$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa File: f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa (raw, json) Hash identifier: kN9UHlLOkbMFHmIxPAnuwmkc6VaQMaWK0UF7bKEHZ14= Subject key identifier: 0C:C4:C5:4C:62:83:93:55:DE:21:F8:4E:64:10:67:EB:35:9A:AF:54 Certificate issuer: /CN=66580030-eaac-4617-b624-3b0a2974a04d Certificate serial: 010D0C9F4328584B1271637B68AFB21B101DFA40 Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 26554 IP address blocks: 199.30.218.0/23 maxlen: 23 2607:4440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:63:7b:68:af:b2:1b:10:1d:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=5e9c46b7-9a9d-434a-8c28-9d1ad8cc21d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:a0:ad:e2:83:31:c4:1f:de:a9:db:3f:c7: 2d:bb:d7:cc:27:73:95:5e:b6:28:e1:d1:0d:75:87: c9:fc:e0:7a:fe:4e:03:cf:9c:b6:92:f0:89:8d:f9: cd:41:f1:61:8d:d5:10:10:c9:5f:bd:cd:8a:51:58: 21:29:fd:91:2b:38:f3:4a:17:37:e6:21:d4:af:67: 98:01:fa:a3:5d:99:9f:0a:4e:54:1b:0a:48:0f:50: 23:6c:15:1f:68:9e:db:f0:f2:39:4e:65:67:61:33: bf:8d:31:b9:80:e7:b7:f3:bc:fa:93:26:bd:ee:35: 21:92:7b:a2:45:31:cc:1f:dd:eb:9e:3d:66:68:1a: 4c:ae:45:5b:6c:38:f2:97:46:cc:ee:12:25:82:d4: 64:83:93:b3:da:c1:c6:29:63:07:64:48:c3:e3:1e: 85:bb:8e:53:6f:e3:95:5d:0a:83:67:fc:70:db:dd: 01:a3:e2:63:20:43:e8:8c:1f:7c:a5:b6:51:9c:76: 6b:10:5f:63:6b:ff:91:a3:33:fe:10:53:81:97:12: a5:d4:2a:9c:5a:bc:5c:9a:14:54:42:44:e3:95:25: 75:9a:96:60:86:72:db:4f:ec:be:75:d3:99:d4:71: df:73:52:ec:fa:90:ed:73:de:f7:c9:d7:97:0b:3f: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:C5:4C:62:83:93:55:DE:21:F8:4E:64:10:67:EB:35:9A:AF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl X509v3 Authority Key Identifier: keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer sbgp-ipAddrBlock: critical IPv4: 199.30.218.0/23 IPv6: 2607:4440:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d9:93:4d:57:71:64:35:91:ad:1a:93:bc:ea:cc:da:cf:67: ff:ef:9c:86:ee:c2:5c:5d:c4:eb:79:6e:c7:e2:3e:e7:90:0b: 01:97:77:35:5f:4d:69:5f:0f:bb:23:8b:c6:e0:33:f2:79:cd: fd:c1:ff:f7:22:ff:72:70:bf:d8:2f:ce:99:41:b9:1a:08:db: 5f:7c:58:6f:a2:5f:85:88:7e:04:95:aa:ed:d1:bd:a6:f1:86: 33:62:18:60:cf:c1:01:c7:92:0d:50:5b:d0:b1:5a:85:87:7f: 2d:cf:7b:d2:88:97:9f:45:89:f5:27:37:dc:26:e9:a2:71:4b: 88:d3:bd:50:15:74:0b:d6:4b:86:44:0b:90:e1:7b:9b:7d:bc: a7:34:1c:c4:ad:a3:b3:47:25:03:c7:d6:6e:53:98:ac:d5:3a: ef:00:ad:1b:6f:46:aa:95:f5:50:85:67:d3:28:80:78:55:04: 0e:fb:0e:f8:96:5c:92:54:57:a6:07:e3:65:83:af:92:34:05: 5a:39:95:6d:1e:14:20:63:2a:77:eb:86:a8:52:73:63:e8:e5: 4e:74:9d:52:90:5b:77:50:27:e5:bc:82:cb:0e:a4:da:fc:6f: e1:51:2e:a8:e3:63:a4:80:00:34:27:ee:cd:de:68:8c:63:5c: d1:aa:b7:b6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsScWN7aK+yGxAd+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY1ODAwMzAtZWFhYy00NjE3LWI2MjQtM2IwYTI5NzRh MDRkMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk NWU5YzQ2YjctOWE5ZC00MzRhLThjMjgtOWQxYWQ4Y2MyMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SSgreKDMcQf3qnbP8ctu9fMJ3OVXrYo4dEN dYfJ/OB6/k4Dz5y2kvCJjfnNQfFhjdUQEMlfvc2KUVghKf2RKzjzShc35iHUr2eY AfqjXZmfCk5UGwpID1AjbBUfaJ7b8PI5TmVnYTO/jTG5gOe387z6kya97jUhknui RTHMH93rnj1maBpMrkVbbDjyl0bM7hIlgtRkg5Oz2sHGKWMHZEjD4x6Fu45Tb+OV XQqDZ/xw290Bo+JjIEPojB98pbZRnHZrEF9ja/+RozP+EFOBlxKl1CqcWrxcmhRU QkTjlSV1mpZghnLbT+y+ddOZ1HHfc1Ls+pDtc973ydeXCz+FEQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAzExUxig5NV3iH4TmQQZ+s1mq9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjU4 MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3NGEwNGQvZjI1ZDliZWItOTk5ZC0z ZWY5LWJmNGEtODllZTAyNjI5ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjY1ODAwMzAtZWFhYy00NjE3LWI2 MjQtM2IwYTI5NzRhMDRkLzY2NTgwMDMwLWVhYWMtNDYxNy1iNjI0LTNiMGEyOTc0 YTA0ZC5jcmwwHwYDVR0jBBgwFoAUfLSefWTanAW/yHL0FXi1fgszKUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBh Mjk3NGEwNGQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBxx7aMA8E AgACMAkDBwAmB0RAAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPtmTTVdxZDWRrRqTvOrM2s9n/++chu7C XF3E63lux+I+55ALAZd3NV9NaV8PuyOLxuAz8nnN/cH/9yL/cnC/2C/OmUG5Ggjb X3xYb6JfhYh+BJWq7dG9pvGGM2IYYM/BAceSDVBb0LFahYd/Lc970oiXn0WJ9Sc3 3CbponFLiNO9UBV0C9ZLhkQLkOF7m328pzQcxK2js0clA8fWblOYrNU67wCtG29G qpX1UIVn0yiAeFUEDvsO+JZcklRXpgfjZYOvkjQFWjmVbR4UIGMqd+uGqFJzY+jl TnSdUpBbd1An5byCyw6k2vxv4VEuqONjpIAANCfuzd5ojGNc0aq3tg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:07 2025 by rpki-client