$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa File: 6ede325a-ba24-308c-a1a3-54012fa276ef.roa (raw, json) Hash identifier: AcF8rZ1gCniwhM88WDTAysdarDqseKF/2r1aFTgRtZk= Subject key identifier: 09:38:15:C3:35:51:1D:7F:54:08:CD:18:32:EA:98:AC:AC:F2:9B:27 Certificate issuer: /CN=e5333a6e-37dc-4213-b928-ae0341454759 Certificate serial: 010D0C9F4328584B8EACD24D21D1421958B37C80 Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46650 IP address blocks: 199.85.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d2:4d:21:d1:42:19:58:b3:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=451c49c2-d0fe-4fb1-b83f-b974a200a199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:f7:7c:4e:df:4e:71:b3:0e:5b:cc:89:38: 5d:73:93:21:b0:24:df:14:a0:30:04:da:2a:68:69: 2a:14:6a:41:b2:ed:5f:be:cb:0c:b8:c1:62:06:88: a5:d1:52:d9:87:ee:1e:7c:03:6e:12:1b:df:0b:93: cb:a2:50:9d:da:9e:ba:93:de:a5:7c:69:d7:c3:aa: c1:b7:f7:dd:99:f0:35:af:e2:c6:9a:11:c4:60:d9: 99:f2:9e:73:ec:47:c9:60:64:97:59:7a:21:53:0c: fc:aa:91:f9:9e:24:0a:5a:8e:79:95:d9:90:b7:81: f4:b1:38:c1:44:b5:15:ad:07:72:19:ee:9e:b5:21: 39:a7:a4:dc:ea:d9:a4:58:3d:30:06:77:31:2c:48: 5a:9c:c6:c8:2b:19:bc:06:e6:0e:a2:e5:bd:f3:cb: 9c:17:b5:ec:12:b0:73:8e:0c:16:75:32:b3:82:6b: 61:df:16:40:52:09:25:7e:95:41:b4:44:cd:74:95: 3f:af:3d:73:ef:dc:a3:7d:cd:4f:11:78:ee:cb:16: ca:b1:7a:94:47:60:72:77:51:f2:f1:6a:b4:5d:c3: 63:d9:30:c2:aa:77:8f:f6:a0:d3:3a:b4:f0:fa:50: da:98:78:44:67:61:ef:bd:7c:96:d7:30:c3:9e:d2: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:15:C3:35:51:1D:7F:54:08:CD:18:32:EA:98:AC:AC:F2:9B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl X509v3 Authority Key Identifier: keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer sbgp-ipAddrBlock: critical IPv4: 199.85.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:19:d3:3a:41:00:61:7a:af:90:e2:8f:be:9d:36:04:98:bf: 16:49:c5:72:2d:1c:14:ff:57:5e:83:03:60:9e:4a:fd:6e:fa: 20:23:c5:74:4e:36:54:1a:dd:df:c8:42:fc:0d:85:8e:be:c3: a1:3d:c0:4d:b1:15:bf:bc:5a:46:b3:ed:e2:db:d5:13:86:44: 98:a2:b8:4f:72:84:bc:0d:91:f4:c0:08:6f:85:db:ba:51:97: ec:08:6a:55:e9:92:e6:33:9b:52:b6:76:a0:90:81:e5:da:88: 21:46:f0:97:8c:18:b4:19:62:10:e9:b4:72:b9:8e:02:6a:f9: 7c:f2:87:5d:c0:61:82:7c:f7:0d:65:e3:6b:34:6a:44:d5:50: ca:2f:29:17:ef:87:2c:7e:9c:82:95:63:02:e8:dd:aa:cc:ab: 70:48:2d:5b:5d:7e:bf:75:03:61:3e:3e:18:cd:df:bc:0b:39: d9:08:91:90:db:c7:cd:b1:34:02:19:c1:71:16:e7:83:b9:d1: b6:4f:01:68:f4:17:35:4f:23:8e:32:80:0a:89:ad:58:44:14: 0d:ae:65:e0:93:e5:4e:0b:82:b6:32:f1:ca:fa:8d:70:38:30: d0:3b:33:b3:e1:7f:bc:83:a9:ee:49:4b:b5:67:18:02:79:cf: 24:d9:48:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNJNIdFCGVizfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0 NzU5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NDUxYzQ5YzItZDBmZS00ZmIxLWI4M2YtYjk3NGEyMDBhMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaX3fE7fTnGzDlvMiThdc5MhsCTfFKAwBNoq aGkqFGpBsu1fvssMuMFiBoil0VLZh+4efANuEhvfC5PLolCd2p66k96lfGnXw6rB t/fdmfA1r+LGmhHEYNmZ8p5z7EfJYGSXWXohUwz8qpH5niQKWo55ldmQt4H0sTjB RLUVrQdyGe6etSE5p6Tc6tmkWD0wBncxLEhanMbIKxm8BuYOouW988ucF7XsErBz jgwWdTKzgmth3xZAUgklfpVBtETNdJU/rz1z79yjfc1PEXjuyxbKsXqUR2Byd1Hy 8Wq0XcNj2TDCqneP9qDTOrTw+lDamHhEZ2HvvXyW1zDDntJfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk4FcM1UR1/VAjNGDLqmKys8psnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvNmVkZTMyNWEtYmEyNC0z MDhjLWExYTMtNTQwMTJmYTI3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5 MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1 NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz NDE0NTQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgZ0zpBAGF6r5Dij76dNgSYvxZJxXItHBT/V16DA2CeSv1u+iAjxXRO NlQa3d/IQvwNhY6+w6E9wE2xFb+8Wkaz7eLb1ROGRJiiuE9yhLwNkfTACG+F27pR l+wIalXpkuYzm1K2dqCQgeXaiCFG8JeMGLQZYhDptHK5jgJq+Xzyh13AYYJ89w1l 42s0akTVUMovKRfvhyx+nIKVYwLo3arMq3BILVtdfr91A2E+PhjN37wLOdkIkZDb x82xNAIZwXEW54O50bZPAWj0FzVPI44ygAqJrVhEFA2uZeCT5U4LgrYy8cr6jXA4 MNA7M7Phf7yDqe5JS7VnGAJ5zyTZSCE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:59 2025 by rpki-client