$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa File: 13e06fb3-a846-3ab0-944b-535af99476d5.roa (raw, json) Hash identifier: 3q9KLMToclec6XLCykfn4SSDNtdHWi+td6aByQzgSjk= Subject key identifier: 05:7C:C2:23:0D:7E:6D:64:41:83:F5:A5:52:1D:EB:4A:B2:E8:9D:94 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584B28C6DB0C0D28210725E47D80 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 21534 IP address blocks: 199.59.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:db:0c:0d:28:21:07:25:e4:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=0d2bf916-7075-4c7a-9459-88fe7e45fe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:fb:8c:4b:ed:a8:6f:9d:13:16:6c:10:f5: 90:c0:d2:92:d0:d7:5f:13:e6:ef:25:cd:00:ef:6d: 6e:bf:88:62:ac:4a:0c:7e:63:04:c3:6a:cf:5d:52: e3:a1:b6:cc:f9:87:3b:b7:d7:a5:31:a9:7e:eb:93: 83:96:e5:62:4d:49:3b:0c:ac:1f:3a:5a:0a:ef:2a: f1:10:7a:04:fa:ce:78:6e:ec:13:3c:13:fe:0d:e3: ba:c1:62:0e:49:0d:12:f7:ef:85:32:a3:0e:22:02: f6:51:c3:b0:f1:87:86:dd:16:be:3a:9c:35:3f:0e: 85:54:17:55:93:9a:42:2f:80:a3:3b:07:e0:09:c5: 89:1d:7a:d2:11:2b:fe:ae:89:a9:77:0d:c2:97:0e: 4b:1d:fa:48:72:61:44:cb:8b:1a:33:90:49:2f:3c: 51:80:cc:99:55:bc:8d:70:75:eb:46:57:eb:c7:13: 60:4f:a6:4c:25:88:58:32:ad:9a:47:dd:66:d3:1c: df:09:08:a1:b2:08:62:06:3a:83:56:8b:f8:43:b2: 52:89:83:2d:55:3e:c0:10:ce:a0:a7:d5:b6:28:7f: 5e:c4:05:12:a3:98:2c:f3:1e:fa:e6:33:7f:d9:82: f4:24:50:8c:b9:81:b8:94:60:b6:9b:bb:10:83:20: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7C:C2:23:0D:7E:6D:64:41:83:F5:A5:52:1D:EB:4A:B2:E8:9D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.59.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f3:33:50:e3:17:cb:7a:19:32:91:84:54:cb:cd:14:32:52: 36:de:98:79:64:f1:95:a4:e0:9f:03:78:0f:da:33:d2:fc:8b: 78:f5:64:56:26:a4:49:21:a2:f7:1f:22:83:30:2e:d3:5c:96: b1:2b:26:b2:71:e5:04:b2:b5:13:9c:d7:75:07:8e:21:2e:d7: 52:58:df:11:1a:58:f4:65:ff:b8:54:d4:09:d8:fc:63:93:ea: a9:7e:ad:51:fc:ff:a0:d9:57:54:a5:99:2f:12:70:99:94:9d: f4:6f:b5:c1:44:00:2d:e2:b4:cc:ec:5f:20:d3:ad:b8:54:39: 8f:c1:a6:31:1f:4b:8a:47:f8:4f:f6:d7:a8:fc:ce:53:2e:1c: 3a:59:d6:d9:10:b6:c8:49:80:da:97:53:b0:a0:40:3d:53:34: b9:14:b7:e2:9f:c4:14:f1:41:ac:2e:3f:7d:d6:7e:50:34:c6: ae:3e:ae:a0:8d:2e:9c:40:98:52:6d:3b:e6:6b:88:a2:a2:35: 62:bb:58:68:c6:05:d3:0f:b3:b0:8c:c0:61:d9:54:de:0a:45: fd:64:00:a5:af:c0:0f:39:ec:09:2a:e5:59:e4:47:f4:26:a9: 34:c6:82:f0:6d:14:e1:6c:e7:3e:36:7f:94:43:06:54:40:3e: 67:47:c4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxtsMDSghByXkfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MGQyYmY5MTYtNzA3NS00YzdhLTk0NTktODhmZTdlNDVmZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWf7jEvtqG+dExZsEPWQwNKS0NdfE+bvJc0A 721uv4hirEoMfmMEw2rPXVLjobbM+Yc7t9elMal+65ODluViTUk7DKwfOloK7yrx EHoE+s54buwTPBP+DeO6wWIOSQ0S9++FMqMOIgL2UcOw8YeG3Ra+Opw1Pw6FVBdV k5pCL4CjOwfgCcWJHXrSESv+rompdw3Clw5LHfpIcmFEy4saM5BJLzxRgMyZVbyN cHXrRlfrxxNgT6ZMJYhYMq2aR91m0xzfCQihsghiBjqDVov4Q7JSiYMtVT7AEM6g p9W2KH9exAUSo5gs8x765jN/2YL0JFCMuYG4lGC2m7sQgyBSUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV8wiMNfm1kQYP1pVId60qy6J2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvMTNlMDZmYjMtYTg0Ni0z YWIwLTk0NGItNTM1YWY5OTQ3NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxztEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7zM1DjF8t6GTKRhFTLzRQyUjbemHlk8ZWk4J8DeA/aM9L8i3j1ZFYm pEkhovcfIoMwLtNclrErJrJx5QSytROc13UHjiEu11JY3xEaWPRl/7hU1AnY/GOT 6ql+rVH8/6DZV1SlmS8ScJmUnfRvtcFEAC3itMzsXyDTrbhUOY/BpjEfS4pH+E/2 16j8zlMuHDpZ1tkQtshJgNqXU7CgQD1TNLkUt+KfxBTxQawuP33WflA0xq4+rqCN LpxAmFJtO+ZriKKiNWK7WGjGBdMPs7CMwGHZVN4KRf1kAKWvwA857Akq5VnkR/Qm qTTGgvBtFOFs5z42f5RDBlRAPmdHxCg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:14:52 2025 by rpki-client