$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b00b1c10-f055-3513-9e01-4260d18d2c35.roa File: b00b1c10-f055-3513-9e01-4260d18d2c35.roa (raw, json) Hash identifier: yCNwOspjDMdnMpcFrvRpuzvcQIeop2ysodem2TvpvOk= Subject key identifier: 1E:07:B1:F2:17:C0:B6:11:94:FC:D7:03:DF:25:B6:E6:C0:B3:CD:6D Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584BA98FB27C40DE0E33DB89A440 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b00b1c10-f055-3513-9e01-4260d18d2c35.roa Signing time: Mon 27 Oct 2025 16:08:51 +0000 ROA not before: Mon 27 Oct 2025 16:08:51 +0000 ROA not after: Sun 25 Jan 2026 17:08:51 +0000 asID: 9304 IP address blocks: 199.7.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:8f:b2:7c:40:de:0e:33:db:89:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Oct 27 16:08:51 2025 GMT Not After : Jan 25 17:08:51 2026 GMT Subject: CN=64f8a553-0d07-4680-a327-b9da026f38c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:88:bf:7d:fb:45:21:f6:61:31:b4:11:55: d1:51:d7:f1:c3:e6:81:1d:d1:c8:3e:c5:58:90:ab: 80:a2:98:0b:f9:87:47:03:ec:93:5e:74:0e:50:96: 1c:2f:b7:f0:cb:e1:64:74:52:25:f9:19:ad:0e:d3: c5:1f:19:0c:2e:bf:7d:2a:bd:f1:f2:04:a8:ff:36: cf:5b:89:20:4c:56:2c:cf:32:b6:26:46:9f:ba:ab: 81:2c:a5:1d:77:65:aa:f1:a7:f0:15:72:d9:3b:1a: 7d:cb:5c:57:cd:4f:42:a3:03:8a:9f:5e:5d:d1:11: 82:92:57:7c:29:47:92:a4:ee:f1:c4:f4:b9:4a:dd: ea:72:59:2a:c1:47:ac:56:55:c5:94:b8:e0:97:e9: d7:d3:2e:02:dc:75:a0:f7:2b:e9:b5:a2:57:5e:63: 47:b6:22:63:01:bc:30:8a:d8:b3:51:65:06:a7:d5: 83:b8:cb:4c:17:18:b8:91:6d:59:ee:9e:d7:17:39: b9:79:41:36:aa:12:aa:20:99:68:3b:64:7a:e3:38: 03:53:83:b4:00:1c:d0:1a:5b:eb:54:fc:d0:32:fd: 69:12:56:3b:81:fb:19:8e:52:b7:ae:c9:bb:19:fb: 1f:36:35:4c:25:09:83:7d:86:7c:4f:06:de:55:89: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:07:B1:F2:17:C0:B6:11:94:FC:D7:03:DF:25:B6:E6:C0:B3:CD:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/b00b1c10-f055-3513-9e01-4260d18d2c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.7.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:10:3d:58:e9:49:8e:fe:21:68:3b:4a:38:30:e9:f6:55:92: f0:b4:c3:85:1f:e0:ec:05:b2:5d:d6:4f:a8:f2:db:38:0b:ff: d4:61:10:59:c6:b7:0d:ae:a7:ff:7c:36:79:7e:56:87:15:80: b1:b3:e7:50:33:c9:51:60:a5:d1:ba:2b:d4:85:94:77:a4:c7: 21:ac:fa:c1:7d:a0:03:60:e7:67:ff:e6:08:4a:3e:e0:7d:32: 05:04:97:2f:ef:ff:1b:ff:d8:d2:69:56:68:c2:35:b9:be:be: 6a:69:ea:9f:44:57:12:9b:85:7a:f5:10:cb:81:24:b7:44:96: 58:f1:c3:6b:e9:a1:f1:a0:88:7b:47:35:53:c7:49:3c:e6:9f: b5:f4:8b:27:2f:9e:67:ab:7f:31:97:26:24:2f:bf:f0:d0:23: ca:dd:58:49:15:2b:c7:c3:7c:90:31:0c:11:c3:8b:04:ee:fe: 72:1c:5b:7c:60:a4:16:1b:a8:c8:f8:26:72:43:8a:bd:62:e0: d7:fb:39:78:3c:bd:65:45:69:40:89:1e:06:d1:54:f2:a6:74: 11:a8:14:48:c1:19:dd:c7:8c:1a:e9:f0:e0:da:c6:85:cf:b0: 22:42:0d:32:5f:4f:e1:e5:6e:7c:9c:54:53:14:78:ca:fd:82: c5:c9:96:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupj7J8QN4OM9uJpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI1MTAyNzE2MDg1MVoXDTI2MDEyNTE3MDg1MVowLzEtMCsGA1UEAxMk NjRmOGE1NTMtMGQwNy00NjgwLWEzMjctYjlkYTAyNmYzOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmOIv337RSH2YTG0EVXRUdfxw+aBHdHIPsVY kKuAopgL+YdHA+yTXnQOUJYcL7fwy+FkdFIl+RmtDtPFHxkMLr99Kr3x8gSo/zbP W4kgTFYszzK2JkafuquBLKUdd2Wq8afwFXLZOxp9y1xXzU9CowOKn15d0RGCkld8 KUeSpO7xxPS5St3qclkqwUesVlXFlLjgl+nX0y4C3HWg9yvptaJXXmNHtiJjAbww itizUWUGp9WDuMtMFxi4kW1Z7p7XFzm5eUE2qhKqIJloO2R64zgDU4O0ABzQGlvr VPzQMv1pElY7gfsZjlK3rsm7GfsfNjVMJQmDfYZ8TwbeVYmNOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4HsfIXwLYRlPzXA98ltubAs81tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvYjAwYjFjMTAtZjA1NS0z NTEzLTllMDEtNDI2MGQxOGQyYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsQPVjpSY7+IWg7Sjgw6fZVkvC0w4Uf4OwFsl3WT6jy2zgL/9RhEFnG tw2up/98Nnl+VocVgLGz51AzyVFgpdG6K9SFlHekxyGs+sF9oANg52f/5ghKPuB9 MgUEly/v/xv/2NJpVmjCNbm+vmpp6p9EVxKbhXr1EMuBJLdElljxw2vpofGgiHtH NVPHSTzmn7X0iycvnmerfzGXJiQvv/DQI8rdWEkVK8fDfJAxDBHDiwTu/nIcW3xg pBYbqMj4JnJDir1i4Nf7OXg8vWVFaUCJHgbRVPKmdBGoFEjBGd3HjBrp8ODaxoXP sCJCDTJfT+HlbnycVFMUeMr9gsXJlnQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:12 2025 by rpki-client