$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa File: 69f9564e-820b-3519-a564-1d6170510557.roa (raw, json) Hash identifier: PPEL3eqeVYzxIwlm0tP7nKB/SR2Wdc+ABuJD3upTwQI= Subject key identifier: D1:7E:81:E4:9D:87:24:31:46:09:7A:F7:8E:F9:8C:C7:0D:26:63:88 Certificate issuer: /CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d Certificate serial: 010D0C9F4328584B233197F12C4E7CCDFF88E400 Authority key identifier: 11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 54760 IP address blocks: 199.124.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:97:f1:2c:4e:7c:cd:ff:88:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=af3757d3-06fd-44d4-8626-c1696ee07061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:4f:07:59:06:bb:ff:bd:29:95:39:e2:26: fe:68:64:f5:ce:7f:a1:17:85:b1:db:3b:99:64:36: 1a:43:28:90:97:3f:96:c0:28:83:07:d6:2a:41:d7: e0:03:6d:57:33:6e:fb:36:b5:26:4f:4f:bb:bf:06: 32:f5:94:6e:9f:e4:da:86:aa:16:19:fd:50:8f:31: 71:8d:61:85:cd:a7:23:86:a6:1a:8e:0e:54:90:cd: 6c:6e:47:2c:7d:7e:99:a8:b9:21:58:d8:7f:db:f8: ad:3f:8f:8c:64:ae:c9:de:ba:1c:14:11:4f:e0:57: 67:3c:ad:6b:5d:1d:45:a8:46:bb:1c:d2:4e:f6:af: 8d:69:18:62:12:fa:a5:fd:e1:4c:b0:66:b0:78:84: 21:3d:2d:01:60:c9:9b:83:73:11:58:ae:43:3b:0d: a1:4b:9b:03:8a:ac:e0:5a:fb:2a:e0:27:f4:0f:39: 95:bf:c8:2a:9b:dd:51:34:75:4a:e7:bc:42:5e:3b: 33:e6:95:b9:4c:88:d8:14:fd:c1:fd:ca:68:73:de: b5:60:05:6e:03:41:62:06:db:10:45:e5:cd:c2:00: e6:85:fe:73:1a:9a:71:c8:8d:b5:02:36:cd:0e:b8: a9:2b:fc:69:88:5e:43:36:be:ae:f4:58:28:08:50: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:81:E4:9D:87:24:31:46:09:7A:F7:8E:F9:8C:C7:0D:26:63:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.crl X509v3 Authority Key Identifier: keyid:11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer sbgp-ipAddrBlock: critical IPv4: 199.124.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c2:82:b7:c5:c5:81:73:63:20:4c:4a:ad:7b:11:3b:f3:fc: d7:6d:30:5e:3e:b6:e1:7c:16:b9:eb:67:15:7f:bb:7a:55:1a: 7c:6d:4d:4b:e5:89:d2:7f:d7:49:e0:72:b5:a9:01:60:3b:f9: 8c:b1:17:20:af:75:2c:ef:47:c3:82:95:82:9e:ac:56:04:56: ae:2c:54:58:1e:09:8a:95:b9:ef:ff:bf:28:a1:fd:39:37:af: c0:01:4a:fa:5b:f9:86:18:1b:bd:42:ad:6d:46:9a:fb:89:d4: 3d:e0:a1:67:1f:00:c5:59:e7:70:ff:e3:69:4a:85:a4:78:85: aa:e3:3b:47:9f:1b:23:29:90:d8:5c:5b:87:9a:8e:08:bd:d7: 8e:d2:22:fb:77:78:21:f2:19:d7:31:fc:c4:c6:83:f7:ad:76: 93:bb:b1:e6:2f:4d:4a:bb:32:6e:7a:7f:e0:94:39:d0:d9:3d: 99:aa:04:2f:c9:cc:b6:a9:3a:ed:7a:63:f0:54:4b:9a:dc:a1: 18:2f:d2:60:93:ed:d4:7b:de:41:aa:72:1a:b9:ea:e5:fb:28: f4:a0:33:fe:e6:d7:71:96:db:bc:97:0f:f4:1a:9c:22:1c:96: 6f:ba:ba:1c:7e:34:a2:60:60:fc:18:fc:87:29:a5:0c:dc:0f: 67:15:68:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZfxLE58zf+I5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ4MmQ2YWMtM2E4Ny00ZTg4LWFjODQtZTJkYTY3NDVk NTNkMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YWYzNzU3ZDMtMDZmZC00NGQ0LTg2MjYtYzE2OTZlZTA3MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCpPB1kGu/+9KZU54ib+aGT1zn+hF4Wx2zuZ ZDYaQyiQlz+WwCiDB9YqQdfgA21XM277NrUmT0+7vwYy9ZRun+TahqoWGf1QjzFx jWGFzacjhqYajg5UkM1sbkcsfX6ZqLkhWNh/2/itP4+MZK7J3rocFBFP4FdnPK1r XR1FqEa7HNJO9q+NaRhiEvql/eFMsGaweIQhPS0BYMmbg3MRWK5DOw2hS5sDiqzg Wvsq4Cf0DzmVv8gqm91RNHVK57xCXjsz5pW5TIjYFP3B/cpoc961YAVuA0FiBtsQ ReXNwgDmhf5zGppxyI21AjbNDripK/xpiF5DNr6u9FgoCFBxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF+geSdhyQxRgl69475jMcNJmOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZDgy ZDZhYy0zYTg3LTRlODgtYWM4NC1lMmRhNjc0NWQ1M2QvNjlmOTU2NGUtODIwYi0z NTE5LWE1NjQtMWQ2MTcwNTEwNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmQ4MmQ2YWMtM2E4Ny00ZTg4LWFj ODQtZTJkYTY3NDVkNTNkL2ZkODJkNmFjLTNhODctNGU4OC1hYzg0LWUyZGE2NzQ1 ZDUzZC5jcmwwHwYDVR0jBBgwFoAUEZ2K0HTVDKGbTpa4hk+zDDDagGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZDgyZDZhYy0zYTg3LTRlODgtYWM4NC1lMmRh Njc0NWQ1M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3wDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3CgrfFxYFzYyBMSq17ETvz/NdtMF4+tuF8FrnrZxV/u3pVGnxtTUvl idJ/10ngcrWpAWA7+YyxFyCvdSzvR8OClYKerFYEVq4sVFgeCYqVue//vyih/Tk3 r8ABSvpb+YYYG71CrW1GmvuJ1D3goWcfAMVZ53D/42lKhaR4harjO0efGyMpkNhc W4eajgi9147SIvt3eCHyGdcx/MTGg/etdpO7seYvTUq7Mm56f+CUOdDZPZmqBC/J zLapOu16Y/BUS5rcoRgv0mCT7dR73kGqchq56uX7KPSgM/7m13GW27yXD/QanCIc lm+6uhx+NKJgYPwY/IcppQzcD2cVaNc= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:01 2025 by rpki-client