$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa File: 8bfed627-bbb9-38ca-889a-50c818628a40.roa (raw, json) Hash identifier: m0y9SzToTH+Z0fkbXsGBEYHCmzwiOV9luJ/yRKy6IeM= Subject key identifier: 1F:9E:9C:CE:E7:E2:EA:D7:6C:0A:63:1E:26:05:B4:DC:48:83:43:ED Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584B7C875EA7FE340ED02CF8FBA0 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 395807 IP address blocks: 199.60.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5e:a7:fe:34:0e:d0:2c:f8:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=217a78d6-8ecf-44f0-8911-127c359df7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:e8:1f:83:0b:e9:e4:74:5f:df:22:f2:bd: ff:dc:17:0f:6b:e2:d8:31:a6:73:8e:4e:1c:c9:9a: a7:0c:90:98:18:42:60:d0:c0:ab:3c:f4:63:60:db: ba:1a:c6:c3:cf:3f:c7:d5:c7:a2:f6:65:68:a6:47: 47:60:55:af:1f:7f:c0:f8:7a:cc:b3:ff:c7:c0:a5: b3:bc:fb:4e:b6:f4:fc:58:d1:31:24:a0:e9:3f:e0: 2b:99:94:9f:92:42:e9:d0:43:b7:28:63:e5:c5:e2: 9a:2d:a2:a8:1c:86:32:4d:55:84:da:f9:81:c4:2b: 99:bc:df:9a:69:f1:c0:40:cd:cc:3f:bf:1e:8d:47: 16:87:1d:df:a7:a7:94:45:99:8c:cd:27:18:4b:63: 96:93:06:5f:cc:07:29:cd:a7:ce:89:d3:4e:5c:6a: 0b:17:79:4b:d2:df:5a:fc:b7:6b:16:0d:4a:3e:16: bf:09:d7:ba:eb:85:f2:66:2e:c5:b1:15:9f:71:d4: 31:23:6d:41:de:50:64:4c:76:59:ee:08:7d:79:18: 0d:b8:c7:96:c1:39:74:94:12:41:18:46:ae:44:d5: d7:f7:02:61:63:8d:46:ce:5e:f7:52:c1:5c:7e:f3: 7a:9a:e8:85:82:b4:8b:61:68:be:15:b6:c4:c1:af: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:9C:CE:E7:E2:EA:D7:6C:0A:63:1E:26:05:B4:DC:48:83:43:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8bfed627-bbb9-38ca-889a-50c818628a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:03:d5:12:a7:cc:86:fc:fd:9c:36:c7:86:27:d8:64:7e:65: 15:c8:e4:72:b7:3f:0d:49:13:68:84:07:4d:78:c4:54:51:d1: 96:9b:22:14:17:56:dd:82:18:91:cd:15:71:61:82:8e:3e:21: 9f:11:e1:08:af:2c:e6:03:7b:9f:bb:ec:17:4e:8f:0b:f2:9c: d2:26:08:51:7a:20:61:ff:5a:13:aa:b1:12:ab:5e:f3:5b:b8: ec:93:48:4d:8a:1e:bc:c0:55:51:59:6d:c2:09:37:60:43:9a: 81:bd:d1:1f:86:35:7a:9b:58:9a:76:fe:e8:34:3f:dc:ff:37: 58:0a:cc:64:5e:78:bd:15:bd:2d:5a:0c:ea:81:b2:67:41:bd: 04:14:00:ce:01:d5:cc:72:97:cd:0e:df:54:4f:8c:73:57:6f: a6:ba:db:1e:3a:74:f6:e2:fd:59:5e:1e:25:5c:dd:80:94:61: 83:9d:e5:bf:fe:cb:5d:dc:28:78:ec:58:74:e0:0a:83:61:e0: de:bd:ac:e3:3d:52:04:57:e8:f2:fd:59:db:cf:93:dd:bd:20: 9f:e3:fa:15:0f:08:d5:60:6d:53:97:1a:6f:06:a6:63:26:cc: 29:2e:ad:4c:8a:da:1d:90:b2:bd:54:08:97:2a:33:19:c1:6e: 7a:24:21:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h16n/jQO0Cz4+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MjE3YTc4ZDYtOGVjZi00NGYwLTg5MTEtMTI3YzM1OWRmN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBroH4ML6eR0X98i8r3/3BcPa+LYMaZzjk4c yZqnDJCYGEJg0MCrPPRjYNu6GsbDzz/H1cei9mVopkdHYFWvH3/A+HrMs//HwKWz vPtOtvT8WNExJKDpP+ArmZSfkkLp0EO3KGPlxeKaLaKoHIYyTVWE2vmBxCuZvN+a afHAQM3MP78ejUcWhx3fp6eURZmMzScYS2OWkwZfzAcpzafOidNOXGoLF3lL0t9a /LdrFg1KPha/Cde664XyZi7FsRWfcdQxI21B3lBkTHZZ7gh9eRgNuMeWwTl0lBJB GEauRNXX9wJhY41Gzl73UsFcfvN6muiFgrSLYWi+FbbEwa/DCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+enM7n4urXbApjHiYFtNxIg0PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvOGJmZWQ2MjctYmJiOS0z OGNhLTg4OWEtNTBjODE4NjI4YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcD1RKnzIb8/Zw2x4Yn2GR+ZRXI5HK3Pw1JE2iEB014xFRR0ZabIhQX Vt2CGJHNFXFhgo4+IZ8R4QivLOYDe5+77BdOjwvynNImCFF6IGH/WhOqsRKrXvNb uOyTSE2KHrzAVVFZbcIJN2BDmoG90R+GNXqbWJp2/ug0P9z/N1gKzGReeL0VvS1a DOqBsmdBvQQUAM4B1cxyl80O31RPjHNXb6a62x46dPbi/VleHiVc3YCUYYOd5b/+ y13cKHjsWHTgCoNh4N69rOM9UgRX6PL9WdvPk929IJ/j+hUPCNVgbVOXGm8GpmMm zCkurUyK2h2Qsr1UCJcqMxnBbnokIZo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:57 2025 by rpki-client