$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa File: ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa (raw, json) Hash identifier: oxh+Rc5v8r8VIFyc74jMNJdGhTZ2Vk3YAvhJGJ2CPFg= Subject key identifier: BC:97:98:1A:59:2D:8E:A3:15:CF:27:1F:33:24:38:81:B1:0B:5D:8E Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c Certificate serial: 010D0C9F4328584B7B220CB5ADBE1CA07B660700 Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7843 IP address blocks: 199.192.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:0c:b5:ad:be:1c:a0:7b:66:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=7b95a949-bfa2-4ab9-b484-d23447a56b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:05:42:8a:82:f0:b5:e0:21:9c:d7:d5:94: 83:d0:42:85:53:34:cb:0c:a8:05:3d:28:3c:b3:f7: dd:f0:c7:3c:8d:61:f5:db:0d:0d:6c:90:44:4f:0f: 87:59:e5:8e:f6:5d:18:a4:90:d1:ad:8d:ac:c7:de: 74:40:fd:ee:52:4c:39:5f:cf:23:88:92:e1:a2:ef: 11:db:db:a2:66:4c:b5:09:27:3e:2c:cd:55:8f:72: eb:6f:6e:2c:e6:63:36:52:9b:ec:de:eb:5c:d3:90: de:7c:ff:5c:69:22:a0:b3:8f:5a:8c:4a:ac:87:69: b7:53:4e:43:1c:67:31:ac:6a:55:b9:25:ae:53:42: ef:67:f8:10:14:7a:02:63:f0:ad:8f:b0:bd:17:04: db:97:b7:47:66:06:fe:9a:f7:06:98:34:5f:c2:c4: ff:ea:85:41:50:2b:72:b8:19:aa:c3:e8:9b:c2:b8: 4e:00:ab:08:8c:43:e5:23:3c:c7:ae:d4:10:46:7a: f5:73:d4:2b:8d:0d:75:be:f6:51:fc:83:55:64:f1: 10:67:01:6d:21:40:9d:34:06:d0:64:74:61:66:bb: 72:76:c2:10:18:57:ae:ae:2d:90:20:ad:0f:0f:af: 1a:2a:84:26:aa:7a:39:1c:ce:ef:78:6d:ae:bf:d2: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:98:1A:59:2D:8E:A3:15:CF:27:1F:33:24:38:81:B1:0B:5D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl X509v3 Authority Key Identifier: keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer sbgp-ipAddrBlock: critical IPv4: 199.192.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:31:47:7b:51:5e:67:a9:b1:f4:a9:2a:98:bc:8e:23:fc:18: e5:1d:c8:d4:c3:0b:e3:d6:e1:1e:c8:ea:f0:6d:be:9f:fa:4d: 03:92:08:32:ab:73:00:c4:01:f2:57:52:ff:02:2d:ad:ac:d7: fb:0c:17:9b:aa:36:3c:c5:58:72:d7:09:9e:28:03:4d:02:dd: 33:b6:c1:42:99:74:50:96:8b:d1:92:01:7e:9a:2f:b9:c5:c5: 62:af:db:94:ac:e3:91:f0:71:f9:46:f1:b3:b2:3e:03:c4:34: 64:1c:40:a3:02:7a:fa:e2:df:12:73:e0:e0:a1:e2:1f:58:8c: 5d:80:d5:5e:93:7e:aa:48:60:41:21:54:26:0e:d6:b5:ef:b2: fb:37:79:ae:f2:61:4f:f2:4e:e3:08:af:5d:e8:76:69:c2:4a: 34:bd:f8:79:2f:5b:3d:da:4c:72:e1:90:d5:f4:ed:8e:c8:95: 02:00:60:33:4f:9f:89:da:cd:ca:5e:93:60:8c:67:ad:e5:b9: 02:63:05:d2:37:80:7a:7c:58:d9:d5:ac:9b:c7:b1:cc:66:6e: 64:a9:70:b0:ed:29:f6:04:0f:54:eb:67:c5:f5:86:46:56:15: 35:ab:e4:53:ba:8f:2e:72:59:66:c3:f3:6d:0b:81:0c:d7:c5: c7:4d:fa:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Igy1rb4coHtmBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1NGYxOWQtYzE0ZS00OTlmLThkNjYtMzU3OTcwMjQ4 ZDJjMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk N2I5NWE5NDktYmZhMi00YWI5LWI0ODQtZDIzNDQ3YTU2YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf0FQoqC8LXgIZzX1ZSD0EKFUzTLDKgFPSg8 s/fd8Mc8jWH12w0NbJBETw+HWeWO9l0YpJDRrY2sx950QP3uUkw5X88jiJLhou8R 29uiZky1CSc+LM1Vj3Lrb24s5mM2Upvs3utc05DefP9caSKgs49ajEqsh2m3U05D HGcxrGpVuSWuU0LvZ/gQFHoCY/Ctj7C9FwTbl7dHZgb+mvcGmDRfwsT/6oVBUCty uBmqw+ibwrhOAKsIjEPlIzzHrtQQRnr1c9QrjQ11vvZR/INVZPEQZwFtIUCdNAbQ ZHRhZrtydsIQGFeuri2QIK0PD68aKoQmqno5HM7veG2uv9KMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyXmBpZLY6jFc8nHzMkOIGxC12OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0 ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5NzAyNDhkMmMvZWMyZjk4ZGMtYzAyZS0z ZDBjLWJjOGEtZmVjNTY1MGM3ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDQ1NGYxOWQtYzE0ZS00OTlmLThk NjYtMzU3OTcwMjQ4ZDJjLzQ0NTRmMTlkLWMxNGUtNDk5Zi04ZDY2LTM1Nzk3MDI0 OGQyYy5jcmwwHwYDVR0jBBgwFoAUuQxer4UTHxI958/WyvJdVBacbi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5 NzAyNDhkMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYxR3tRXmepsfSpKpi8jiP8GOUdyNTDC+PW4R7I6vBtvp/6TQOSCDKr cwDEAfJXUv8CLa2s1/sMF5uqNjzFWHLXCZ4oA00C3TO2wUKZdFCWi9GSAX6aL7nF xWKv25Ss45HwcflG8bOyPgPENGQcQKMCevri3xJz4OCh4h9YjF2A1V6TfqpIYEEh VCYO1rXvsvs3ea7yYU/yTuMIr13odmnCSjS9+HkvWz3aTHLhkNX07Y7IlQIAYDNP n4nazcpek2CMZ63luQJjBdI3gHp8WNnVrJvHscxmbmSpcLDtKfYED1TrZ8X1hkZW FTWr5FO6jy5yWWbD820LgQzXxcdN+hU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:04 2025 by rpki-client