$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa File: be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json) Hash identifier: kBedjLySVx425ymzHWnklrEepE6fkCgkvrGfjmuPTW4= Subject key identifier: 8B:03:52:1E:1D:22:D5:30:52:2A:0A:E5:70:7E:87:A9:6E:20:B2:04 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B5141BFF13AFED2BCCFEF4C00 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 212238 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bf:f1:3a:fe:d2:bc:cf:ef:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=6b5fd1bb-0103-4ac4-80a8-c865cee9ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:65:01:78:ba:b7:c5:e3:88:4b:84:91:90: 4c:51:47:ed:c4:67:81:74:6e:29:da:2f:34:17:62: 3d:16:df:73:b1:5c:6b:8d:e7:c6:b2:a8:cc:d6:3d: 4d:1f:96:11:86:f7:46:39:d3:28:cb:b4:9e:eb:e7: 21:ba:cc:8c:43:d1:e6:0a:18:08:84:76:a7:b5:69: 15:79:a4:d2:69:57:0b:84:20:a6:89:55:0d:f3:ff: 96:d8:b4:82:9a:73:26:d1:34:ee:9e:9e:70:d6:7a: 51:f9:9c:18:5b:69:0a:7f:70:78:4e:dc:01:4d:02: ee:36:9b:2a:d0:90:7e:34:6b:7e:68:32:f3:91:9a: aa:05:ba:9b:17:89:2d:fe:ea:91:d6:0e:1e:04:8c: 47:fb:ec:22:a5:01:b1:38:4a:c4:22:96:bc:23:14: fa:56:25:c3:31:a7:a5:3e:92:b9:b8:b6:29:42:b5: 2c:03:fd:db:e5:d7:fd:08:3b:5e:ff:43:15:74:af: c0:66:02:db:1a:d9:23:b0:22:3f:d3:1c:c0:85:34: b6:0b:48:62:b6:53:25:b3:e9:f3:d4:a6:34:be:8d: 23:82:89:93:9d:35:aa:84:8d:b0:d9:2d:73:de:04: 64:6d:11:96:24:68:f9:53:cd:96:30:c3:7f:08:02: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:52:1E:1D:22:D5:30:52:2A:0A:E5:70:7E:87:A9:6E:20:B2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b5:fb:fa:50:88:6b:43:95:6f:84:f2:18:09:7a:fc:96:5c: dc:6d:b9:4a:2a:45:d2:ab:32:db:3c:f7:9d:5b:3f:ab:60:41: 1e:27:0a:d1:fd:e7:66:0f:71:2b:41:ee:c7:9a:73:ff:8a:71: ee:39:3e:9f:64:8f:9c:40:95:57:e6:fd:bd:69:ed:c0:85:53: 8b:13:ba:c4:c6:4b:ce:b1:57:e0:23:70:05:7a:f6:ab:3e:40: db:e5:a7:47:91:d2:f7:13:23:d7:57:f0:d0:a5:53:3a:07:f5: f9:e6:59:0a:32:2f:91:91:08:1b:3a:ff:09:bb:a6:9f:9a:8c: ce:d2:d1:aa:5e:05:62:a8:61:ce:22:11:94:a1:a1:fe:d3:92: 02:be:24:62:78:7f:dc:7e:e9:bb:69:17:06:15:6c:9a:26:8e: 0e:82:65:11:49:f8:ff:2f:d6:15:13:f2:4e:be:c7:e8:e9:15: ef:79:be:b8:b8:16:d1:54:eb:72:3e:0f:4d:27:ce:18:02:e3: 7c:ad:58:fd:97:5d:6f:76:7a:48:8f:64:c9:a3:32:59:a3:c6: ca:3e:17:c6:ed:ec:ba:75:55:cb:d7:f0:25:c3:85:33:e0:f6: cf:19:e6:36:48:1f:49:19:75:99:6e:27:99:a9:ad:c0:c6:3b: 5f:f5:0c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb/xOv7SvM/vTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NmI1ZmQxYmItMDEwMy00YWM0LTgwYTgtYzg2NWNlZTllZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEhlAXi6t8XjiEuEkZBMUUftxGeBdG4p2i80 F2I9Ft9zsVxrjefGsqjM1j1NH5YRhvdGOdMoy7Se6+chusyMQ9HmChgIhHantWkV eaTSaVcLhCCmiVUN8/+W2LSCmnMm0TTunp5w1npR+ZwYW2kKf3B4TtwBTQLuNpsq 0JB+NGt+aDLzkZqqBbqbF4kt/uqR1g4eBIxH++wipQGxOErEIpa8IxT6ViXDMael PpK5uLYpQrUsA/3b5df9CDte/0MVdK/AZgLbGtkjsCI/0xzAhTS2C0hitlMls+nz 1KY0vo0jgomTnTWqhI2w2S1z3gRkbRGWJGj5U82WMMN/CAJ8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsDUh4dItUwUioK5XB+h6luILIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmU5OTY2OWItNzZlNy0z YTYyLTkxNTEtOTAxYTM2ZGE4NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK1+/pQiGtDlW+E8hgJevyWXNxtuUoqRdKrMts8951bP6tgQR4nCtH9 52YPcStB7seac/+Kce45Pp9kj5xAlVfm/b1p7cCFU4sTusTGS86xV+AjcAV69qs+ QNvlp0eR0vcTI9dX8NClUzoH9fnmWQoyL5GRCBs6/wm7pp+ajM7S0apeBWKoYc4i EZShof7TkgK+JGJ4f9x+6btpFwYVbJomjg6CZRFJ+P8v1hUT8k6+x+jpFe95vri4 FtFU63I+D00nzhgC43ytWP2XXW92ekiPZMmjMlmjxso+F8bt7Lp1VcvX8CXDhTPg 9s8Z5jZIH0kZdZluJ5mprcDGO1/1DIA= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:53 2025 by rpki-client