$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa File: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (raw, json) Hash identifier: av3rQ6IfAwCAZ8mXg6b3cRN/EmqqWMFWsdJ/P0rUfrk= Subject key identifier: 49:6D:7E:5E:46:86:C9:01:49:4C:81:1A:11:92:9B:0C:FE:0E:8F:B3 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584B94422902B9DC626E66987200 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 3359 IP address blocks: 199.185.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:29:02:b9:dc:62:6e:66:98:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=f503e652-4fd0-4831-8a09-013b4f284e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:f7:9d:08:89:93:7e:21:bb:d4:47:65:f0: ab:db:bc:66:3c:de:11:40:9c:77:c1:71:7a:a4:93: cc:6d:72:ff:56:9f:fc:15:18:ce:53:f1:b4:9a:7e: fe:cb:a3:f1:a5:f8:e1:77:cf:75:fd:4b:8e:a1:f7: 03:58:78:f2:44:8a:dd:06:02:f2:02:25:2c:a1:75: bf:78:5d:fc:dc:1a:5a:c1:5b:fb:fa:bf:9a:9b:b4: 02:a5:05:1e:e0:eb:7d:60:dc:10:4f:94:c0:ce:85: 09:a4:ec:dc:16:b7:c6:a9:6f:4c:1f:33:e4:d7:bf: 9d:8b:b2:91:82:31:eb:e4:8c:76:b5:d2:1b:23:31: 4c:ff:87:7e:6d:5a:04:c1:24:9f:23:18:97:16:e8: 78:2d:6d:f6:50:9e:7d:54:be:81:f0:c5:6a:9e:37: cf:cd:6a:df:a4:bc:db:3a:fd:71:9d:ee:ad:43:da: a0:99:2b:67:7b:63:47:56:a0:87:d1:d3:66:3d:c9: 0d:fa:ce:39:d8:9b:d8:12:c1:ea:4d:39:69:ec:55: b3:22:f0:90:11:d1:72:42:46:66:eb:7d:84:ba:aa: 19:07:ec:80:10:c6:03:78:1e:50:ef:2f:9e:5e:fa: 0b:42:5d:dd:7e:4b:75:c0:96:2f:44:cf:bc:d0:f3: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:7E:5E:46:86:C9:01:49:4C:81:1A:11:92:9B:0C:FE:0E:8F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 199.185.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4b:da:b6:ad:f2:00:0e:a9:f7:3a:28:2f:ee:02:f3:5b:b9: f8:33:32:0e:b5:9f:c1:17:db:34:b0:d8:f4:ae:74:e4:76:66: e1:55:96:b3:50:f2:3c:5b:45:86:0e:cc:c0:68:7f:84:8b:a1: c3:cc:3c:25:25:df:e6:97:21:b9:a3:41:36:02:a3:7b:22:41: ba:4c:63:e5:73:65:e1:9c:74:d1:20:cb:1b:6c:05:34:e2:80: 71:b9:d4:fa:39:11:b6:76:52:51:d4:57:41:16:f3:a0:c4:91: ef:db:2e:46:e9:af:3d:1e:4f:6a:54:d7:a8:50:86:41:a3:25: 4f:31:fc:49:9b:d6:bc:08:3f:63:3e:36:0e:7e:34:33:7e:ac: e6:e8:f8:a9:4a:96:b5:80:88:74:47:e5:9a:eb:81:9e:82:77: 3b:34:da:b8:74:49:61:58:d6:cc:ff:26:cf:4b:30:ad:ff:b2: 82:da:71:dc:58:88:2c:47:14:e8:ba:68:ae:4d:c1:4a:7b:1c: d2:35:ee:50:af:9e:e6:e7:09:fa:51:28:84:4e:95:60:b4:69: b2:9d:1d:71:83:08:8b:71:54:79:be:35:58:be:fc:41:6b:e3: 1e:5c:24:ee:b8:cf:b1:75:74:34:28:a8:37:7d:96:0e:cf:53: f8:3c:d7:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQikCudxibmaYcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZjUwM2U2NTItNGZkMC00ODMxLThhMDktMDEzYjRmMjg0ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHb3nQiJk34hu9RHZfCr27xmPN4RQJx3wXF6 pJPMbXL/Vp/8FRjOU/G0mn7+y6Pxpfjhd891/UuOofcDWHjyRIrdBgLyAiUsoXW/ eF383BpawVv7+r+am7QCpQUe4Ot9YNwQT5TAzoUJpOzcFrfGqW9MHzPk17+di7KR gjHr5Ix2tdIbIzFM/4d+bVoEwSSfIxiXFuh4LW32UJ59VL6B8MVqnjfPzWrfpLzb Ov1xne6tQ9qgmStne2NHVqCH0dNmPckN+s452JvYEsHqTTlp7FWzIvCQEdFyQkZm 632EuqoZB+yAEMYDeB5Q7y+eXvoLQl3dfkt1wJYvRM+80PNwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEltfl5GhskBSUyBGhGSmwz+Do+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvZmMyZDI1Y2EtMGRmYS0z MDkyLWFlZjMtYTFlOGMzY2MxMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRL2rat8gAOqfc6KC/uAvNbufgzMg61n8EX2zSw2PSudOR2ZuFVlrNQ 8jxbRYYOzMBof4SLocPMPCUl3+aXIbmjQTYCo3siQbpMY+VzZeGcdNEgyxtsBTTi gHG51Po5EbZ2UlHUV0EW86DEke/bLkbprz0eT2pU16hQhkGjJU8x/Emb1rwIP2M+ Ng5+NDN+rObo+KlKlrWAiHRH5ZrrgZ6Cdzs02rh0SWFY1sz/Js9LMK3/soLacdxY iCxHFOi6aK5NwUp7HNI17lCvnubnCfpRKIROlWC0abKdHXGDCItxVHm+NVi+/EFr 4x5cJO64z7F1dDQoqDd9lg7PU/g81zk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:41 2025 by rpki-client