$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/1106c92d-4392-3d47-b4b1-07002cb8da00.roa File: 1106c92d-4392-3d47-b4b1-07002cb8da00.roa (raw, json) Hash identifier: QEX+SXOeOlMNmkaTIrs85tdGuRxavsvAxnJsy0rS3aY= Subject key identifier: B8:B6:A5:F4:C0:E0:51:FD:26:26:A6:F4:6D:73:CB:50:B8:09:14:C9 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584B43F6E3596056E8A6BCE51D00 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/1106c92d-4392-3d47-b4b1-07002cb8da00.roa Signing time: Sun 21 Sep 2025 06:44:18 +0000 ROA not before: Sun 21 Sep 2025 06:44:18 +0000 ROA not after: Sat 20 Dec 2025 07:44:18 +0000 asID: 10794 IP address blocks: 199.201.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:f6:e3:59:60:56:e8:a6:bc:e5:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 21 06:44:18 2025 GMT Not After : Dec 20 07:44:18 2025 GMT Subject: CN=79a2a5b6-26c3-405a-9eee-8d02603ac844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:d7:65:f8:e6:95:2c:b7:4b:19:e2:79:57: 06:3a:64:4d:8f:04:cb:4b:99:1b:d6:f6:07:b4:cf: e7:69:fb:5b:18:cf:a9:ca:63:3d:9a:07:b2:04:3a: 15:ce:50:f1:1c:51:03:06:02:04:ec:56:b0:4d:09: 2c:7d:64:1b:28:b0:aa:55:bd:95:e8:36:4b:c9:38: f3:7b:a5:75:9f:a0:43:9d:c1:1a:da:5d:72:58:91: d6:f5:4c:54:c6:5b:57:ed:75:c6:09:f0:4e:f6:c9: 8c:66:3b:6e:87:91:ff:57:ef:c7:02:ad:08:19:a8: f0:e1:6d:4b:bc:2f:e4:10:0b:54:54:ec:05:c5:b0: e8:a1:24:b8:1f:19:54:8f:70:62:9e:cf:60:30:d8: e1:f8:37:86:d0:cc:12:61:5a:27:66:53:9e:21:b9: 07:42:7c:2e:e1:80:12:4d:ba:1e:f1:97:e5:7d:2c: 51:38:84:3a:93:a0:c3:fd:2f:24:40:69:05:8b:81: c9:9d:ac:3f:ee:79:2c:a9:20:26:9b:62:2c:92:07: 39:e6:cf:4d:dd:04:b9:41:17:46:9e:92:20:bc:5a: 6a:68:38:4b:f5:1a:a4:fc:a2:99:eb:49:fa:2b:70: e7:e5:cd:92:d0:6b:82:1f:85:30:21:fd:54:ee:bc: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:A5:F4:C0:E0:51:FD:26:26:A6:F4:6D:73:CB:50:B8:09:14:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/1106c92d-4392-3d47-b4b1-07002cb8da00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.201.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:59:68:bf:75:39:8d:4e:6d:e1:bb:50:d6:42:09:35:1f:0e: 75:57:13:13:5c:31:11:36:78:3c:c6:00:24:c2:ed:1c:9e:32: d7:20:15:c3:22:80:13:57:0d:86:fa:0e:2e:ef:f6:5e:f7:da: c4:27:cf:64:a9:48:61:86:94:0d:89:c0:31:4d:af:7a:c7:4a: 1e:89:3e:8f:dc:8e:c3:e6:c8:03:d1:20:47:4a:c9:5e:ad:81: a4:6e:02:7a:cb:9c:5c:d1:04:84:bf:0c:a6:7b:21:a2:83:40: 77:27:09:34:fb:34:ea:a7:7b:7e:d1:52:08:52:54:55:e1:6e: 7a:c9:00:de:20:0d:dc:40:e0:8b:48:0a:a5:b3:37:5e:5f:e3: 0e:83:b8:84:48:c1:7d:80:8e:20:38:22:5e:16:fb:bc:9f:69: 46:56:69:74:9f:b8:28:9f:52:2f:8a:a1:70:a7:dd:2c:13:7e: bc:d5:f9:e8:ba:ba:e9:c3:d7:49:0d:dd:8e:2a:7e:bd:e7:bf: 65:36:cb:5b:70:fd:bb:55:c9:f2:e5:41:ae:9d:25:24:bc:1c: ce:01:7f:18:36:2d:ac:d8:9e:eb:ac:a2:93:e9:60:54:c7:fb: 69:92:7a:9f:b3:cf:ed:6a:d1:79:97:64:c3:bd:35:91:99:4e: e9:9d:8d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD9uNZYFboprzlHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDkyMTA2NDQxOFoXDTI1MTIyMDA3NDQxOFowLzEtMCsGA1UEAxMk NzlhMmE1YjYtMjZjMy00MDVhLTllZWUtOGQwMjYwM2FjODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA723XZfjmlSy3SxnieVcGOmRNjwTLS5kb1vYH tM/naftbGM+pymM9mgeyBDoVzlDxHFEDBgIE7FawTQksfWQbKLCqVb2V6DZLyTjz e6V1n6BDncEa2l1yWJHW9UxUxltX7XXGCfBO9smMZjtuh5H/V+/HAq0IGajw4W1L vC/kEAtUVOwFxbDooSS4HxlUj3Bins9gMNjh+DeG0MwSYVonZlOeIbkHQnwu4YAS Tboe8ZflfSxROIQ6k6DD/S8kQGkFi4HJnaw/7nksqSAmm2Iskgc55s9N3QS5QRdG npIgvFpqaDhL9Rqk/KKZ60n6K3Dn5c2S0GuCH4UwIf1U7rzYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi2pfTA4FH9Jiam9G1zy1C4CRTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvMTEwNmM5MmQtNDM5Mi0z ZDQ3LWI0YjEtMDcwMDJjYjhkYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRZaL91OY1ObeG7UNZCCTUfDnVXExNcMRE2eDzGACTC7RyeMtcgFcMi gBNXDYb6Di7v9l732sQnz2SpSGGGlA2JwDFNr3rHSh6JPo/cjsPmyAPRIEdKyV6t gaRuAnrLnFzRBIS/DKZ7IaKDQHcnCTT7NOqne37RUghSVFXhbnrJAN4gDdxA4ItI CqWzN15f4w6DuIRIwX2AjiA4Il4W+7yfaUZWaXSfuCifUi+KoXCn3SwTfrzV+ei6 uunD10kN3Y4qfr3nv2U2y1tw/btVyfLlQa6dJSS8HM4Bfxg2LazYnuusopPpYFTH +2mSep+zz+1q0XmXZMO9NZGZTumdjeE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:08:15 2025 by rpki-client