:9c:6e:6f:4c:49:e5:56:13: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:D8:15:D2:62:FD:CF:16:5B:8E:79:C7:EC:B4:3A:CE:1E:C4:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/3183c044-0002-3ef7-b663-dadd3d577517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0a:2f:36:a8:ad:66:77:75:f6:67:9e:1b:c5:d3:da:f6:0f: a3:48:ba:d0:ba:aa:3e:96:ae:d2:90:a7:69:21:ee:01:87:a5: 46:a9:e0:ac:c0:96:0c:61:9d:f6:ce:96:40:e0:52:7d:9b:96: b0:a9:59:92:a1:1b:f7:6c:b8:c0:d9:4f:8b:60:10:1c:88:eb: 76:4a:f0:ef:bb:18:66:0b:a2:d9:c5:70:e9:2f:cf:7b:1b:b6: 5c:44:30:ab:53:a0:92:fe:09:24:55:43:b4:8f:e0:eb:ae:0a: a1:7c:2a:f4:8c:4a:41:ca:7e:f7:8e:e9:b0:4b:b2:29:44:b4: 20:48:e7:58:4d:1c:0b:18:55:b4:4a:91:6c:9c:a0:4a:cf:c3: c5:56:1a:c1:f4:2d:a6:50:92:65:44:b3:0c:71:e5:ed:dc:c9: 6e:07:17:8c:d5:d5:45:d9:6b:14:d2:0d:66:6f:3a:12:74:b5: a4:1a:2b:ae:8c:82:0a:f7:67:c9:fb:71:2f:5a:4e:fe:1d:21: c0:f1:6e:b1:2f:2c:89:5e:04:3a:8a:51:75:2e:4e:d6:86:98: d6:fb:90:67:19:72:53:f6:e6:7f:5e:50:25:7b:06:88:c9:e1: 1e:26:95:d7:ac:d6:1e:d8:67:91:94:67:93:f2:bc:0a:da:5b: d9:e7:1a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9N8DXTwHWK8LDdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDkxODIwNDQyMVoXDTI1MTIxNzIxNDQyMVowLzEtMCsGA1UEAxMk ZjcwMjVhNjQtYzQwYi00ZWQ3LWIyZTMtMmQwZTBmNjFjNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cSZFUO6sQWDWtWMPgfDcZwVaOAKXWWH+BTc qgVPiL+FXsMKgO/H9GVhTQKnMl/K2nl9lHikhPQi9V/oI2N5s6UELcfSKsGP6ZBJ alzPJLd0c50aLb/MYqHXv3jdJ/JWv4S8Quv22Ztc7qyKGSsasxVLBg67NlbnUYk0 lH6Ri0g4vzumKF39dFh28Z5FkFknBnxRpVvRnXRkSwEMuwl+tn3pjJBVZDLIniqH 0OWeO8SdZbohhAuJeqhhPdqYoPhtcA3jH3v8eAMRMnqUCai0ZGi6CXudDg3AKkU8 3W2oqYVyUDT59D+6vshqmnfX17NGVV0azh/vnG5vTEnlVhOWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDh2BXSYv3PFluOecfstDrOHsRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMzE4M2MwNDQtMDAwMi0z ZWY3LWI2NjMtZGFkZDNkNTc3NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQKLzaorWZ3dfZnnhvF09r2D6NIutC6qj6WrtKQp2kh7gGHpUap4KzA lgxhnfbOlkDgUn2blrCpWZKhG/dsuMDZT4tgEByI63ZK8O+7GGYLotnFcOkvz3sb tlxEMKtToJL+CSRVQ7SP4OuuCqF8KvSMSkHKfveO6bBLsilEtCBI51hNHAsYVbRK kWycoErPw8VWGsH0LaZQkmVEswxx5e3cyW4HF4zV1UXZaxTSDWZvOhJ0taQaK66M ggr3Z8n7cS9aTv4dIcDxbrEvLIleBDqKUXUuTtaGmNb7kGcZclP25n9eUCV7BojJ 4R4mldes1h7YZ5GUZ5PyvAraW9nnGko= -----END CERTIFICATE-----Generated at Sun Oct 19 20:04:05 2025 by rpki-client