$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/acb2a4c7-2b8d-34b9-aaa7-7a9b2d8cee02.roa File: acb2a4c7-2b8d-34b9-aaa7-7a9b2d8cee02.roa (raw, json) Hash identifier: s05jDXYTH/ne11TqRthqspoCRH74byvMQg8z2GWkNOs= Subject key identifier: C1:09:1C:EE:C8:C0:DE:71:14:0A:FB:32:B1:AC:CC:AA:1F:2A:BA:0C Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584B438C1099B15BE4E3BDB39C80 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/acb2a4c7-2b8d-34b9-aaa7-7a9b2d8cee02.roa Signing time: Sun 21 Sep 2025 03:09:04 +0000 ROA not before: Sun 21 Sep 2025 03:09:04 +0000 ROA not after: Sat 20 Dec 2025 04:09:04 +0000 asID: 10794 IP address blocks: 199.43.56.0/23 maxlen: 23 199.43.56.0/24 maxlen: 24 199.43.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:8c:10:99:b1:5b:e4:e3:bd:b3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 21 03:09:04 2025 GMT Not After : Dec 20 04:09:04 2025 GMT Subject: CN=a09bc7be-d528-4a2c-bdc0-991922fef08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:7e:ce:d8:21:6f:74:b4:0b:2c:2e:a0:ba: 70:9a:06:1d:17:8c:18:ea:27:a8:8b:75:23:36:6d: cb:70:8f:06:ae:a5:c9:6d:75:f2:c5:1f:30:e5:e4: fd:0a:e2:46:2c:a0:3c:67:8b:85:9d:11:07:c3:c1: 39:35:a8:16:58:ae:48:0a:13:35:60:86:1f:94:69: eb:bc:9b:8b:90:14:85:49:df:3c:c6:b2:f0:6e:89: a8:5e:35:17:04:e2:12:42:b4:dc:30:9c:f9:7b:a9: 41:d3:c0:36:6c:67:a4:a6:77:3a:31:e0:2d:0c:81: 87:a0:64:97:29:9a:cd:e6:90:5e:7a:2b:e4:ce:b3: d2:6e:f5:c3:58:d0:31:8f:3e:78:d6:5d:37:9c:72: 8d:66:7a:ac:33:20:be:7c:fa:44:d8:43:6f:d8:6f: fb:62:5b:21:d6:96:4d:73:61:b2:60:c1:52:e9:3d: 0b:ba:9b:dd:a8:d8:7b:5e:5a:0f:f2:af:a9:61:c4: 87:5f:32:d4:26:65:4a:0f:f4:2d:df:0d:b8:5d:3a: da:9e:2a:1c:33:af:35:f1:6b:f9:d2:12:bb:d0:e1: 8e:90:aa:54:44:1d:e1:76:0e:b0:d2:8d:66:80:74: 8e:df:ce:22:9d:40:b7:1b:25:96:8a:e5:17:3a:4e: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:1C:EE:C8:C0:DE:71:14:0A:FB:32:B1:AC:CC:AA:1F:2A:BA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/acb2a4c7-2b8d-34b9-aaa7-7a9b2d8cee02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a6:da:fd:7b:fe:09:0b:bc:87:08:ac:7b:9f:78:b5:df:15: 0f:72:93:6d:45:00:88:a5:bb:c1:f3:70:f3:69:ec:f6:5b:9a: 13:87:8d:b6:69:9b:91:c0:c9:75:5c:7a:ff:17:e6:ee:06:d5: 4c:25:1d:aa:50:4d:ab:b6:94:94:8d:c9:ea:3e:1e:7b:a9:c3: 16:f2:81:c3:d1:ef:d8:ba:c7:78:ec:f7:f6:53:72:bd:6e:17: 04:ff:f9:1d:c0:87:9a:d6:ed:c3:17:8f:d5:ea:43:a2:06:d0: 6b:3e:51:df:f8:39:d4:c6:78:6a:79:31:aa:ce:e9:d0:ca:f4: 40:db:d3:f4:34:26:c9:cb:62:53:64:df:5e:0c:82:83:49:c9: 89:95:28:17:a3:de:a6:ce:22:66:a8:a1:91:3b:20:f8:fa:6d: f6:7b:85:14:ce:c1:d2:2b:00:d8:cd:e2:68:4e:ba:c2:5f:26: 57:30:90:95:b7:b9:30:5c:2e:eb:47:a1:34:ef:7d:47:82:10: b7:c3:01:12:c4:a1:b7:3e:bd:8e:f5:d3:e5:59:58:32:58:f9: d3:9e:72:5c:d3:ec:d9:94:14:19:c9:3d:5e:8a:a0:14:50:59: ce:1a:26:dd:73:ce:f4:3e:ac:48:a3:06:19:5e:bf:9a:49:55: 9f:c5:bc:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDjBCZsVvk472znIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDkyMTAzMDkwNFoXDTI1MTIyMDA0MDkwNFowLzEtMCsGA1UEAxMk YTA5YmM3YmUtZDUyOC00YTJjLWJkYzAtOTkxOTIyZmVmMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluN+ztghb3S0CywuoLpwmgYdF4wY6ieoi3Uj Nm3LcI8GrqXJbXXyxR8w5eT9CuJGLKA8Z4uFnREHw8E5NagWWK5IChM1YIYflGnr vJuLkBSFSd88xrLwbomoXjUXBOISQrTcMJz5e6lB08A2bGekpnc6MeAtDIGHoGSX KZrN5pBeeivkzrPSbvXDWNAxjz541l03nHKNZnqsMyC+fPpE2ENv2G/7Ylsh1pZN c2GyYMFS6T0LupvdqNh7XloP8q+pYcSHXzLUJmVKD/Qt3w24XTraniocM6818Wv5 0hK70OGOkKpURB3hdg6w0o1mgHSO384inUC3GyWWiuUXOk4ohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJHO7IwN5xFAr7MrGszKofKroMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYWNiMmE0YzctMmI4ZC0z NGI5LWFhYTctN2E5YjJkOGNlZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxys4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6m2v17/gkLvIcIrHufeLXfFQ9yk21FAIilu8HzcPNp7PZbmhOHjbZp m5HAyXVcev8X5u4G1UwlHapQTau2lJSNyeo+HnupwxbygcPR79i6x3js9/ZTcr1u FwT/+R3Ah5rW7cMXj9XqQ6IG0Gs+Ud/4OdTGeGp5MarO6dDK9EDb0/Q0JsnLYlNk 314MgoNJyYmVKBej3qbOImaooZE7IPj6bfZ7hRTOwdIrANjN4mhOusJfJlcwkJW3 uTBcLutHoTTvfUeCELfDARLEobc+vY710+VZWDJY+dOeclzT7NmUFBnJPV6KoBRQ Wc4aJt1zzvQ+rEijBhlev5pJVZ/FvFU= -----END CERTIFICATE-----Generated at Tue Oct 21 01:07:32 2025 by rpki-client