$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa File: 611240e0-65a6-3754-a0a6-84e5e23b35ff.roa (raw, json) Hash identifier: bAlHtzgFD0ZAtft0q0FWUpAs1H13ljcggq64O5U8wIA= Subject key identifier: 1A:F8:8D:06:8D:DF:29:03:3E:5F:B6:17:2E:6F:76:42:83:A0:79:6A Certificate issuer: /CN=3d7c7699-15af-4ea4-8825-93e2f116691f Certificate serial: 010D0C9F4328584B4E7717683967BAA216914680 Authority key identifier: B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 376 IP address blocks: 199.84.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:17:68:39:67:ba:a2:16:91:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7c7699-15af-4ea4-8825-93e2f116691f Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7382570e-a848-4ab1-a7bc-27f972e65131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:fd:cb:5a:7f:e0:6e:49:62:46:05:7d:48: 03:78:22:a8:2a:5a:86:e5:b5:3e:c1:82:37:e2:af: 94:0f:de:c8:df:62:3c:0e:12:dc:0a:f4:73:b3:98: 86:d4:b3:0e:cf:fd:db:48:02:ff:c6:a6:b6:1f:af: fb:c0:f3:e7:a9:4f:4d:be:0b:58:74:6f:66:f6:e8: 62:4a:21:ae:41:ef:15:0c:d5:e5:05:be:3c:a7:2d: 6c:f1:e5:e1:ae:ac:a1:38:57:9b:7c:09:be:a2:e8: bb:86:d3:b6:3c:ba:e4:cd:ae:45:1d:92:7a:5d:02: c7:c6:49:26:ef:86:9d:be:3e:ba:a8:c5:23:7d:91: 50:28:6b:49:93:3f:16:80:27:a6:a2:4c:41:72:b6: 01:f3:62:8f:07:17:fc:11:ae:7d:c4:a4:e4:ee:8d: 5b:14:5a:2e:c3:26:23:19:82:31:21:ea:fb:d9:20: 3b:3c:9d:6b:ba:76:43:fc:98:93:b6:1d:57:32:7b: 30:34:ec:85:27:af:2f:30:1e:6c:79:94:51:6e:ed: 04:6d:3d:46:d0:6c:6d:8c:e2:4b:9b:60:aa:93:53: e3:c7:1e:2e:ee:25:b9:1e:44:bf:c3:89:7a:ca:c1: 27:64:bd:0b:1b:3a:c8:4e:70:b1:ab:d9:18:a1:05: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:8D:06:8D:DF:29:03:3E:5F:B6:17:2E:6F:76:42:83:A0:79:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl X509v3 Authority Key Identifier: keyid:B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer sbgp-ipAddrBlock: critical IPv4: 199.84.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:75:84:0e:af:f0:d6:ab:64:5c:0b:2e:0a:ea:95:53:85:60: 5c:2f:09:dc:bf:e5:bf:9b:a6:87:16:a3:33:b1:c3:c5:48:0e: 6d:49:36:a2:e5:c4:44:ec:e6:9c:9a:58:e5:fd:6f:5a:6c:63: 31:e1:b2:47:33:0a:62:05:d2:15:fa:26:35:c4:ed:7a:28:09: 65:59:1b:1c:c7:24:4c:46:3e:80:1f:4b:55:e6:11:cd:8b:8d: 30:85:4b:51:03:32:6c:c8:e7:59:69:3f:6f:b9:6d:1e:45:99: 7f:f4:b1:97:3f:9d:d2:b4:87:f4:21:ed:fe:06:11:d1:5e:42: 9b:f1:e4:01:72:f0:8d:aa:a9:82:8c:bb:7a:45:2a:ff:a7:2f: d5:0c:03:7e:3d:bb:fb:fa:af:f6:c6:d1:2a:ec:cc:d3:a9:99: 27:5f:83:84:2d:49:31:02:0a:68:c0:da:7a:c2:5d:26:e1:f1: 34:fc:c1:6e:ea:39:ac:f3:c4:bd:c6:f7:9d:78:dc:d3:37:0c: 8e:f3:c8:c2:67:c8:d9:1c:17:0a:f6:27:b4:02:b2:33:2f:f6: a1:28:51:c8:ff:d4:98:33:2d:8d:9f:7d:8a:f5:0f:ce:5e:9a: 4b:dd:d7:55:76:8f:b9:b8:64:64:b4:85:b0:a4:c3:f2:a2:97: 50:60:e2:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxdoOWe6ohaRRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3Yzc2OTktMTVhZi00ZWE0LTg4MjUtOTNlMmYxMTY2 OTFmMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzM4MjU3MGUtYTg0OC00YWIxLWE3YmMtMjdmOTcyZTY1MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwX9y1p/4G5JYkYFfUgDeCKoKlqG5bU+wYI3 4q+UD97I32I8DhLcCvRzs5iG1LMOz/3bSAL/xqa2H6/7wPPnqU9NvgtYdG9m9uhi SiGuQe8VDNXlBb48py1s8eXhrqyhOFebfAm+oui7htO2PLrkza5FHZJ6XQLHxkkm 74advj66qMUjfZFQKGtJkz8WgCemokxBcrYB82KPBxf8Ea59xKTk7o1bFFouwyYj GYIxIer72SA7PJ1runZD/JiTth1XMnswNOyFJ68vMB5seZRRbu0EbT1G0GxtjOJL m2Cqk1Pjxx4u7iW5HkS/w4l6ysEnZL0LGzrITnCxq9kYoQXg3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr4jQaN3ykDPl+2Fy5vdkKDoHlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDdj NzY5OS0xNWFmLTRlYTQtODgyNS05M2UyZjExNjY5MWYvNjExMjQwZTAtNjVhNi0z NzU0LWEwYTYtODRlNWUyM2IzNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2Q3Yzc2OTktMTVhZi00ZWE0LTg4 MjUtOTNlMmYxMTY2OTFmLzNkN2M3Njk5LTE1YWYtNGVhNC04ODI1LTkzZTJmMTE2 NjkxZi5jcmwwHwYDVR0jBBgwFoAUsIVMaoSkKWpA0ysSo7lomSbuAkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDdjNzY5OS0xNWFmLTRlYTQtODgyNS05M2Uy ZjExNjY5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK91hA6v8NarZFwLLgrqlVOFYFwvCdy/5b+bpocWozOxw8VIDm1JNqLl xETs5pyaWOX9b1psYzHhskczCmIF0hX6JjXE7XooCWVZGxzHJExGPoAfS1XmEc2L jTCFS1EDMmzI51lpP2+5bR5FmX/0sZc/ndK0h/Qh7f4GEdFeQpvx5AFy8I2qqYKM u3pFKv+nL9UMA349u/v6r/bG0SrszNOpmSdfg4QtSTECCmjA2nrCXSbh8TT8wW7q OazzxL3G95143NM3DI7zyMJnyNkcFwr2J7QCsjMv9qEoUcj/1JgzLY2ffYr1D85e mkvd11V2j7m4ZGS0hbCkw/Kil1Bg4uQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:53 2025 by rpki-client