$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/57c0dcb9-a06a-393f-ae9d-9cbd8013461b.roa File: 57c0dcb9-a06a-393f-ae9d-9cbd8013461b.roa (raw, json) Hash identifier: Dvp63Qe3oFSpMGajLuQaxWN14yWELBQ1GdXIsHQjgY4= Subject key identifier: D2:2F:6C:3E:D6:73:B1:84:49:40:EF:0F:C1:12:B5:6C:35:42:69:01 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584B8D2977C898B9ECEA32E6A400 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/57c0dcb9-a06a-393f-ae9d-9cbd8013461b.roa Signing time: Fri 17 Oct 2025 12:00:14 +0000 ROA not before: Fri 17 Oct 2025 12:00:14 +0000 ROA not after: Thu 15 Jan 2026 13:00:14 +0000 asID: 2914 IP address blocks: 199.30.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:29:77:c8:98:b9:ec:ea:32:e6:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Oct 17 12:00:14 2025 GMT Not After : Jan 15 13:00:14 2026 GMT Subject: CN=6ec4239b-d09a-40c4-8a57-d97085b8159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:9b:ce:31:7d:55:95:10:92:9f:7c:39:33: f5:e6:42:b9:4d:e5:5f:35:9e:0c:55:81:8f:03:ad: a5:6f:8e:ec:09:77:db:50:69:88:df:b2:c2:ab:05: 8a:13:0d:c2:fb:12:5b:e3:ec:c0:97:75:c4:0b:dd: 96:c1:93:42:bb:d2:ff:ce:67:28:f5:2e:23:a5:dc: e6:cc:07:50:82:1e:a1:95:63:fd:7e:ea:1b:57:ac: 29:da:9e:42:8a:91:fb:be:4d:a0:92:7c:41:88:a0: 34:a5:92:b9:fd:bd:fe:d6:14:6e:55:99:ce:ff:00: 8c:83:04:ad:f2:39:de:05:c0:da:c6:50:bb:9c:df: 2c:02:21:23:c3:72:b8:f8:70:e3:b2:5b:22:cc:d2: 2c:d2:c1:ec:df:ab:20:21:68:56:47:7e:63:f9:4e: 8f:58:97:15:6a:4a:06:29:43:22:a4:24:08:72:0f: 90:59:35:58:74:16:e5:47:91:7e:df:f4:72:26:81: 27:01:f2:8d:c9:79:a1:5d:6f:4e:95:56:40:f9:a7: be:f0:a4:2b:f1:d3:c1:dc:d4:b0:84:71:02:3e:09: c3:84:17:db:40:95:00:bf:b4:d2:8b:fd:ec:02:5b: b5:c2:dd:f3:d0:e3:09:67:f5:11:4e:4b:49:f2:a4: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:6C:3E:D6:73:B1:84:49:40:EF:0F:C1:12:B5:6C:35:42:69:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/57c0dcb9-a06a-393f-ae9d-9cbd8013461b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:69:ff:14:8c:a3:a9:ee:a3:30:18:77:39:19:5d:a5:81:d8: 0e:21:30:6c:4e:32:85:3b:b2:f9:31:8c:63:a1:f2:d1:e7:e2: 1a:7e:e4:63:7c:04:3d:5a:69:69:0c:31:0f:29:ad:04:59:95: 05:9e:a8:3f:3e:a8:f6:3b:ab:dc:96:20:0b:6e:bb:2d:f2:f4: 32:cb:d0:62:b8:90:ea:a6:06:15:c5:91:80:47:52:4c:70:6e: b3:21:45:fb:a5:f8:88:28:b9:c1:75:38:dc:31:1e:78:23:84: 07:f1:43:16:36:95:ba:f1:93:92:5e:60:0b:3d:ee:9e:2b:5f: 15:63:f1:d7:39:60:d2:44:db:e1:38:2a:d3:b6:ac:11:12:65: e8:ae:3f:26:0e:1f:fc:81:ed:71:0e:00:1b:9a:64:37:49:35: 65:77:3d:5e:0e:fa:df:3d:41:b7:e9:97:29:c3:e4:40:11:b2: 0b:6b:89:86:2c:4f:6c:bc:18:2f:af:f5:13:c1:3d:ed:30:61: 16:8d:aa:ea:6e:87:7f:1d:bf:77:d4:55:32:46:a9:25:4f:d1: a9:7e:eb:6d:a7:be:a6:f3:7b:4b:fe:af:64:1b:85:63:9a:80: e1:45:ff:e1:10:a0:1f:65:f0:8e:e9:63:08:d7:1f:93:cf:23: 97:d8:f6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNKXfImLns6jLmpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI1MTAxNzEyMDAxNFoXDTI2MDExNTEzMDAxNFowLzEtMCsGA1UEAxMk NmVjNDIzOWItZDA5YS00MGM0LThhNTctZDk3MDg1YjgxNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKybzjF9VZUQkp98OTP15kK5TeVfNZ4MVYGP A62lb47sCXfbUGmI37LCqwWKEw3C+xJb4+zAl3XEC92WwZNCu9L/zmco9S4jpdzm zAdQgh6hlWP9fuobV6wp2p5CipH7vk2gknxBiKA0pZK5/b3+1hRuVZnO/wCMgwSt 8jneBcDaxlC7nN8sAiEjw3K4+HDjslsizNIs0sHs36sgIWhWR35j+U6PWJcVakoG KUMipCQIcg+QWTVYdBblR5F+3/RyJoEnAfKNyXmhXW9OlVZA+ae+8KQr8dPB3NSw hHECPgnDhBfbQJUAv7TSi/3sAlu1wt3z0OMJZ/URTktJ8qRb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIvbD7Wc7GESUDvD8EStWw1QmkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvNTdjMGRjYjktYTA2YS0z OTNmLWFlOWQtOWNiZDgwMTM0NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZp/xSMo6nuozAYdzkZXaWB2A4hMGxOMoU7svkxjGOh8tHn4hp+5GN8 BD1aaWkMMQ8prQRZlQWeqD8+qPY7q9yWIAtuuy3y9DLL0GK4kOqmBhXFkYBHUkxw brMhRful+IgoucF1ONwxHngjhAfxQxY2lbrxk5JeYAs97p4rXxVj8dc5YNJE2+E4 KtO2rBESZeiuPyYOH/yB7XEOABuaZDdJNWV3PV4O+t89QbfplynD5EARsgtriYYs T2y8GC+v9RPBPe0wYRaNqupuh38dv3fUVTJGqSVP0al+622nvqbze0v+r2QbhWOa gOFF/+EQoB9l8I7pYwjXH5PPI5fY9io= -----END CERTIFICATE-----Generated at Sun Oct 19 20:55:01 2025 by rpki-client