$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/037dfd81-26f0-30f6-b4bd-a120fc1458ff.roa File: 037dfd81-26f0-30f6-b4bd-a120fc1458ff.roa (raw, json) Hash identifier: 68OXpX7RWihahDIsbjFJjQ/aAPRLnpvwxoKdBq4ihm8= Subject key identifier: BA:E6:3D:91:42:AA:85:13:42:2F:B3:6A:EF:B7:EF:9E:0A:0F:B1:57 Certificate issuer: /CN=f5556e82-577f-4c2d-bee9-826d7311077d Certificate serial: 010D0C9F4328584B7DECCBC12D0AB691AB13B740 Authority key identifier: 2F:33:12:C7:E6:2C:E6:19:F8:9C:BE:93:4F:AF:98:63:5B:5C:CE:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/037dfd81-26f0-30f6-b4bd-a120fc1458ff.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 62680 IP address blocks: 199.58.32.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/f5556e82-577f-4c2d-bee9-826d7311077d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/f5556e82-577f-4c2d-bee9-826d7311077d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:cb:c1:2d:0a:b6:91:ab:13:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5556e82-577f-4c2d-bee9-826d7311077d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=67be66f2-189e-4c74-ad2e-0a969566b279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:06:c9:25:34:a6:19:ac:2f:95:bd:2f:fa: df:f0:e4:45:e6:32:d4:5c:20:2e:d8:be:3e:49:ef: 7e:11:f3:a3:18:55:99:64:e9:34:27:04:89:c3:b7: 31:3f:f5:c4:7d:2b:3f:70:1a:e9:9b:7f:56:47:35: c7:dc:be:1b:d0:b9:8d:80:be:89:0f:c7:dc:0c:4f: dc:c9:87:6c:43:f1:d5:6d:7d:83:ee:c2:c8:1c:cd: 64:d0:38:28:80:e5:e9:0f:41:4d:07:2b:7c:30:cd: 51:7a:20:44:77:43:b5:75:47:f2:06:bc:5a:bc:ce: f7:ab:87:09:18:f8:48:c4:17:e4:8a:38:e8:e4:1a: 61:9a:c2:b1:2d:ea:c9:09:98:84:d0:a6:c7:1a:08: 27:ba:cb:ad:a3:f9:63:15:f9:47:1a:7c:0d:1d:d9: 99:81:d8:3d:6a:0b:a2:d1:20:68:61:da:c0:50:6c: a4:60:fb:44:ff:8f:84:a2:84:e8:9e:fd:83:89:e7: 96:0e:6c:06:0a:37:f6:a4:65:51:5c:a9:35:76:36: 64:c4:33:d0:ef:5b:02:fd:33:77:03:36:dd:0d:8c: 9b:e5:9e:1f:72:37:1f:71:0e:1f:28:65:08:5a:11: 13:48:e1:98:95:a6:1c:3b:ce:6c:f1:50:99:9c:37: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:3D:91:42:AA:85:13:42:2F:B3:6A:EF:B7:EF:9E:0A:0F:B1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/037dfd81-26f0-30f6-b4bd-a120fc1458ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d/f5556e82-577f-4c2d-bee9-826d7311077d.crl X509v3 Authority Key Identifier: keyid:2F:33:12:C7:E6:2C:E6:19:F8:9C:BE:93:4F:AF:98:63:5B:5C:CE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f5556e82-577f-4c2d-bee9-826d7311077d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:97:eb:b1:96:31:29:e3:e4:e8:1c:f5:ef:61:55:56:f3:ec: 