$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa File: b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa (raw, json) Hash identifier: 505TqdWDdPcliHsair32+WyYzg1JCFneZvr3I8QhnIA= Subject key identifier: B0:B9:D4:78:BC:C9:59:8C:4E:B9:EB:E9:5F:89:3C:61:7A:F1:A8:5F Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F4328584B4081A67F082198E0655FDB00 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a6:7f:08:21:98:e0:65:5f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=dfc97b80-04d4-4146-9f41-7bd87fc1aa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:35:94:bd:48:90:1f:41:6e:d6:40:f7:92: 0b:e5:da:9a:e5:01:06:50:2a:88:6d:14:e6:0d:ed: cb:98:3c:41:b3:21:f2:ce:34:29:c4:e4:45:de:77: fb:a6:73:fa:96:34:aa:1e:2a:ca:cc:2c:a7:1a:84: a5:b9:1c:1c:13:f5:7b:04:89:1e:25:1a:6a:9c:aa: c4:01:43:23:7b:dc:e8:30:eb:ad:a0:5e:24:5f:3f: 1c:46:dd:24:71:28:a6:ff:58:74:c0:e5:ac:80:a0: 3e:85:b8:0a:a8:d4:ac:9a:5d:c9:6f:c8:e7:49:4e: 2c:a5:8b:1e:bf:2c:01:3b:3d:8a:bd:61:f1:fa:12: 07:0a:07:ad:94:87:02:f1:2b:c9:6e:ba:75:3f:77: 15:29:f1:93:36:85:91:77:c2:43:2c:b4:7a:81:58: 1e:6c:b7:25:9d:6d:51:9f:01:d6:93:b1:3c:ed:5c: 9a:00:48:47:1f:b9:ab:17:be:0f:6f:ff:aa:ee:f3: af:a2:aa:18:47:2a:62:ff:02:12:a6:b9:ad:70:01: 2c:da:cc:a1:72:da:17:9a:12:95:a0:e6:ac:3f:17: 9b:3e:d9:af:d4:ed:2e:7c:2b:4c:10:c5:b6:d0:fd: 06:69:49:d6:f0:6f:6b:f3:4f:80:83:ed:08:17:56: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B9:D4:78:BC:C9:59:8C:4E:B9:EB:E9:5F:89:3C:61:7A:F1:A8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9b:1f:95:15:71:18:41:69:1a:57:a1:c2:cc:53:79:86:87: ac:df:d9:c8:4c:5d:d2:1b:18:70:db:48:41:02:0c:35:c9:de: 33:5b:96:36:56:c0:65:cd:9e:20:3d:18:9a:a7:b4:85:89:f8: ce:3d:7b:87:ec:5b:85:ec:c6:dc:1a:f6:d1:2c:fb:dd:bc:a1: 30:79:f4:20:df:8f:82:a8:d5:c9:c4:53:be:90:4e:e5:a1:8f: ab:58:01:6c:77:1f:a9:b9:73:8c:f9:f0:83:0b:f4:e0:94:60: 1c:0c:4b:29:3f:cb:99:a5:03:5e:2a:7a:b1:71:c6:08:3f:d2: cb:7f:dd:07:16:76:92:cd:95:05:b3:3f:d2:ac:58:e1:22:eb: 3e:7a:b0:3a:32:94:0c:aa:1b:84:4e:d0:32:15:04:07:8f:7b: 26:06:1c:b5:9d:58:27:71:0b:f2:ea:60:b1:85:da:e0:15:6e: c2:fb:f9:d1:59:9a:10:81:ff:94:ed:fb:4c:fe:9f:96:35:bb: ca:08:9e:f4:b6:04:40:bb:5e:be:13:72:d0:8f:d9:27:48:59: 22:5b:7b:02:c3:a2:ac:53:c0:13:4e:f7:b1:e5:a4:0a:16:c0: 20:48:c6:80:f6:ea:1b:15:4e:e9:31:95:56:f8:0c:e2:08:c5: 18:64:dc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaZ/CCGY4GVf2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZGZjOTdiODAtMDRkNC00MTQ2LTlmNDEtN2JkODdmYzFhYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2U1lL1IkB9BbtZA95IL5dqa5QEGUCqIbRTm De3LmDxBsyHyzjQpxORF3nf7pnP6ljSqHirKzCynGoSluRwcE/V7BIkeJRpqnKrE AUMje9zoMOutoF4kXz8cRt0kcSim/1h0wOWsgKA+hbgKqNSsml3Jb8jnSU4spYse vywBOz2KvWHx+hIHCgetlIcC8SvJbrp1P3cVKfGTNoWRd8JDLLR6gVgebLclnW1R nwHWk7E87VyaAEhHH7mrF74Pb/+q7vOvoqoYRypi/wISprmtcAEs2syhctoXmhKV oOasPxebPtmv1O0ufCtMEMW20P0GaUnW8G9r80+Ag+0IF1bOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC51Hi8yVmMTrnr6V+JPGF68ahfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYjk2ZTE2MTctZTc4NC0z YmJiLWJhMmQtMmY0YTc2NGQwZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKbH5UVcRhBaRpXocLMU3mGh6zf2chMXdIbGHDbSEECDDXJ3jNbljZW wGXNniA9GJqntIWJ+M49e4fsW4Xsxtwa9tEs+928oTB59CDfj4Ko1cnEU76QTuWh j6tYAWx3H6m5c4z58IML9OCUYBwMSyk/y5mlA14qerFxxgg/0st/3QcWdpLNlQWz P9KsWOEi6z56sDoylAyqG4RO0DIVBAePeyYGHLWdWCdxC/LqYLGF2uAVbsL7+dFZ mhCB/5Tt+0z+n5Y1u8oInvS2BEC7Xr4TctCP2SdIWSJbewLDoqxTwBNO97HlpAoW wCBIxoD26hsVTukxlVb4DOIIxRhk3KE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:50 2025 by rpki-client