$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa File: 0ce0c169-ef1f-32ec-967d-086703bd7584.roa (raw, json) Hash identifier: a1qX2s1lmJ3w53ioLj5NsdRYxpa21v04RrA+ouG6K2Q= Subject key identifier: AA:24:DA:93:D8:F8:53:B0:3E:C6:64:FE:79:74:43:AB:EC:86:AD:9E Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584B84E76B84DD1C438D2CF1B430 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 204631 IP address blocks: 199.47.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6b:84:dd:1c:43:8d:2c:f1:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=570bc5d2-ffcb-4cfe-9f26-a29a4849d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:c1:b4:20:e2:a0:1d:1b:1d:d8:3e:1d:3e: b0:5b:b1:f4:a8:9c:36:0e:00:c5:38:53:26:af:3b: 5e:df:6a:e3:97:d7:96:41:a9:39:a8:16:93:28:77: 7a:cc:20:7a:61:3e:57:61:80:6a:9b:17:47:f6:f4: 2e:76:a6:87:5a:d5:35:49:06:1a:e3:6c:4d:f5:08: 74:12:ea:58:83:09:f4:db:09:ad:6b:03:70:fb:a5: ca:16:a1:52:0d:4f:74:fd:89:4f:ba:48:a9:56:d5: 7d:31:8d:9d:0a:b8:9b:a2:c2:32:fe:af:71:84:70: 66:6e:7e:d1:7d:90:ce:23:ea:21:2b:84:01:1e:f0: e6:37:11:1d:11:13:2d:ba:3d:19:e9:11:0a:8c:c6: d9:a0:5f:39:d7:e6:b5:30:b4:08:9b:7b:ea:4b:36: 57:43:1c:7e:2d:5b:3b:c3:37:36:71:b7:dc:4d:81: a3:e5:88:ce:78:14:08:8f:8d:05:fe:4e:55:f9:96: d9:09:59:ec:75:13:5b:da:71:be:3b:eb:9e:8f:fc: 2b:b6:44:57:7a:bd:e6:ea:0f:39:2e:2b:eb:f3:f6: 75:20:5b:4a:7c:53:9d:df:45:73:bd:ce:d1:f5:d1: ff:0d:d0:50:8a:a0:eb:16:e0:c1:42:4f:b9:06:a2: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:DA:93:D8:F8:53:B0:3E:C6:64:FE:79:74:43:AB:EC:86:AD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e9:ee:ee:04:1b:e0:16:66:52:14:33:aa:a7:52:94:01:94: 43:99:d5:aa:d2:3b:9e:ec:fb:23:8c:aa:81:24:31:f0:db:ca: 3e:31:42:fa:70:b9:ea:bd:d3:63:75:05:b9:cb:54:91:aa:9e: 87:18:39:aa:65:96:d8:30:c6:d8:48:11:0d:aa:c3:58:84:29: ca:62:8c:c3:cf:da:cb:a5:06:62:a0:e6:b6:79:f6:f5:05:1c: b6:94:a1:aa:76:d5:ee:77:f6:26:b1:fb:c4:07:ef:df:b6:02: c7:ca:04:cc:c5:d7:82:31:36:65:03:5c:3c:95:a2:ca:83:4d: de:f7:3d:d0:7e:ad:86:07:70:11:1e:a9:aa:bc:07:11:23:77: e0:71:4e:49:56:c4:e8:37:de:10:9c:b9:64:37:09:10:44:ab: 7e:20:84:38:7e:fe:66:06:0f:42:de:f3:7a:29:c8:8a:2e:15: 2a:97:80:91:a7:1d:95:73:9f:fc:4f:be:6c:27:75:e1:58:c0: 0e:67:79:3e:25:e9:32:b8:fc:40:c3:65:77:12:ab:49:90:4b: 07:1f:0f:26:6a:63:2c:6d:d9:5c:99:40:b4:41:44:5a:ed:9c: 78:7a:36:1a:e2:42:85:97:0b:34:e8:a2:86:92:0a:5b:f8:50: 86:c9:cf:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52uE3RxDjSzxtDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTcwYmM1ZDItZmZjYi00Y2ZlLTlmMjYtYTI5YTQ4NDlkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLzBtCDioB0bHdg+HT6wW7H0qJw2DgDFOFMm rzte32rjl9eWQak5qBaTKHd6zCB6YT5XYYBqmxdH9vQudqaHWtU1SQYa42xN9Qh0 EupYgwn02wmtawNw+6XKFqFSDU90/YlPukipVtV9MY2dCribosIy/q9xhHBmbn7R fZDOI+ohK4QBHvDmNxEdERMtuj0Z6REKjMbZoF851+a1MLQIm3vqSzZXQxx+LVs7 wzc2cbfcTYGj5YjOeBQIj40F/k5V+ZbZCVnsdRNb2nG+O+uej/wrtkRXer3m6g85 Livr8/Z1IFtKfFOd30Vzvc7R9dH/DdBQiqDrFuDBQk+5BqKsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKok2pPY+FOwPsZk/nl0Q6vshq2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMGNlMGMxNjktZWYxZi0z MmVjLTk2N2QtMDg2NzAzYmQ3NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLp7u4EG+AWZlIUM6qnUpQBlEOZ1arSO57s+yOMqoEkMfDbyj4xQvpw ueq902N1BbnLVJGqnocYOaplltgwxthIEQ2qw1iEKcpijMPP2sulBmKg5rZ59vUF HLaUoap21e539iax+8QH79+2AsfKBMzF14IxNmUDXDyVosqDTd73PdB+rYYHcBEe qaq8BxEjd+BxTklWxOg33hCcuWQ3CRBEq34ghDh+/mYGD0Le83opyIouFSqXgJGn HZVzn/xPvmwndeFYwA5neT4l6TK4/EDDZXcSq0mQSwcfDyZqYyxt2VyZQLRBRFrt nHh6NhriQoWXCzToooaSClv4UIbJz4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:08 2025 by rpki-client