$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: eDqKNUpxO+tLTgcEskAXLZUnYMi27sVbQhVxE9HkYT4= Subject key identifier: 59:9B:D1:43:56:DC:F1:AA:1B:5F:BF:AD:A7:55:DB:AA:15:A7:B7:0C Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584B87B21FC103ABC99BF1B90D00 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:c1:03:ab:c9:9b:f1:b9:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=185efe03-e877-46af-8ead-775d2f4eb3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:04:4e:a7:74:31:68:85:ec:fa:a0:82:2d: b7:ee:98:21:03:ea:f0:22:eb:50:3a:86:8f:9c:50: ea:fc:69:ce:a7:1a:70:ad:8d:12:72:6d:3a:05:99: a8:56:d6:98:81:9f:95:ca:30:7d:b7:6d:54:f6:b6: 82:a0:dd:90:d5:b6:0d:89:5f:8b:4f:7a:8a:b1:e7: 9b:41:67:35:02:8a:23:c5:f0:49:92:95:84:0b:53: 16:5a:21:21:1b:59:80:b6:96:34:04:df:0b:7b:2e: 5d:ad:84:da:23:f1:08:33:50:e6:84:aa:c4:50:d4: c5:eb:3a:85:66:1b:14:30:76:e2:03:c1:e5:30:e5: 48:da:86:83:d3:c5:14:56:e7:2d:69:4a:4b:59:bf: 85:a8:df:57:8d:56:d3:7a:09:69:5e:04:53:97:82: e8:a8:6f:61:a4:2c:08:98:bd:2c:bc:57:88:d3:bb: c5:f8:38:e2:81:84:ac:58:38:df:9f:46:12:fd:6f: 8f:1e:f7:dd:a4:ee:c8:51:67:66:7e:30:e2:59:30: 44:f6:29:14:e1:32:88:27:84:d9:c0:1e:f6:46:e2: 65:8d:32:ea:b4:aa:d0:2d:59:05:c7:35:21:f4:f5: 6f:c5:d3:55:a3:ac:fb:94:3c:9e:46:e0:08:2f:78: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:D1:43:56:DC:F1:AA:1B:5F:BF:AD:A7:55:DB:AA:15:A7:B7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cf:3a:e1:32:04:c8:7d:20:98:45:21:5f:77:25:64:e8:f0: 2f:57:f8:fd:62:e8:91:2c:cb:ab:f6:f9:1e:df:70:af:63:93: f9:d9:ab:e7:4e:29:50:de:17:c5:a9:a1:d8:03:eb:d4:30:03: 6b:07:fa:5f:82:bb:0d:d8:86:78:f2:a2:78:2d:4a:ce:e5:04: 55:31:53:3e:47:89:91:ed:85:97:47:b1:79:f2:ba:14:26:44: f8:53:a3:d2:74:b2:9a:6f:bc:96:34:55:83:c1:b6:5c:79:68: d0:8f:40:9b:26:5d:6d:3b:ec:40:17:4f:3c:c6:25:b6:cf:d6: d1:b2:76:21:56:e4:ae:70:a6:a6:4c:de:08:82:4a:3a:9a:59: 16:ea:23:61:aa:ea:0d:20:6f:9b:49:56:85:6d:85:2b:d3:43: f3:c1:f9:56:ab:f8:3e:c7:61:7d:b2:16:cc:92:10:08:0c:df: 61:da:21:c9:f2:4f:5a:24:62:65:df:ae:c4:cc:22:e0:19:50: 39:49:a7:b0:97:58:56:c5:76:f2:f6:99:47:1c:d7:7e:32:c9: 61:23:5b:92:65:26:bc:05:eb:1a:70:ae:20:6e:75:73:83:b5: e8:35:3b:f6:56:71:a4:6c:e3:85:8a:c1:36:d7:e9:de:48:9d: 44:c1:c4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh/BA6vJm/G5DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MTg1ZWZlMDMtZTg3Ny00NmFmLThlYWQtNzc1ZDJmNGViM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNsETqd0MWiF7Pqggi237pghA+rwIutQOoaP nFDq/GnOpxpwrY0Scm06BZmoVtaYgZ+VyjB9t21U9raCoN2Q1bYNiV+LT3qKseeb QWc1AoojxfBJkpWEC1MWWiEhG1mAtpY0BN8Ley5drYTaI/EIM1DmhKrEUNTF6zqF ZhsUMHbiA8HlMOVI2oaD08UUVuctaUpLWb+FqN9XjVbTeglpXgRTl4LoqG9hpCwI mL0svFeI07vF+DjigYSsWDjfn0YS/W+PHvfdpO7IUWdmfjDiWTBE9ikU4TKIJ4TZ wB72RuJljTLqtKrQLVkFxzUh9PVvxdNVo6z7lDyeRuAIL3g95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmb0UNW3PGqG1+/radV26oVp7cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPPOuEyBMh9IJhFIV93JWTo8C9X+P1i6JEsy6v2+R7fcK9jk/nZq+dO KVDeF8WpodgD69QwA2sH+l+Cuw3YhnjyongtSs7lBFUxUz5HiZHthZdHsXnyuhQm RPhTo9J0sppvvJY0VYPBtlx5aNCPQJsmXW077EAXTzzGJbbP1tGydiFW5K5wpqZM 3giCSjqaWRbqI2Gq6g0gb5tJVoVthSvTQ/PB+Var+D7HYX2yFsySEAgM32HaIcny T1okYmXfrsTMIuAZUDlJp7CXWFbFdvL2mUcc134yyWEjW5JlJrwF6xpwriBudXOD teg1O/ZWcaRs44WKwTbX6d5InUTBxOI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:08 2025 by rpki-client