$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa File: baeae43f-3575-3491-af52-9d03782c8b31.roa (raw, json) Hash identifier: wfUR8ufocSav8YXkbZ8q0CODoD3AvBP4En+TpwzNgTY= Subject key identifier: 8E:20:B4:36:46:AE:E0:44:4B:61:01:00:45:E7:A7:B0:33:D9:99:D2 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584B43E58CDDE0B1E573CFE52AA0 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa Signing time: Sun 21 Sep 2025 06:09:22 +0000 ROA not before: Sun 21 Sep 2025 06:09:22 +0000 ROA not after: Sat 20 Dec 2025 07:09:22 +0000 asID: 10998 IP address blocks: 199.43.64.0/21 maxlen: 21 199.43.64.0/24 maxlen: 24 199.43.65.0/24 maxlen: 24 199.43.66.0/24 maxlen: 24 199.43.67.0/24 maxlen: 24 199.43.68.0/24 maxlen: 24 199.43.69.0/24 maxlen: 24 199.43.70.0/24 maxlen: 24 199.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:e5:8c:dd:e0:b1:e5:73:cf:e5:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 21 06:09:22 2025 GMT Not After : Dec 20 07:09:22 2025 GMT Subject: CN=f9a90e69-9943-48d6-b602-83d8b51ed7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:d1:df:70:a2:24:a7:c2:c1:48:d9:21:67: d9:52:9c:60:14:01:f7:53:59:9f:11:2d:6c:4d:51: 00:ad:5d:11:43:d8:02:2e:57:0b:bc:8c:6a:31:82: 1b:fa:3f:2b:d7:51:4e:ed:33:b7:5f:4d:71:9c:f3: 3e:da:fb:eb:23:b4:ac:07:b3:15:52:75:31:c5:2e: d6:54:25:e4:69:15:e6:a2:e9:1c:92:b9:5c:81:ac: 15:32:73:18:3c:0f:86:ba:39:49:4b:c3:41:00:4d: b1:1d:a8:b3:42:d0:fc:8b:7d:4f:2c:8a:27:d3:85: ec:44:21:62:98:7d:b1:11:d8:a6:de:60:f2:ed:5e: b5:ec:7d:3f:0e:07:60:fb:d2:39:be:96:95:1f:86: c4:39:44:3d:c4:68:c9:ec:a7:5e:57:fb:89:e2:c4: 0b:4b:c2:9d:f0:17:fe:dd:e1:bb:5d:01:84:d9:5c: bc:81:a8:01:32:4d:ce:f8:2d:c3:a1:ce:3b:da:5a: 3c:bf:db:4c:9d:10:37:ff:e4:26:92:c0:51:9e:c4: cd:9c:ce:ec:e9:5e:08:f9:31:06:40:ad:dd:4c:35: 68:61:87:f8:5f:09:95:5f:7e:62:14:6f:57:1b:cc: 5a:34:5b:ff:32:16:75:1c:32:c7:c2:59:5b:d7:cc: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:20:B4:36:46:AE:E0:44:4B:61:01:00:45:E7:A7:B0:33:D9:99:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:62:7a:3a:aa:9f:ee:53:d9:40:0b:99:8e:74:b1:52:b8:dd: 86:5d:5e:56:56:0a:81:c1:ca:1e:0c:53:9d:d4:de:86:00:f0: b2:62:9f:9e:d1:93:cd:54:dd:01:c4:2c:64:a8:cb:08:85:2c: 76:8d:35:e0:98:56:df:d3:f1:bf:15:9e:5a:ac:6c:f4:9d:2a: 5a:9b:49:c1:55:06:3e:4e:fc:02:d5:32:77:53:3f:03:04:de: 40:bc:8b:24:2d:47:92:0a:fe:38:d5:72:c0:85:35:12:42:fb: 60:86:7f:42:2d:13:6e:1b:3e:36:87:78:f4:52:da:56:a1:e4: 8e:ab:61:59:32:4e:fd:af:f5:ff:a2:75:68:49:ab:91:90:45: 2d:68:a4:4f:d5:70:99:17:20:1b:72:3f:47:c7:63:7a:1a:fd: c7:8d:cc:4f:13:90:4c:e7:8c:17:c5:a3:1b:46:7a:04:e3:c1: 70:2f:cc:71:40:ad:6b:0a:1e:93:0e:d9:20:92:24:0a:5a:5c: 75:33:b5:3f:09:76:bd:2c:4a:1b:2c:b3:f3:ba:42:81:5b:aa: de:88:3b:b2:2d:d6:1e:dc:85:54:cc:2a:be:ac:5a:85:31:39: 66:19:2c:9c:34:18:97:d5:9c:0e:c4:13:2a:e3:18:c0:9c:84: 64:fd:fb:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD5Yzd4LHlc8/lKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDkyMTA2MDkyMloXDTI1MTIyMDA3MDkyMlowLzEtMCsGA1UEAxMk ZjlhOTBlNjktOTk0My00OGQ2LWI2MDItODNkOGI1MWVkN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl/R33CiJKfCwUjZIWfZUpxgFAH3U1mfES1s TVEArV0RQ9gCLlcLvIxqMYIb+j8r11FO7TO3X01xnPM+2vvrI7SsB7MVUnUxxS7W VCXkaRXmoukckrlcgawVMnMYPA+GujlJS8NBAE2xHaizQtD8i31PLIon04XsRCFi mH2xEdim3mDy7V617H0/Dgdg+9I5vpaVH4bEOUQ9xGjJ7KdeV/uJ4sQLS8Kd8Bf+ 3eG7XQGE2Vy8gagBMk3O+C3Doc472lo8v9tMnRA3/+QmksBRnsTNnM7s6V4I+TEG QK3dTDVoYYf4XwmVX35iFG9XG8xaNFv/MhZ1HDLHwllb18zuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4gtDZGruBES2EBAEXnp7Az2ZnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYmFlYWU0M2YtMzU3NS0z NDkxLWFmNTItOWQwMzc4MmM4YjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxytAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRiejqqn+5T2UALmY50sVK43YZdXlZWCoHByh4MU53U3oYA8LJin57R k81U3QHELGSoywiFLHaNNeCYVt/T8b8VnlqsbPSdKlqbScFVBj5O/ALVMndTPwME 3kC8iyQtR5IK/jjVcsCFNRJC+2CGf0ItE24bPjaHePRS2lah5I6rYVkyTv2v9f+i dWhJq5GQRS1opE/VcJkXIBtyP0fHY3oa/ceNzE8TkEznjBfFoxtGegTjwXAvzHFA rWsKHpMO2SCSJApaXHUztT8Jdr0sShsss/O6QoFbqt6IO7It1h7chVTMKr6sWoUx OWYZLJw0GJfVnA7EEyrjGMCchGT9+8E= -----END CERTIFICATE-----Generated at Tue Oct 21 01:31:37 2025 by rpki-client