$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa File: 6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa (raw, json) Hash identifier: UFEyXqpd2gys4HXN0iTa3ZEUxvn50UBiM49FrGBSm/M= Subject key identifier: FF:58:6B:A3:96:18:D8:CD:A8:D1:1B:CA:7E:21:A3:9A:22:D2:20:EC Certificate issuer: /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Certificate serial: 010D0C9F4328584B047BF835D415F514E19FF460 Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 401306 IP address blocks: 199.244.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:f8:35:d4:15:f5:14:e1:9f:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4432ab97-d3d1-405b-85cc-f17625e68a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:17:36:50:d9:ab:46:0b:d5:c3:93:d0:91: 95:e5:86:96:c4:34:a3:5f:a1:43:55:2d:b2:1d:35: 58:53:ca:45:3e:cb:ef:8d:23:59:22:c1:50:c8:02: 88:cb:47:52:bf:ed:42:7d:49:95:e2:09:d2:75:77: a7:c2:4d:56:97:e8:02:e4:2a:60:35:c0:23:66:62: 4b:7d:5e:52:7b:81:10:a3:e3:2d:43:50:90:8a:9b: 87:9f:fe:87:9a:ab:07:59:65:2f:64:56:e8:80:81: 32:f3:79:f5:12:29:5d:d5:d1:d8:06:73:01:5e:b7: 54:b0:25:31:ed:ad:ba:08:89:81:3e:0a:7c:36:c7: 53:5f:d3:8c:d0:80:c4:2f:fb:2e:5a:a1:8e:ec:b8: 74:94:b0:c8:97:95:9b:0e:be:db:b3:51:76:49:2d: 38:78:fe:d5:61:b3:41:ee:ce:d9:1d:60:fa:dd:d5: 25:32:54:e6:7d:68:87:d7:7b:6d:dc:55:e1:84:46: 8b:64:14:0d:e7:50:42:fb:f7:20:47:7f:d1:51:ac: 0f:89:47:e0:57:36:80:85:e3:39:b0:98:7b:78:91: 8c:86:f1:70:fb:93:cd:3c:a6:23:51:1c:65:9e:3a: 43:ae:ff:b2:e3:5c:d1:11:90:46:99:ca:60:35:42: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:6B:A3:96:18:D8:CD:A8:D1:1B:CA:7E:21:A3:9A:22:D2:20:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl X509v3 Authority Key Identifier: keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer sbgp-ipAddrBlock: critical IPv4: 199.244.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c0:e0:87:cf:54:06:1f:f5:04:87:63:1c:ea:c8:81:0b:a7: 4a:95:e1:54:57:7a:89:cf:4d:ad:f3:13:4a:90:dd:50:2a:f9: bb:a4:d4:7e:9f:7c:c6:24:18:6f:36:10:43:0d:ac:b3:22:fd: 46:df:22:24:69:7f:7b:f7:fe:54:d0:32:4e:0c:e3:94:3d:55: 5a:93:d4:36:00:c1:d5:cd:b5:f0:bb:5d:fe:2c:b4:f1:42:19: 41:8d:01:67:85:23:7d:0e:ee:75:66:c3:aa:d1:06:e8:e1:7b: 38:0c:59:af:ad:01:67:44:12:c4:c0:70:28:55:8b:65:7a:fe: 24:8b:b4:f6:89:84:b0:98:bb:f1:87:74:01:46:10:dc:ad:99: 30:f5:38:83:c5:f9:2e:e4:da:b3:ff:14:68:29:ff:e2:c2:2a: ff:38:a3:65:d9:68:d5:d1:81:dc:34:42:bc:c0:9d:7f:db:ba: dc:88:84:5d:d7:1c:31:7d:4f:26:f5:b7:aa:01:7b:44:28:2f: eb:86:e9:29:45:fa:85:52:32:53:57:9c:63:2c:c7:1c:84:9f: ab:0d:59:0f:34:30:0c:19:e3:22:49:cb:12:f7:29:cc:72:d8: 84:81:88:55:a8:6e:c9:97:48:cf:01:e0:ee:eb:a4:1a:43:b2: fb:fb:e3:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/g11BX1FOGf9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIwN2NhMTQtMTRhYS00YjU2LWI5Y2UtNDZjOTc2OGE4 ZjkzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDQzMmFiOTctZDNkMS00MDViLTg1Y2MtZjE3NjI1ZTY4YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlewXNlDZq0YL1cOT0JGV5YaWxDSjX6FDVS2y HTVYU8pFPsvvjSNZIsFQyAKIy0dSv+1CfUmV4gnSdXenwk1Wl+gC5CpgNcAjZmJL fV5Se4EQo+MtQ1CQipuHn/6HmqsHWWUvZFbogIEy83n1Eild1dHYBnMBXrdUsCUx 7a26CImBPgp8NsdTX9OM0IDEL/suWqGO7Lh0lLDIl5WbDr7bs1F2SS04eP7VYbNB 7s7ZHWD63dUlMlTmfWiH13tt3FXhhEaLZBQN51BC+/cgR3/RUawPiUfgVzaAheM5 sJh7eJGMhvFw+5PNPKYjURxlnjpDrv+y41zREZBGmcpgNULE2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9Ya6OWGNjNqNEbyn4ho5oi0iDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3 Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4YThmOTMvNmZkYmUxNDMtNWNkYS0z MDZhLThlNDYtMjZiNGVjMWE0ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmIwN2NhMTQtMTRhYS00YjU2LWI5 Y2UtNDZjOTc2OGE4ZjkzLzZiMDdjYTE0LTE0YWEtNGI1Ni1iOWNlLTQ2Yzk3Njhh OGY5My5jcmwwHwYDVR0jBBgwFoAUBduoRTwBP2FoDW5TMQOpgJV+XtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5 NzY4YThmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/QmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPA4IfPVAYf9QSHYxzqyIELp0qV4VRXeonPTa3zE0qQ3VAq+buk1H6f fMYkGG82EEMNrLMi/UbfIiRpf3v3/lTQMk4M45Q9VVqT1DYAwdXNtfC7Xf4stPFC GUGNAWeFI30O7nVmw6rRBujhezgMWa+tAWdEEsTAcChVi2V6/iSLtPaJhLCYu/GH dAFGENytmTD1OIPF+S7k2rP/FGgp/+LCKv84o2XZaNXRgdw0QrzAnX/butyIhF3X HDF9Tyb1t6oBe0QoL+uG6SlF+oVSMlNXnGMsxxyEn6sNWQ80MAwZ4yJJyxL3Kcxy 2ISBiFWobsmXSM8B4O7rpBpDsvv74wM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:39 2025 by rpki-client