$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa File: bb0e916f-4055-3092-b589-081a564222fd.roa (raw, json) Hash identifier: 6EWJAYbvxQTLmPJVB4BcYLbwSwet66LXw8+VsbBnhVo= Subject key identifier: F6:0B:E9:DB:3E:33:C9:AB:C1:97:DF:C2:F5:DB:B8:FD:70:2E:DD:8E Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584B6631F685AB53736813BAFA50 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396982 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f6:85:ab:53:73:68:13:ba:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=10ee7904-7f18-43f9-8d7b-aa284552b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:c1:e7:1e:c6:08:fd:48:d0:d7:93:6b:75: 38:86:bb:1b:a1:da:2e:ef:2c:36:66:20:a2:d8:68: b9:7b:95:cb:cb:f1:20:3a:0b:fd:3c:27:30:8a:24: ab:5b:c5:67:b9:62:04:4a:6d:27:a6:5c:7f:73:94: b9:21:7d:f7:f7:1f:d4:30:c1:84:29:c6:0a:90:f1: c4:e4:37:51:95:4c:fb:7b:2c:19:ae:85:77:9e:73: fc:73:14:a4:7d:b2:d1:0e:9a:33:2c:45:9f:60:ec: cd:e2:d6:09:7d:94:f4:aa:3f:e7:6f:a5:4a:65:27: 0a:2d:6c:b6:00:29:b9:99:5f:b5:a8:1c:18:9a:ea: 6a:b1:a6:7e:d2:30:30:33:50:91:a9:ef:db:c4:dd: cd:c3:ad:de:26:4c:bc:9b:99:a1:c7:e4:0b:10:58: 40:65:b8:97:b5:71:df:d6:74:f6:14:b5:9d:b4:a2: 15:1c:f0:ab:a8:06:48:bc:56:3c:ed:6b:f6:84:60: 10:ae:a5:14:a8:82:78:05:87:5c:cd:0e:26:95:78: f8:66:1d:55:af:14:e2:24:ac:00:5d:45:b7:e0:ab: ad:f0:da:0c:c5:04:5c:3f:f2:f7:96:75:bb:1b:c3: 36:42:ad:db:35:45:bc:1f:62:33:86:15:9c:ed:72: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0B:E9:DB:3E:33:C9:AB:C1:97:DF:C2:F5:DB:B8:FD:70:2E:DD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:19:72:fd:f8:15:bd:b0:b0:70:9e:b1:cb:92:22:c5:48:7c: 62:da:87:9f:9b:2d:16:cb:3b:7a:26:a5:20:67:10:a1:c8:63: f6:23:b2:d4:e0:8b:08:ab:d0:d3:37:07:31:f7:8c:ba:fb:98: 41:a9:eb:4a:0c:5a:b6:96:64:55:2d:3a:71:0c:2c:30:46:12: ce:7d:1a:6a:35:1f:91:1a:f0:5a:70:1f:39:4d:96:16:89:b3: 18:47:32:6a:75:c8:35:4a:f4:ed:33:76:47:35:b8:25:ce:87: d3:fc:dd:fe:74:f4:09:72:4d:6c:a2:95:b4:fc:fc:64:b4:e5: f8:bb:10:4d:6e:a6:f1:b5:ad:3e:52:a5:17:bf:5b:8e:56:fa: 70:82:b2:ae:ff:60:e9:dc:e9:09:ce:73:c5:6f:d8:59:5d:84: b8:61:72:78:5d:d9:99:5e:69:93:80:3d:fa:c5:53:5f:c9:34: e6:0e:75:51:4c:cc:e3:07:ae:a7:16:58:33:dc:7b:f4:b9:72: 30:ec:0f:3e:cd:25:0e:2d:e9:60:ed:c8:d2:4c:2a:1b:ac:06: 71:8d:2f:f8:3f:de:a9:f9:e7:b4:5c:e4:60:84:60:d9:ce:a9: 0e:d9:e8:66:ec:cb:4e:e7:90:76:f9:e2:fd:4e:eb:b1:a8:09: 3e:d2:d6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfaFq1NzaBO6+lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MTBlZTc5MDQtN2YxOC00M2Y5LThkN2ItYWEyODQ1NTJiMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4LB5x7GCP1I0NeTa3U4hrsbodou7yw2ZiCi 2Gi5e5XLy/EgOgv9PCcwiiSrW8VnuWIESm0nplx/c5S5IX339x/UMMGEKcYKkPHE 5DdRlUz7eywZroV3nnP8cxSkfbLRDpozLEWfYOzN4tYJfZT0qj/nb6VKZScKLWy2 ACm5mV+1qBwYmupqsaZ+0jAwM1CRqe/bxN3Nw63eJky8m5mhx+QLEFhAZbiXtXHf 1nT2FLWdtKIVHPCrqAZIvFY87Wv2hGAQrqUUqIJ4BYdczQ4mlXj4Zh1VrxTiJKwA XUW34Kut8NoMxQRcP/L3lnW7G8M2Qq3bNUW8H2IzhhWc7XKeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYL6ds+M8mrwZffwvXbuP1wLt2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvYmIwZTkxNmYtNDA1NS0z MDkyLWI1ODktMDgxYTU2NDIyMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYZcv34Fb2wsHCescuSIsVIfGLah5+bLRbLO3ompSBnEKHIY/YjstTg iwir0NM3BzH3jLr7mEGp60oMWraWZFUtOnEMLDBGEs59Gmo1H5Ea8FpwHzlNlhaJ sxhHMmp1yDVK9O0zdkc1uCXOh9P83f509AlyTWyilbT8/GS05fi7EE1upvG1rT5S pRe/W45W+nCCsq7/YOnc6QnOc8Vv2FldhLhhcnhd2ZleaZOAPfrFU1/JNOYOdVFM zOMHrqcWWDPce/S5cjDsDz7NJQ4t6WDtyNJMKhusBnGNL/g/3qn557Rc5GCEYNnO qQ7Z6Gbsy07nkHb54v1O67GoCT7S1rc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:53 2025 by rpki-client