$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa File: 4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa (raw, json) Hash identifier: 3kocl5sK5GNQdkmbWJRd+4Niq57ydUWJs7MkeSodZTg= Subject key identifier: 5B:40:69:4E:F3:DD:74:F2:39:9B:81:04:18:DF:0F:5F:F0:9E:F9:B9 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61EA4C340CF807701A00C0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 199.195.116.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ea:4c:34:0c:f8:07:70:1a:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=e86b935f-8ad9-4afc-a3d7-85d91079d046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:f0:e9:4a:d0:a0:f6:71:ef:7b:78:ed:37: 5d:80:06:d8:05:c3:ed:bc:1a:15:c0:aa:bb:a1:27: 12:dd:9f:e9:1e:f6:11:ed:13:c5:c1:5d:f9:33:4d: 8e:d2:bd:c9:c4:17:5f:48:3c:2e:a1:fd:b3:c7:5b: c8:04:90:51:d6:0c:83:dc:b5:ce:49:ef:a8:db:68: 45:25:5b:b0:c5:14:fd:2a:c8:a0:83:03:f5:cc:51: 8b:28:e0:a0:07:c6:55:48:7e:55:eb:7a:10:6b:4e: 67:89:57:a8:a1:4f:16:cb:de:19:3c:12:ea:e4:4d: 43:3e:47:f1:bd:f4:ee:cb:a0:cf:ff:b5:6b:40:e0: ec:f4:17:13:02:60:88:2e:6b:69:de:b4:d3:76:3c: e9:7f:eb:de:04:d3:d1:cb:1e:fc:41:66:6f:84:f7: 95:61:3c:e3:c6:28:8a:94:3c:a2:68:02:16:33:92: 17:3b:8f:12:5f:f1:82:7f:28:d0:c2:66:38:b0:8f: 49:d4:38:28:c5:d7:fc:d2:3a:2b:4d:d1:8c:02:18: 53:70:ad:43:bc:de:e9:80:d6:e6:2d:ad:fb:1b:3d: f4:bb:fc:16:33:8b:d2:23:ff:9b:ac:52:a2:74:8e: 2d:cf:f0:de:2a:1d:64:a6:66:d6:7b:b8:8f:1e:16: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:40:69:4E:F3:DD:74:F2:39:9B:81:04:18:DF:0F:5F:F0:9E:F9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 199.195.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:02:47:35:70:23:c2:8b:12:75:5a:83:12:a9:a2:ba:31:74: be:e3:df:cd:d8:c0:33:aa:46:b5:9d:05:4c:e0:7a:fc:dc:2a: 7c:21:dc:04:64:8f:26:6b:eb:ed:5a:09:12:6b:d2:7b:3e:47: 21:ba:07:d9:07:a2:30:d5:9c:97:5d:83:86:99:a0:30:1c:e5: b7:7e:c0:0f:bc:24:b7:76:2a:9b:94:62:4a:af:f8:61:65:64: 87:ff:2f:b8:d0:b9:d9:fe:b8:de:01:09:52:1b:44:1a:b0:0f: 67:a9:77:2d:31:52:93:90:f8:77:3f:75:4a:75:0f:2e:39:97: 7b:74:eb:5d:9c:38:70:e2:56:ca:28:56:bf:c4:ec:03:b0:4f: 92:f3:a1:1e:9f:0f:f9:85:57:3a:69:d5:46:46:75:d7:a3:2b: c8:07:bc:4e:08:d6:16:c0:b3:48:f4:84:7b:3e:83:2c:e7:b3: f2:ad:3e:53:76:f7:a6:54:b1:6d:15:26:7c:23:6a:a6:f6:b2: 90:87:12:1d:80:80:12:b1:c6:24:cd:3a:22:56:9f:af:60:3b: e0:af:05:0b:70:55:39:90:02:40:a4:99:10:77:47:80:27:00: c0:11:0f:82:e7:e9:8d:9c:1c:e8:90:46:2a:07:5e:6b:c8:4a: ce:51:12:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYepMNAz4B3AaAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTg2YjkzNWYtOGFkOS00YWZjLWEzZDctODVkOTEwNzlkMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHPw6UrQoPZx73t47TddgAbYBcPtvBoVwKq7 oScS3Z/pHvYR7RPFwV35M02O0r3JxBdfSDwuof2zx1vIBJBR1gyD3LXOSe+o22hF JVuwxRT9KsiggwP1zFGLKOCgB8ZVSH5V63oQa05niVeooU8Wy94ZPBLq5E1DPkfx vfTuy6DP/7VrQODs9BcTAmCILmtp3rTTdjzpf+veBNPRyx78QWZvhPeVYTzjxiiK lDyiaAIWM5IXO48SX/GCfyjQwmY4sI9J1Dgoxdf80jorTdGMAhhTcK1DvN7pgNbm La37Gz30u/wWM4vSI/+brFKidI4tz/DeKh1kpmbWe7iPHhaD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtAaU7z3XTyOZuBBBjfD1/wnvm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNGYzMzIzYTAtZDc1ZC0z N2M0LWIyZWEtMmY2NjZkNjZlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8N0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcCRzVwI8KLEnVagxKporoxdL7j383YwDOqRrWdBUzgevzcKnwh3ARk jyZr6+1aCRJr0ns+RyG6B9kHojDVnJddg4aZoDAc5bd+wA+8JLd2KpuUYkqv+GFl ZIf/L7jQudn+uN4BCVIbRBqwD2epdy0xUpOQ+Hc/dUp1Dy45l3t0612cOHDiVsoo Vr/E7AOwT5LzoR6fD/mFVzpp1UZGddejK8gHvE4I1hbAs0j0hHs+gyzns/KtPlN2 96ZUsW0VJnwjaqb2spCHEh2AgBKxxiTNOiJWn69gO+CvBQtwVTmQAkCkmRB3R4An AMARD4Ln6Y2cHOiQRioHXmvISs5REs0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:06 2025 by rpki-client