6d:af:c2:a3:cd:fa:dd:c6:7a:1e:a3:17:2d:26:51:4d:5d:36: 92:0c:83:9b:b0:e9:eb:c4:35:a5:20:b5:74:f8:de:07:1f:ef: c6:96:42:fb:37:fa:53:f6:60:78:5f:17:26:3a:a5:09:97:1b: c7:45:2e:1d:4a:cb:1f:62:78:3f:12:3a:80:6d:97:b9:4b:91: 38:58:88:22:16:f1:46:2f:f3:af:97:fd:21:93:8f:ba:cb:97: 40:ad:98:77:e0:94:52:99:03:0d:28:ae:21:8e:1e:1c:dd:20: ce:14:35:3b:4e:86:ad:63:72:23:e7:2d:91:15:7b:80:a6:74: 08:6d:d4:3a:55:fb:c9:7d:8a:3e:bc:3a:6a:14:a7:8a:24:0a: 94:8e:68:bb:b4:7f:01:10:d2:af:4b:b3:e4:68:db:10:e6:d1: 8c:9c:21:b8:ec:44:d2:49:68:a2:19:d9:6b:42:28:1d:2c:d0: 2e:28:f6:1f:3f:bf:78:60:00:c9:c3:17:a6:ae:66:5a:42:f8: fc:5f:e7:f3:9b:6d:f3:fa:ff:d4:69:45:28:c7:1e:28:31:42: ad:ec:18:cb:32:6c:ef:82:e4:03:f1:23:e4:f0:5b:d1:c4:95: d8:e6:c7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MvBLQq2kasTt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU1NTZlODItNTc3Zi00YzJkLWJlZTktODI2ZDczMTEw NzdkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NjdiZTY2ZjItMTg5ZS00Yzc0LWFkMmUtMGE5Njk1NjZiMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSsGySU0phmsL5W9L/rf8ORF5jLUXCAu2L4+ Se9+EfOjGFWZZOk0JwSJw7cxP/XEfSs/cBrpm39WRzXH3L4b0LmNgL6JD8fcDE/c yYdsQ/HVbX2D7sLIHM1k0DgogOXpD0FNByt8MM1ReiBEd0O1dUfyBrxavM73q4cJ GPhIxBfkijjo5BphmsKxLerJCZiE0KbHGggnusuto/ljFflHGnwNHdmZgdg9agui 0SBoYdrAUGykYPtE/4+EooTonv2DieeWDmwGCjf2pGVRXKk1djZkxDPQ71sC/TN3 AzbdDYyb5Z4fcjcfcQ4fKGUIWhETSOGYlaYcO85s8VCZnDfUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrmPZFCqoUTQi+zau+3754KD7FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mNTU1 NmU4Mi01NzdmLTRjMmQtYmVlOS04MjZkNzMxMTA3N2QvMDM3ZGZkODEtMjZmMC0z MGY2LWI0YmQtYTEyMGZjMTQ1OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjU1NTZlODItNTc3Zi00YzJkLWJl ZTktODI2ZDczMTEwNzdkL2Y1NTU2ZTgyLTU3N2YtNGMyZC1iZWU5LTgyNmQ3MzEx MDc3ZC5jcmwwHwYDVR0jBBgwFoAULzMSx+Ys5hn4nL6TT6+YY1tczlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mNTU1NmU4Mi01NzdmLTRjMmQtYmVlOS04MjZk NzMxMTA3N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyX67GWMSnj5Ogc9e9hVVbz7G2vwqPN+t3Geh6jFy0mUU1dNpIMg5uw 6evENaUgtXT43gcf78aWQvs3+lP2YHhfFyY6pQmXG8dFLh1Kyx9ieD8SOoBtl7lL kThYiCIW8UYv86+X/SGTj7rLl0CtmHfglFKZAw0oriGOHhzdIM4UNTtOhq1jciPn LZEVe4CmdAht1DpV+8l9ij68OmoUp4okCpSOaLu0fwEQ0q9Ls+Ro2xDm0YycIbjs RNJJaKIZ2WtCKB0s0C4o9h8/v3hgAMnDF6auZlpC+Pxf5/ObbfP6/9RpRSjHHigx Qq3sGMsybO+C5APxI+TwW9HEldjmx+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:02 2025 by rpki-client