$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa File: 16aeb59e-91b7-36f8-aed8-271f44f518a0.roa (raw, json) Hash identifier: CSZqNQhbGBK9xgsPuZbBbL5MCAdyX0+uPhCxR2WNx2c= Subject key identifier: DD:F7:BF:BC:5F:4C:24:6E:91:6C:EE:C6:A0:01:F3:F9:8E:4F:40:D3 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584B2CF6D53DADB05C6DA0B0B900 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 197537 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d5:3d:ad:b0:5c:6d:a0:b0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=ba33268d-a89b-4650-9612-d16ac78746eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:91:d2:c8:8a:9d:b0:40:08:35:73:ec:56: 95:5f:71:fd:46:a5:2d:54:f2:87:cf:11:fd:d9:46: c6:90:2b:55:67:a6:6d:22:37:47:13:ce:19:a6:b6: fc:53:13:68:4c:70:bb:7e:89:70:35:79:7f:c9:e0: 69:29:04:ac:4a:fa:81:d8:b2:3c:bf:94:a7:1d:23: 76:1a:fd:67:1e:1b:d4:83:de:52:44:49:32:30:a9: 57:62:b7:70:18:f3:10:f7:73:1b:0b:7d:b0:59:69: 4c:43:2b:f2:65:59:37:3e:65:b8:a9:66:50:90:60: fa:55:76:1d:17:19:76:e5:cc:26:b7:2d:72:7d:ef: 1c:7b:63:63:87:14:d4:12:2e:b5:b1:90:c8:8a:ef: 65:62:ac:fb:35:0f:25:76:f0:f3:03:1f:2e:04:3d: 02:24:08:6d:70:e1:ed:62:be:8a:df:60:a4:81:0e: 91:35:9a:02:97:e6:c8:4f:06:3d:b4:8e:45:c4:74: 10:ce:72:f3:89:c7:d6:41:b4:7e:ac:79:f4:76:83: 43:a6:e6:6a:dc:7b:a5:bd:cc:ca:f3:5f:28:f7:5c: fc:c4:71:08:0d:8f:25:2c:79:c0:93:65:66:fa:bd: ac:c4:7c:69:87:7d:2b:86:15:74:61:81:f5:d5:a5: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F7:BF:BC:5F:4C:24:6E:91:6C:EE:C6:A0:01:F3:F9:8E:4F:40:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:85:6c:a8:ae:f8:0e:a9:64:96:62:37:ba:d2:93:23:e2:36: 49:87:fe:06:ec:6b:e4:3f:75:ed:12:21:71:b4:ee:17:74:be: 03:5f:6e:46:bf:a2:08:65:fa:1c:94:1d:4e:87:76:1e:c9:71: 40:ce:f5:80:34:65:b4:4b:cc:d3:df:dd:b1:e3:68:32:6c:7b: c2:ed:6e:05:e3:2e:b8:ef:f9:17:d7:c7:0c:ee:a1:36:c3:ed: ab:0d:5d:cc:c0:ca:2f:b3:3a:95:b9:bf:7a:62:e0:2f:49:95: da:58:b6:0c:52:81:e4:c2:a5:ad:4b:cc:3b:1d:ee:22:fe:cb: 3a:4e:fa:cd:2b:74:95:65:70:c3:ed:1d:70:dd:81:da:82:25: 2c:2a:25:00:20:63:64:c0:d9:f5:8f:ee:32:6c:6c:f2:4a:de: e9:50:77:ca:14:91:a1:2f:1d:ba:e5:ff:de:f6:30:09:c5:ee: 51:db:70:33:7f:73:ad:98:48:c5:60:05:71:a4:0d:02:70:d8: 97:c4:98:7b:31:36:18:6a:76:61:4f:e1:59:12:ad:5a:7a:c1: 30:94:0b:c5:d3:8c:a6:13:30:ba:ae:4d:ce:6c:ff:58:21:dd: c7:bd:85:40:4a:77:42:a3:4b:19:45:02:33:09:c8:82:dd:86: 00:6c:bb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tU9rbBcbaCwuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YmEzMzI2OGQtYTg5Yi00NjUwLTk2MTItZDE2YWM3ODc0NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HWR0siKnbBACDVz7FaVX3H9RqUtVPKHzxH9 2UbGkCtVZ6ZtIjdHE84Zprb8UxNoTHC7folwNXl/yeBpKQSsSvqB2LI8v5SnHSN2 Gv1nHhvUg95SREkyMKlXYrdwGPMQ93MbC32wWWlMQyvyZVk3PmW4qWZQkGD6VXYd Fxl25cwmty1yfe8ce2NjhxTUEi61sZDIiu9lYqz7NQ8ldvDzAx8uBD0CJAhtcOHt Yr6K32CkgQ6RNZoCl+bITwY9tI5FxHQQznLzicfWQbR+rHn0doNDpuZq3HulvczK 818o91z8xHEIDY8lLHnAk2Vm+r2sxHxph30rhhV0YYH11aXK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN33v7xfTCRukWzuxqAB8/mOT0DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvMTZhZWI1OWUtOTFiNy0z NmY4LWFlZDgtMjcxZjQ0ZjUxOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+FbKiu+A6pZJZiN7rSkyPiNkmH/gbsa+Q/de0SIXG07hd0vgNfbka/ oghl+hyUHU6Hdh7JcUDO9YA0ZbRLzNPf3bHjaDJse8LtbgXjLrjv+RfXxwzuoTbD 7asNXczAyi+zOpW5v3pi4C9JldpYtgxSgeTCpa1LzDsd7iL+yzpO+s0rdJVlcMPt HXDdgdqCJSwqJQAgY2TA2fWP7jJsbPJK3ulQd8oUkaEvHbrl/972MAnF7lHbcDN/ c62YSMVgBXGkDQJw2JfEmHsxNhhqdmFP4VkSrVp6wTCUC8XTjKYTMLquTc5s/1gh 3ce9hUBKd0KjSxlFAjMJyILdhgBsu9k= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:11 2025 by rpki-client