$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: nHnPPbWzMPQIyDsu/4Hg91Ehm75B/7Oz6b5V8Oq3pqc= Subject key identifier: 08:6D:F5:A9:6A:86:A4:E6:6A:70:F5:F0:34:11:F4:6D:44:C3:A3:82 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584B95A795DFBE3B0B94521FA380 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:95:df:be:3b:0b:94:52:1f:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=82d7323d-f3a2-4a6b-86ff-90ce2beed913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:83:b7:16:9b:02:ae:d5:41:1f:f7:55:61: 15:02:74:dc:71:2a:d5:12:2c:c2:11:5b:f8:b9:d3: d9:dc:be:1b:2a:4f:7c:f3:55:4b:77:2f:ba:a8:f3: 0f:6a:69:df:0a:7f:99:50:ff:aa:1b:70:31:42:07: e4:68:81:f8:b1:43:40:76:d5:9c:c4:bb:77:00:d2: b2:24:a7:ad:29:cd:30:eb:56:6b:ec:dc:d9:18:37: 3b:7b:40:56:f1:db:d4:11:1a:d5:6e:cc:1f:7a:e6: 4b:b3:a3:04:45:9e:ab:51:1e:26:0e:dc:bf:99:eb: 3a:a3:c3:66:b7:e4:1f:45:6b:6c:95:d3:7f:7e:97: a1:9b:83:af:c5:3a:01:bd:c4:9d:59:c3:d0:2e:d5: 60:86:38:c2:4f:5f:c0:12:77:65:d2:ed:35:a3:27: b9:46:95:0a:d9:80:01:d0:bb:2c:74:33:df:a1:bd: f9:f8:cd:3c:a0:c8:dd:92:df:c7:db:45:64:c4:fc: 9b:f3:a1:d2:e9:8c:20:00:d3:c7:75:e7:72:d5:a0: 84:24:19:e5:3b:07:48:1f:3c:73:0a:10:5d:4c:84: b2:4c:f3:d6:1a:24:8f:f9:cf:48:1e:18:a4:c4:4d: b1:5e:c0:54:3d:c2:9d:6f:0d:13:e5:1b:fd:74:99: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6D:F5:A9:6A:86:A4:E6:6A:70:F5:F0:34:11:F4:6D:44:C3:A3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fb:a1:7c:de:0c:1f:8b:c9:1e:4c:b3:6d:03:a4:82:7d:d6: dd:e4:a7:cb:3e:33:8d:c1:b4:6a:b0:7a:a8:ab:45:6d:1e:77: 50:bb:36:c4:ab:2c:ab:85:11:3f:a3:6d:95:4c:a8:e1:c6:bc: 5d:19:8d:75:84:22:70:f6:51:dc:4c:29:6c:84:ec:1d:25:b0: 9f:c5:a3:4f:38:61:4a:f3:b9:15:d5:9c:c9:62:a1:95:a6:c0: 03:9b:44:98:35:3a:3a:a7:f9:5e:21:46:4d:8f:1f:bd:69:ba: 85:98:4a:09:d7:78:80:29:d0:3d:ab:f4:68:6a:d5:18:d7:3d: f1:48:1c:31:bc:bd:03:cb:56:6d:a6:a7:61:c5:92:7a:10:67: 94:53:97:76:3c:2a:ef:f3:4e:fe:a6:9a:67:df:b9:37:a4:09: 52:fe:c9:7d:ba:12:00:39:9d:6e:f0:06:af:a1:ac:fa:dd:66: c2:d4:68:2c:12:3c:92:4e:4a:1a:39:64:55:21:43:ac:90:26: 44:90:ae:a0:0a:f5:5d:67:ac:47:79:ff:8e:2b:84:c8:e3:b7: 6a:9b:b3:c0:3c:79:6f:0e:7e:dd:c1:39:31:dd:e5:c9:79:88: c1:b0:83:61:6f:85:72:79:e4:5d:3d:e2:12:c5:fc:f0:0a:df: 55:a3:4b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5XfvjsLlFIfo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODJkNzMyM2QtZjNhMi00YTZiLTg2ZmYtOTBjZTJiZWVkOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YiDtxabAq7VQR/3VWEVAnTccSrVEizCEVv4 udPZ3L4bKk9881VLdy+6qPMPamnfCn+ZUP+qG3AxQgfkaIH4sUNAdtWcxLt3ANKy JKetKc0w61Zr7NzZGDc7e0BW8dvUERrVbswfeuZLs6MERZ6rUR4mDty/mes6o8Nm t+QfRWtsldN/fpehm4OvxToBvcSdWcPQLtVghjjCT1/AEndl0u01oye5RpUK2YAB 0LssdDPfob35+M08oMjdkt/H20VkxPyb86HS6YwgANPHdedy1aCEJBnlOwdIHzxz ChBdTISyTPPWGiSP+c9IHhikxE2xXsBUPcKdbw0T5Rv9dJk9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAht9alqhqTmanD18DQR9G1Ew6OCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT7oXzeDB+LyR5Ms20DpIJ91t3kp8s+M43BtGqweqirRW0ed1C7NsSr LKuFET+jbZVMqOHGvF0ZjXWEInD2UdxMKWyE7B0lsJ/Fo084YUrzuRXVnMlioZWm wAObRJg1Ojqn+V4hRk2PH71puoWYSgnXeIAp0D2r9Ghq1RjXPfFIHDG8vQPLVm2m p2HFknoQZ5RTl3Y8Ku/zTv6mmmffuTekCVL+yX26EgA5nW7wBq+hrPrdZsLUaCwS PJJOSho5ZFUhQ6yQJkSQrqAK9V1nrEd5/44rhMjjt2qbs8A8eW8Oft3BOTHd5cl5 iMGwg2FvhXJ55F094hLF/PAK31WjS9U= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:51 2025 by rpki-client