$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d575ca33-8402-3809-8426-5c0b67f47da3.roa File: d575ca33-8402-3809-8426-5c0b67f47da3.roa (raw, json) Hash identifier: zJzmkEvc6OfvpFFoJJCqE8FnMTgmsdIRNrMyws+G0s8= Subject key identifier: A5:18:1B:04:B9:0A:8D:7E:1E:3C:AB:27:7B:03:7A:20:9E:99:FE:D0 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B1D9C2BD401F32444890EB340 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d575ca33-8402-3809-8426-5c0b67f47da3.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 401421 IP address blocks: 200.5.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2b:d4:01:f3:24:44:89:0e:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c16d9f02-62a0-4320-9942-eb674d2887cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:31:ec:75:ed:69:3e:d2:4d:45:96:82:f6: 30:16:0d:57:91:8c:86:da:08:29:0c:c8:e8:32:57: 13:a3:5c:1c:b3:a5:29:bc:7b:b6:18:5c:00:9a:46: 98:63:0b:88:65:8d:03:b2:0b:0d:d2:25:fa:49:21: 8c:70:7c:a6:54:35:f7:d8:d1:5a:17:41:20:ab:c1: 9f:96:27:b4:80:2a:6b:8c:c5:fb:a6:da:55:67:f4: 70:25:0b:7a:5b:ac:a4:0a:55:f0:63:9e:11:80:0d: af:e4:9b:3d:c9:8b:21:5c:31:38:6e:d2:01:c2:03: 9c:09:bb:98:a0:a6:42:98:a6:55:e9:a4:92:19:34: aa:b5:26:18:ee:a9:7d:64:f1:7d:3f:3a:21:13:b2: 64:32:76:f4:b8:aa:b1:08:bf:c7:1e:3b:ca:61:c0: 3a:b0:c1:48:1a:7d:2a:3b:eb:1b:a5:88:b6:3b:ca: 12:45:62:f6:f3:7c:1f:7c:e4:86:78:40:92:92:fa: 23:95:f6:0f:0a:59:63:5d:a9:9f:b8:41:67:b8:aa: 9b:77:fb:b3:7e:e5:d4:a9:0a:8f:08:a6:ce:06:b1: ec:57:19:81:72:0a:52:29:ca:aa:ec:9e:73:86:c1: 87:65:6b:b5:fe:70:62:21:d2:a8:e3:af:aa:10:4b: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:1B:04:B9:0A:8D:7E:1E:3C:AB:27:7B:03:7A:20:9E:99:FE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d575ca33-8402-3809-8426-5c0b67f47da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2c:a8:39:ab:fe:b8:97:87:ab:cc:01:a2:86:2c:6f:da:f7: c8:e4:4c:de:7c:97:cd:db:0d:37:fc:5e:98:ea:11:66:86:88: f8:31:e4:31:37:22:a5:9f:42:22:3a:8f:00:60:87:df:18:96: f6:58:4a:95:ac:ef:8a:82:d2:44:d3:c1:c3:37:e1:c7:46:88: 5a:62:62:59:37:33:1b:a1:2f:ab:a1:f0:a9:c3:09:1b:59:59: cb:42:24:5e:73:05:85:8f:5f:6e:b9:49:a5:d1:9f:24:8a:f9: 5f:30:4e:e5:9b:74:1e:ba:3a:79:b4:1d:23:c3:6f:6f:0d:9c: f8:d3:76:e5:32:96:a4:cc:c9:38:4c:75:9e:79:71:3d:3b:0f: cc:3c:f2:05:db:72:d2:e1:7a:d1:e4:a5:60:e2:88:16:be:be: 63:a7:1f:8e:ca:b3:d2:11:04:48:d3:6e:25:83:7d:a1:4d:4b: 68:88:ce:3c:8b:81:22:b1:ed:fa:12:70:a0:0a:b1:c7:49:b2: 4e:bf:17:b5:bc:0c:f6:05:f1:c5:5e:fe:03:79:43:14:a1:62: 2a:e0:ca:78:f5:28:3e:c1:3a:ee:48:dc:d8:6d:0a:92:11:bf: aa:fc:21:0f:9c:9b:0f:77:19:7e:2f:46:be:e4:30:ea:0e:fb: 63:e2:87:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCvUAfMkRIkOs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzE2ZDlmMDItNjJhMC00MzIwLTk5NDItZWI2NzRkMjg4N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOIx7HXtaT7STUWWgvYwFg1XkYyG2ggpDMjo MlcTo1wcs6UpvHu2GFwAmkaYYwuIZY0DsgsN0iX6SSGMcHymVDX32NFaF0Egq8Gf lie0gCprjMX7ptpVZ/RwJQt6W6ykClXwY54RgA2v5Js9yYshXDE4btIBwgOcCbuY oKZCmKZV6aSSGTSqtSYY7ql9ZPF9PzohE7JkMnb0uKqxCL/HHjvKYcA6sMFIGn0q O+sbpYi2O8oSRWL283wffOSGeECSkvojlfYPClljXamfuEFnuKqbd/uzfuXUqQqP CKbOBrHsVxmBcgpSKcqq7J5zhsGHZWu1/nBiIdKo46+qEEuOrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUYGwS5Co1+HjyrJ3sDeiCemf7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZDU3NWNhMzMtODQwMi0z ODA5LTg0MjYtNWMwYjY3ZjQ3ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUsqDmr/riXh6vMAaKGLG/a98jkTN58l83bDTf8XpjqEWaGiPgx5DE3 IqWfQiI6jwBgh98YlvZYSpWs74qC0kTTwcM34cdGiFpiYlk3MxuhL6uh8KnDCRtZ WctCJF5zBYWPX265SaXRnySK+V8wTuWbdB66Onm0HSPDb28NnPjTduUylqTMyThM dZ55cT07D8w88gXbctLhetHkpWDiiBa+vmOnH47Ks9IRBEjTbiWDfaFNS2iIzjyL gSKx7foScKAKscdJsk6/F7W8DPYF8cVe/gN5QxShYirgynj1KD7BOu5I3NhtCpIR v6r8IQ+cmw93GX4vRr7kMOoO+2Pih1Q= -----END CERTIFICATE-----Generated at Tue Oct 21 22:33:46 2025 by rpki-client