$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa File: 9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json) Hash identifier: iduQonqBhW8OXf5w5wCig+sTwGnRWq04x/89hzhAMNI= Subject key identifier: 6C:AE:1F:B0:6B:C3:09:3B:2E:B9:F3:ED:85:3B:D5:E6:FB:3A:60:F4 Certificate issuer: /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Certificate serial: 010D0C9F4328584B7C876354684D424007A44C80 Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 13552 IP address blocks: 199.202.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:63:54:68:4d:42:40:07:a4:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=eea7b703-6f13-436d-abb1-9b7e6c51becf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:1a:e6:c4:d8:e9:f3:55:5f:9b:61:f1:de: c2:f1:5e:3b:d0:3b:74:28:66:44:38:51:21:9f:99: 1d:4f:17:1b:4b:41:40:72:25:b5:9e:0b:8e:0b:9e: 67:9a:5c:46:ff:ad:49:ac:eb:61:67:1d:30:57:ad: 54:d1:79:cd:c2:a6:13:e5:d3:e4:87:ac:ed:0a:30: f8:43:e2:73:cb:f6:fc:c3:c6:37:3c:b4:21:e7:a0: e6:f2:f6:d7:bd:77:60:31:5d:d1:61:7e:a3:04:7d: 58:a5:f7:a4:80:19:c7:c8:14:67:f8:2e:44:e2:6a: 26:5d:2e:88:1b:35:ac:95:49:48:c4:30:f5:bd:fa: 10:43:63:4a:02:7e:22:30:53:72:5e:8a:af:12:6f: 4d:8e:99:3a:50:ee:d9:4e:36:51:97:27:aa:35:9d: 60:f5:bb:9a:1f:a0:05:fa:66:78:e6:b8:26:3c:09: a9:ff:e3:ba:a9:5e:0a:13:1d:64:3a:fd:18:18:f4: 9e:9b:96:7d:14:be:d4:27:c2:44:2a:92:79:23:8a: c2:66:8f:cf:a3:d1:5d:5c:36:dc:7c:a0:5b:26:0a: 96:69:44:bc:08:20:6e:1e:b9:cf:c7:33:06:77:4e: 7e:06:9f:50:c7:88:e2:70:01:a8:24:39:ec:c6:e6: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:1F:B0:6B:C3:09:3B:2E:B9:F3:ED:85:3B:D5:E6:FB:3A:60:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl X509v3 Authority Key Identifier: keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:59:75:29:8e:34:0d:66:f0:4d:93:c7:89:3e:17:f2:9f: 04:e0:61:f2:da:ee:4b:33:b1:38:37:01:db:0c:c3:70:fd:39: 7e:c9:1d:af:2e:ab:6a:95:bf:4f:fe:21:2b:bf:7a:ca:84:a1: 5f:2d:78:39:6e:22:c4:84:b5:44:dd:60:1c:97:b2:59:ea:f4: b4:38:9c:68:cc:3b:eb:1f:e4:55:2b:61:4a:ec:4d:b5:bb:c7: 9b:d7:61:c5:6d:ab:2d:f7:3b:b8:1f:67:91:7b:a9:99:67:0d: 33:e2:8f:bd:f1:22:13:10:cd:f4:2c:38:ef:ed:6f:9f:01:e0: 05:a6:39:93:4a:92:b1:9a:47:6e:4f:5f:12:5e:da:20:c2:91: 0a:b3:98:9c:c9:a4:62:7c:e3:53:37:75:01:a1:9b:08:fb:9e: 31:54:79:f1:a3:6c:db:f9:01:88:30:22:22:21:35:50:19:b1: c5:87:1f:0a:3d:7f:aa:c3:ea:59:fa:b3:61:26:59:97:8b:ac: af:7d:73:a7:d7:e5:ac:72:82:07:49:66:b6:d7:08:c5:a4:21: 43:20:80:e2:3f:67:0d:fd:36:1f:ca:ee:16:d0:0e:e1:a7:01: b3:03:cd:36:29:04:c9:b0:32:07:82:f8:a4:df:ea:ed:2a:2e: 35:2d:e6:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2NUaE1CQAekTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1 ZDUwMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZWVhN2I3MDMtNmYxMy00MzZkLWFiYjEtOWI3ZTZjNTFiZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ4a5sTY6fNVX5th8d7C8V470Dt0KGZEOFEh n5kdTxcbS0FAciW1nguOC55nmlxG/61JrOthZx0wV61U0XnNwqYT5dPkh6ztCjD4 Q+Jzy/b8w8Y3PLQh56Dm8vbXvXdgMV3RYX6jBH1YpfekgBnHyBRn+C5E4momXS6I GzWslUlIxDD1vfoQQ2NKAn4iMFNyXoqvEm9Njpk6UO7ZTjZRlyeqNZ1g9buaH6AF +mZ45rgmPAmp/+O6qV4KEx1kOv0YGPSem5Z9FL7UJ8JEKpJ5I4rCZo/Po9FdXDbc fKBbJgqWaUS8CCBuHrnPxzMGd05+Bp9Qx4jicAGoJDnsxuYntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyuH7Brwwk7Lrnz7YU71eb7OmD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBm NTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvOWY5MDRkNmYtMDRjZi0z MWJlLTgxN2UtMThlZTc2NjNiNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTkwZjU0ZmQtMjAwYS00YjJmLTkx NGItMmJjODUzMGI1ZDUwL2U5MGY1NGZkLTIwMGEtNGIyZi05MTRiLTJiYzg1MzBi NWQ1MC5jcmwwHwYDVR0jBBgwFoAUiGxSStz6eOcoQRRAZ9Q9LbvH9VYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4 NTMwYjVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazWXUpjjQNZvBNk8eJPhfynwTgYfLa7kszsTg3AdsMw3D9OX7JHa8u q2qVv0/+ISu/esqEoV8teDluIsSEtUTdYByXslnq9LQ4nGjMO+sf5FUrYUrsTbW7 x5vXYcVtqy33O7gfZ5F7qZlnDTPij73xIhMQzfQsOO/tb58B4AWmOZNKkrGaR25P XxJe2iDCkQqzmJzJpGJ841M3dQGhmwj7njFUefGjbNv5AYgwIiIhNVAZscWHHwo9 f6rD6ln6s2EmWZeLrK99c6fX5axyggdJZrbXCMWkIUMggOI/Zw39Nh/K7hbQDuGn AbMDzTYpBMmwMgeC+KTf6u0qLjUt5uU= -----END CERTIFICATE-----Generated at Tue Oct 21 13:14:13 2025 by rpki-client