$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa File: 3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa (raw, json) Hash identifier: g3VKf+tbARx1RJWmu7RR6GuwGPv1VzFM3dl7vQf1nJU= Subject key identifier: AF:92:FE:FA:BA:6E:BC:33:04:3E:F5:E3:64:26:E0:C5:53:2D:A6:98 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61EA86373A8E46C35AFA40 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 200.69.24.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ea:86:37:3a:8e:46:c3:5a:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=fb292835-daa6-4144-bf9d-278a1cc1f7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:fe:fe:90:70:ce:bc:db:a0:5b:1e:fe:15: 27:56:58:e3:be:ce:1a:49:f4:db:fa:7d:33:02:6d: e7:36:dc:4d:0f:d8:a7:6c:af:b4:ca:dd:d2:50:c2: cc:4d:6c:9d:9b:b9:73:56:da:0c:67:11:eb:93:49: 22:65:7d:92:f8:1e:3f:22:4f:88:a4:ed:95:d2:13: 09:d9:38:a3:0b:4e:8e:af:79:15:b3:31:d4:91:0f: 42:95:a7:6f:8b:4a:e5:ef:22:5b:8f:36:0b:95:07: b0:cd:41:02:d7:b2:02:02:68:05:8c:57:ba:13:48: 64:34:b6:3c:ee:d6:12:9f:42:ff:6b:23:3c:b9:d9: 04:8b:11:ce:b5:fe:33:73:c6:dd:57:f6:40:82:be: d0:45:9a:59:4b:73:5d:81:87:c6:8f:ff:11:3d:90: 1a:2b:ed:c2:6a:a2:ef:dc:84:dc:b9:27:9e:d1:55: d2:61:b7:41:98:29:c4:3e:28:9d:13:c3:53:24:64: fe:8d:9b:f8:59:db:cb:7e:42:3a:59:7c:c7:1f:44: 71:a7:6b:bc:4e:90:79:e0:8d:82:b0:2a:0d:8b:0e: fa:4c:fa:23:ae:d1:cc:04:09:dc:0d:42:4e:51:9b: 69:c7:41:d8:57:4f:f9:6c:c9:10:83:50:03:8b:4f: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:92:FE:FA:BA:6E:BC:33:04:3E:F5:E3:64:26:E0:C5:53:2D:A6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 200.69.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4e:1f:b9:ef:1a:c3:9e:94:d8:63:7e:b0:28:ab:d2:ec:64: 26:81:0d:36:87:1f:41:43:bc:c5:4d:77:7c:fc:17:73:c8:c7: 4b:e8:2d:e8:cb:e8:39:11:64:bd:16:c8:52:08:28:e1:dd:f0: 0b:d6:1c:61:b7:2e:e8:1a:17:4c:c2:bf:d5:6e:bb:4a:9a:eb: b3:97:68:07:d6:a8:70:c7:85:1a:1d:d1:bb:c8:05:3c:98:df: 70:6f:82:0f:a7:79:c2:a7:3b:0a:76:b2:0d:2d:8d:e3:a0:00: 52:6f:ff:1b:4c:41:cc:4f:15:6d:c7:ae:36:92:4e:03:69:64: b3:b6:f2:e7:0d:00:74:b5:66:b5:af:ef:b4:78:10:8d:bb:ee: 6a:85:63:80:74:01:ed:fc:72:df:dc:01:d8:9c:2c:06:1b:64: a7:58:91:7d:c9:f5:d9:ef:ee:53:61:7a:32:49:9d:cf:98:c3: 15:f6:c8:51:e0:33:c5:44:54:fa:0b:49:7c:7d:43:03:d9:96: 4a:77:21:14:52:dc:01:d1:95:59:29:e1:62:6a:97:20:4a:61: 57:08:e4:df:ce:e8:07:ba:27:7b:85:ca:c2:f7:a1:c4:cd:9a: 30:9c:62:b9:75:bd:f2:24:f7:4f:c4:ac:05:66:99:20:6f:76: 60:76:67:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeqGNzqORsNa+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZmIyOTI4MzUtZGFhNi00MTQ0LWJmOWQtMjc4YTFjYzFmN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxz+/pBwzrzboFse/hUnVljjvs4aSfTb+n0z Am3nNtxND9inbK+0yt3SUMLMTWydm7lzVtoMZxHrk0kiZX2S+B4/Ik+IpO2V0hMJ 2TijC06Or3kVszHUkQ9Cladvi0rl7yJbjzYLlQewzUEC17ICAmgFjFe6E0hkNLY8 7tYSn0L/ayM8udkEixHOtf4zc8bdV/ZAgr7QRZpZS3NdgYfGj/8RPZAaK+3CaqLv 3ITcuSee0VXSYbdBmCnEPiidE8NTJGT+jZv4WdvLfkI6WXzHH0Rxp2u8TpB54I2C sCoNiw76TPojrtHMBAncDUJOUZtpx0HYV0/5bMkQg1ADi0/reQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+S/vq6brwzBD7142Qm4MVTLaaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMzUyMGM3ZTYtNmVlOC0z NGVkLTg4ZjQtY2VhZjMwNzQ2MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNOH7nvGsOelNhjfrAoq9LsZCaBDTaHH0FDvMVNd3z8F3PIx0voLejL 6DkRZL0WyFIIKOHd8AvWHGG3LugaF0zCv9Vuu0qa67OXaAfWqHDHhRod0bvIBTyY 33Bvgg+necKnOwp2sg0tjeOgAFJv/xtMQcxPFW3HrjaSTgNpZLO28ucNAHS1ZrWv 77R4EI277mqFY4B0Ae38ct/cAdicLAYbZKdYkX3J9dnv7lNhejJJnc+YwxX2yFHg M8VEVPoLSXx9QwPZlkp3IRRS3AHRlVkp4WJqlyBKYVcI5N/O6Ae6J3uFysL3ocTN mjCcYrl1vfIk90/ErAVmmSBvdmB2Z1E= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:47 2025 by rpki-client