$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa File: 8ae67e8a-104d-3a84-8b85-450caa25862f.roa (raw, json) Hash identifier: OhpYk/EHSquUFxcomYgykFywzVv4ZX4hfCm2wlG0D5s= Subject key identifier: BD:6A:66:98:93:E1:9E:EB:8C:A3:84:68:F7:77:AD:79:16:62:D7:57 Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Certificate serial: 010D0C9F4328584B48E1B33A4E8CD8E856B34980 Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32402 IP address blocks: 199.7.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b3:3a:4e:8c:d8:e8:56:b3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f2f30735-1100-45bb-a1fb-ace97a4158e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:fa:42:a9:72:af:28:99:c2:6e:7b:4c:b7: b1:73:00:7f:cf:6d:d6:bc:3e:55:76:98:76:3f:57: 39:a8:2d:0e:d2:d2:37:12:d6:5d:20:37:6e:de:33: fb:cc:83:b4:0d:5a:98:e0:67:4c:91:da:e2:9f:45: b5:30:91:e3:d1:6d:f8:56:24:ba:b7:08:bb:23:d7: a1:75:f9:f4:da:d7:8e:d6:04:90:e3:a7:5c:11:4e: 35:15:09:10:1e:a0:95:c3:a0:8f:2e:e1:0b:3a:44: b4:45:ee:e8:44:43:ad:7c:3b:0f:b3:b9:78:8d:80: 0f:32:8b:3a:5e:c2:b6:ec:9c:4e:37:1f:7a:50:16: 0d:4f:97:02:6d:c6:3a:ee:72:80:bf:b6:a7:27:6b: f5:cf:8d:b7:b7:20:9a:46:e1:b7:14:b3:78:fb:9a: 9e:75:3e:48:9b:37:a9:8c:1e:48:22:da:e1:ef:81: 8a:a7:0b:81:a2:60:ee:d6:a0:a0:b6:8c:f4:d0:b6: 05:41:14:c4:c4:30:2b:26:ef:57:76:e6:1f:2a:4d: 72:29:4f:dc:50:a6:52:0f:e0:07:dc:bf:16:c4:bb: ce:b7:0c:50:82:8c:27:ad:b6:6a:c8:dd:e9:8e:71: 75:73:bf:e6:10:6e:dd:1b:fa:96:d7:70:09:a9:26: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:66:98:93:E1:9E:EB:8C:A3:84:68:F7:77:AD:79:16:62:D7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl X509v3 Authority Key Identifier: keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer sbgp-ipAddrBlock: critical IPv4: 199.7.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d2:87:97:de:4f:8e:3f:3e:7f:65:d5:d7:62:ac:b2:f5:59: 78:e9:88:be:f1:ca:4f:e1:9a:f9:4c:ca:dd:c0:6f:f3:76:97: b9:e9:fa:c0:4e:d8:c2:2e:81:d5:65:58:a5:ea:44:21:69:7f: d6:73:4c:94:ff:0c:7d:f2:53:27:ca:de:cd:4b:ad:4b:e4:1a: 0c:df:16:ec:07:dd:50:c4:c8:19:f6:6c:09:1b:32:b4:84:bd: e6:1f:6e:3c:c3:22:8f:7e:93:22:a5:90:54:9a:a3:a9:da:71: 02:0b:1f:8a:31:41:83:43:9c:d7:de:56:1c:3d:2d:37:1e:69: 6b:44:4c:1a:07:77:c4:be:dd:99:41:8f:12:67:5f:87:7d:31: fd:54:6d:67:75:3e:2b:f6:28:a9:87:96:98:b7:36:33:75:40: a3:4b:a7:0e:72:1f:bc:45:a3:b1:0a:a6:bc:92:15:69:34:d6: 6f:be:2c:49:02:38:9f:ef:8d:f6:78:0c:9b:6e:d4:97:04:35: 21:3c:92:d4:61:9e:ad:95:2a:58:ce:a7:ea:e2:d8:98:46:7b: cc:8b:12:78:6f:4f:16:19:34:a9:ca:c1:8d:76:19:f4:52:c2: f5:64:45:85:30:5e:cc:1f:e7:e0:ea:8b:5f:41:5e:1e:06:3a: 9f:f5:62:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bM6TozY6FazSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm N2Y4MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjJmMzA3MzUtMTEwMC00NWJiLWExZmItYWNlOTdhNDE1OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbH6QqlyryiZwm57TLexcwB/z23WvD5Vdph2 P1c5qC0O0tI3EtZdIDdu3jP7zIO0DVqY4GdMkdrin0W1MJHj0W34ViS6twi7I9eh dfn02teO1gSQ46dcEU41FQkQHqCVw6CPLuELOkS0Re7oREOtfDsPs7l4jYAPMos6 XsK27JxONx96UBYNT5cCbcY67nKAv7anJ2v1z423tyCaRuG3FLN4+5qedT5Imzep jB5IItrh74GKpwuBomDu1qCgtoz00LYFQRTExDArJu9XduYfKk1yKU/cUKZSD+AH 3L8WxLvOtwxQgownrbZqyN3pjnF1c7/mEG7dG/qW13AJqSaglQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1qZpiT4Z7rjKOEaPd3rXkWYtdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvOGFlNjdlOGEtMTA0ZC0z YTg0LThiODUtNDUwY2FhMjU4NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1 MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3 MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArSh5feT44/Pn9l1ddirLL1WXjpiL7xyk/hmvlMyt3Ab/N2l7np+sBO 2MIugdVlWKXqRCFpf9ZzTJT/DH3yUyfK3s1LrUvkGgzfFuwH3VDEyBn2bAkbMrSE veYfbjzDIo9+kyKlkFSao6nacQILH4oxQYNDnNfeVhw9LTceaWtETBoHd8S+3ZlB jxJnX4d9Mf1UbWd1Piv2KKmHlpi3NjN1QKNLpw5yH7xFo7EKprySFWk01m++LEkC OJ/vjfZ4DJtu1JcENSE8ktRhnq2VKljOp+ri2JhGe8yLEnhvTxYZNKnKwY12GfRS wvVkRYUwXswf5+Dqi19BXh4GOp/1YnI= -----END CERTIFICATE-----Generated at Tue Oct 21 03:02:58 2025 by rpki-client