$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: mC9XdF83rIjAp0TSDJOCmkmlkICAenkSQjyfJTdDqVE= Subject key identifier: 21:5C:62:17:1D:DE:61:78:07:74:F8:01:DA:2C:D1:D4:38:04:66:70 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD84F65B7037570F69900 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:4f:65:b7:03:75:70:f6:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=52d74491-a772-43dc-8895-22f518e44aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:82:46:08:b1:d3:51:1d:26:66:75:7a:76: bb:dd:1a:e1:75:38:3d:f5:96:87:0d:8f:44:4d:1a: 16:8b:8f:20:4f:b4:30:26:fc:7b:e5:e3:d9:b5:12: 24:eb:f1:88:1c:7a:54:ca:07:4b:e7:eb:de:c6:fa: c5:16:4e:a6:94:36:b8:21:4c:44:91:5d:6f:d7:cc: 10:1f:be:be:12:d1:58:01:a8:0c:cc:1a:47:91:78: 0c:c3:6a:bf:11:7d:83:6b:f6:9b:24:13:3d:36:a8: 64:4a:18:d7:89:80:1c:13:71:5d:66:86:b1:f1:66: 42:73:7c:a8:b7:08:5f:6d:e2:d4:77:4d:1f:a6:49: ea:1a:18:01:4b:1c:0c:95:21:a6:29:01:3e:30:30: b7:28:73:a5:92:5e:db:57:8b:dc:17:27:c9:d3:a6: ff:d5:3f:a9:30:12:b4:44:88:b9:c4:56:d1:43:85: 07:7f:f2:20:65:08:1e:43:1d:0d:90:aa:e8:0c:64: 98:d6:0a:bc:88:61:92:9d:7b:4f:64:eb:ad:82:95: 62:3b:3f:47:cd:4f:26:fc:b6:fb:9c:09:2b:6f:67: b2:25:1a:39:af:a1:89:4a:0b:62:61:e4:a0:cd:9e: c0:0c:89:af:a6:6e:e4:91:b1:48:87:3e:d1:06:fb: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:62:17:1D:DE:61:78:07:74:F8:01:DA:2C:D1:D4:38:04:66:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:75:e6:ab:51:35:bd:dc:7c:4a:6e:0c:48:c0:ae:99:6a:e6: 4e:66:0c:22:49:05:c9:55:9a:15:27:ea:24:b6:da:77:08:70: 2b:15:7a:c3:4d:20:1b:4c:f6:0d:ec:66:e5:12:ff:f5:67:23: 9a:37:2f:a8:ee:7a:ec:ad:d8:fd:3c:7c:e0:5d:c3:39:05:3f: e5:82:f5:ab:83:52:b6:d3:a9:88:e5:43:35:36:93:63:d1:6e: 35:60:95:2e:ac:b4:a4:1e:13:01:e9:9b:1f:f3:ee:85:f5:36: 4b:12:0b:f4:10:4d:90:91:bb:25:c1:37:e2:56:5a:da:38:f4: dc:e3:0f:d2:a9:8c:7f:eb:02:6c:24:ae:89:84:3c:df:75:68: 0c:ee:bf:3e:6c:04:49:cc:03:91:1c:45:22:4c:11:c8:c4:8e: 59:9c:75:5f:e0:2b:b4:2e:dd:b0:43:36:64:52:18:27:53:b6: 8c:b5:4d:b3:88:21:6e:b3:5c:18:4c:01:38:3d:8e:39:14:38: 79:2d:54:58:d5:a7:26:2b:54:53:ae:cc:bd:66:39:9d:2a:ae: c6:a4:0e:99:55:49:a9:6c:4c:c1:91:c4:df:c2:8e:ab:ab:af: 56:52:78:2b:4e:34:6b:5c:10:df:99:b0:0f:07:f7:86:55:d4: 69:28:b4:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNhPZbcDdXD2mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTJkNzQ0OTEtYTc3Mi00M2RjLTg4OTUtMjJmNTE4ZTQ0YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoImCRgix01EdJmZ1ena73RrhdTg99ZaHDY9E TRoWi48gT7QwJvx75ePZtRIk6/GIHHpUygdL5+vexvrFFk6mlDa4IUxEkV1v18wQ H76+EtFYAagMzBpHkXgMw2q/EX2Da/abJBM9NqhkShjXiYAcE3FdZoax8WZCc3yo twhfbeLUd00fpknqGhgBSxwMlSGmKQE+MDC3KHOlkl7bV4vcFyfJ06b/1T+pMBK0 RIi5xFbRQ4UHf/IgZQgeQx0NkKroDGSY1gq8iGGSnXtPZOutgpViOz9HzU8m/Lb7 nAkrb2eyJRo5r6GJSgtiYeSgzZ7ADImvpm7kkbFIhz7RBvuDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFcYhcd3mF4B3T4Ados0dQ4BGZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh15qtRNb3cfEpuDEjArplq5k5mDCJJBclVmhUn6iS22ncIcCsVesNN IBtM9g3sZuUS//VnI5o3L6jueuyt2P08fOBdwzkFP+WC9auDUrbTqYjlQzU2k2PR bjVglS6stKQeEwHpmx/z7oX1NksSC/QQTZCRuyXBN+JWWto49NzjD9KpjH/rAmwk romEPN91aAzuvz5sBEnMA5EcRSJMEcjEjlmcdV/gK7Qu3bBDNmRSGCdTtoy1TbOI IW6zXBhMATg9jjkUOHktVFjVpyYrVFOuzL1mOZ0qrsakDplVSalsTMGRxN/Cjqur r1ZSeCtONGtcEN+ZsA8H94ZV1GkotLg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:32 2025 by rpki-client