$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa File: 94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (raw, json) Hash identifier: vOt2SH/FeGBkbgnZ+vpWW/nm4sin2n4LZVFBVhzaHos= Subject key identifier: D4:A1:70:03:74:09:4E:14:FA:6C:E8:1E:10:FF:B2:BE:8F:51:5A:97 Certificate issuer: /CN=a58da523-4991-493a-95ce-ff1c2b97244a Certificate serial: 010D0C9F4328584B94421FBE855CD63160933280 Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 8070 IP address blocks: 199.34.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:be:85:5c:d6:31:60:93:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=2ebbf240-e9d4-447c-8d42-ac9355b1a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:51:10:46:a6:10:d5:4c:8c:3c:0d:a0:fe: 1f:6d:ba:03:a3:1d:fa:28:60:8b:71:a3:34:35:42: 34:66:ba:1e:2a:df:60:24:ae:09:e9:61:0f:70:ea: df:1d:45:47:49:ae:0b:5a:8b:b7:85:8d:f4:d4:41: 6a:1c:57:5b:87:1a:f0:10:0e:b8:38:06:c0:d8:7a: 2f:d2:62:60:e2:9a:1e:fb:45:de:14:88:c7:3b:9d: a7:7f:6a:2a:91:81:37:e8:b2:9d:ac:62:5e:a6:89: 28:51:c1:4d:4a:80:ad:41:02:bd:6b:82:f9:64:08: 48:d5:5a:eb:a2:b9:7f:05:db:d0:23:fd:bf:50:ea: fe:cb:d3:9b:7c:1f:41:d2:53:14:b9:78:c9:eb:3a: 27:5a:8e:59:7f:f5:0b:61:16:78:b6:c9:10:d3:72: 29:de:4e:3a:6b:5c:1d:a0:f4:cd:57:37:16:6b:13: a6:6c:90:11:78:60:39:92:b6:e9:78:7a:61:88:25: bd:62:2a:85:b9:b2:94:bf:b9:f6:c5:e9:f0:32:2b: 72:f7:f3:b2:c2:d1:2e:e9:41:b6:15:f7:66:bf:f5: fb:83:d4:60:7f:45:fd:70:bc:19:a9:f1:05:57:bb: 5a:37:eb:8f:28:c5:ec:72:17:f1:ec:ac:ee:52:55: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:70:03:74:09:4E:14:FA:6C:E8:1E:10:FF:B2:BE:8F:51:5A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl X509v3 Authority Key Identifier: keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer sbgp-ipAddrBlock: critical IPv4: 199.34.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e1:b7:0d:53:fe:bc:18:a8:46:5b:11:25:22:5c:ad:0b:ee: 21:aa:e4:9b:74:da:65:9f:15:40:30:41:25:ed:51:c9:0c:f9: df:e3:14:5b:9d:5a:a7:d4:b5:3a:f6:b6:bc:cd:3f:f4:ba:a5: 3b:c4:de:1d:f6:f0:1d:20:a8:22:c9:37:ff:0b:af:03:d8:d2: b2:fa:ef:2a:c1:4f:04:d8:91:6d:97:c7:11:b1:98:c5:2d:5c: 5f:79:24:81:2b:9a:90:81:ed:80:d7:f8:19:19:77:2d:e7:66: 56:6a:89:91:a1:d5:f7:90:3d:80:4b:4b:76:61:87:fc:5a:cd: 11:d5:e8:64:c5:0d:0c:54:d7:31:05:ea:c9:18:93:83:75:cf: 67:49:bb:8c:3d:48:a1:1f:3e:53:82:9b:58:88:90:11:47:e0: fa:b1:5f:90:c8:a5:3a:aa:6d:f2:a8:b6:3f:4d:ef:d2:30:67: f0:f8:d9:b8:63:ec:4e:c8:8c:53:f6:f8:e7:59:31:99:35:00: 0c:55:86:95:aa:b1:cd:f3:6e:64:33:33:74:d2:84:bf:ac:a4: 4f:77:60:28:62:88:92:ef:f4:fb:3a:b2:bd:a2:f8:13:93:1e: e6:b3:b8:84:7b:a6:0d:29:1e:9d:cb:a6:48:b9:50:e9:ba:47: 5b:f5:3b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh++hVzWMWCTMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcy NDRhMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MmViYmYyNDAtZTlkNC00NDdjLThkNDItYWM5MzU1YjFhNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTVREEamENVMjDwNoP4fbboDox36KGCLcaM0 NUI0ZroeKt9gJK4J6WEPcOrfHUVHSa4LWou3hY301EFqHFdbhxrwEA64OAbA2Hov 0mJg4poe+0XeFIjHO52nf2oqkYE36LKdrGJepokoUcFNSoCtQQK9a4L5ZAhI1Vrr orl/BdvQI/2/UOr+y9ObfB9B0lMUuXjJ6zonWo5Zf/ULYRZ4tskQ03Ip3k46a1wd oPTNVzcWaxOmbJAReGA5krbpeHphiCW9YiqFubKUv7n2xenwMity9/OywtEu6UG2 Ffdmv/X7g9Rgf0X9cLwZqfEFV7taN+uPKMXschfx7KzuUlUv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNShcAN0CU4U+mzoHhD/sr6PUVqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNThk YTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvOTRiNjM1NTQtMTBmNS0z MzY4LWE5Y2MtNGQzMWUzNDIxYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU4ZGE1MjMtNDk5MS00OTNhLTk1 Y2UtZmYxYzJiOTcyNDRhL2E1OGRhNTIzLTQ5OTEtNDkzYS05NWNlLWZmMWMyYjk3 MjQ0YS5jcmwwHwYDVR0jBBgwFoAUcMxislMRXOoXY0zWR+dAW/NcAgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFj MmI5NzI0NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXhtw1T/rwYqEZbESUiXK0L7iGq5Jt02mWfFUAwQSXtUckM+d/jFFud WqfUtTr2trzNP/S6pTvE3h328B0gqCLJN/8LrwPY0rL67yrBTwTYkW2XxxGxmMUt XF95JIErmpCB7YDX+BkZdy3nZlZqiZGh1feQPYBLS3Zhh/xazRHV6GTFDQxU1zEF 6skYk4N1z2dJu4w9SKEfPlOCm1iIkBFH4PqxX5DIpTqqbfKotj9N79IwZ/D42bhj 7E7IjFP2+OdZMZk1AAxVhpWqsc3zbmQzM3TShL+spE93YChiiJLv9Ps6sr2i+BOT HuazuIR7pg0pHp3Lpki5UOm6R1v1Owc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:43 2025 by rpki-client