$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/7e5fee93-9e27-377f-9954-f5a811766905.roa File: 7e5fee93-9e27-377f-9954-f5a811766905.roa (raw, json) Hash identifier: b/jHJ7cBBI3FWkPdoR9yiwbifzXoiq/WdKIiNP4bH7Q= Subject key identifier: D5:98:97:03:CD:83:E6:F0:77:DC:86:D9:F7:17:97:A0:47:D7:0B:16 Certificate issuer: /CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8 Certificate serial: 010D0C9F4328584B0A116232352B6E9FA94B1CC0 Authority key identifier: 8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/7e5fee93-9e27-377f-9954-f5a811766905.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 3379 IP address blocks: 199.16.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:62:32:35:2b:6e:9f:a9:4b:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=35195a44-28c0-4a37-8d51-9d7f3140d27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:77:b9:43:df:13:2b:88:e1:04:1f:95:37: a4:2f:ad:f8:9b:af:bb:b4:aa:8c:4c:e4:7c:f9:06: d3:e1:26:c2:03:ae:93:bd:0e:97:ba:f9:c4:56:e0: 74:9a:42:6e:8b:62:b2:bb:1d:41:b1:45:fd:30:e4: 8b:cc:a8:39:5a:5e:ee:8e:a2:a8:93:aa:86:78:d8: 9e:51:8d:35:0d:8c:d0:6f:01:1c:4d:55:6c:6c:75: c2:f2:06:fa:18:01:89:a3:af:72:4b:19:28:05:07: 87:16:2a:96:65:d2:c9:ae:f6:0d:d0:1b:cc:1e:49: da:48:fc:31:e7:50:26:62:b0:73:68:7a:80:aa:3d: 10:95:fd:9c:2c:c9:fe:cc:b6:0f:3e:c6:06:20:b3: 0e:77:ac:0b:81:d7:ea:31:33:76:cd:63:17:22:31: 2a:3c:b9:19:4c:36:42:f3:f2:3b:70:a1:a1:a2:d6: de:ce:03:82:a4:e1:33:1a:ec:48:75:dc:d3:7d:17: 72:53:64:2e:00:22:df:7e:ae:8a:1d:bd:59:85:63: 3e:4b:13:12:f8:e7:79:5d:c5:fa:ec:f1:bc:cd:6d: e1:58:d1:e3:88:41:2e:b8:14:57:0c:e2:38:fb:98: 81:a9:c2:64:de:cd:6e:68:c1:b2:61:82:c9:ff:43: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:98:97:03:CD:83:E6:F0:77:DC:86:D9:F7:17:97:A0:47:D7:0B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/7e5fee93-9e27-377f-9954-f5a811766905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl X509v3 Authority Key Identifier: keyid:8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer sbgp-ipAddrBlock: critical IPv4: 199.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:f8:6b:7b:93:31:73:8f:b0:d2:95:93:6f:76:17:93:c0:c2: 25:ae:a3:97:d2:e5:fc:1f:f7:34:3c:b9:d3:7b:6a:2f:d3:db: a1:9a:0f:e5:d3:6e:76:30:10:ca:c8:27:63:97:83:28:99:59: 66:e2:0d:bf:e7:85:55:91:d5:47:84:28:d1:e1:be:6c:cb:9b: 00:a8:7f:0b:3c:04:11:86:5c:72:17:fb:87:74:a7:a6:cb:e7: a8:95:0f:ee:0f:93:e0:88:19:44:a1:2c:2d:7c:68:98:f6:89: fd:0f:94:e9:d7:4e:13:5d:3f:c6:16:cc:e2:58:98:f3:0f:aa: 26:ea:07:90:cc:8f:6c:9d:08:41:c0:ec:f8:45:3e:53:ef:36: 97:d0:51:ab:66:92:96:5a:60:55:06:09:ef:33:74:9c:e1:46: 4d:ad:1c:89:29:57:47:80:df:72:3b:2a:2d:50:23:f5:8d:ec: 2e:f6:27:af:96:49:28:b5:e1:4e:c9:ef:d4:4d:a2:a5:f3:e4: de:29:51:03:f6:a1:55:3c:e3:9b:af:77:33:f8:a5:23:23:1d: 31:2e:6f:96:b0:2e:0b:bd:cb:3c:26:77:80:bd:46:bf:41:01: 22:bf:6c:2e:0c:a4:8d:6c:33:6c:9a:91:a5:ce:31:f8:10:95: df:a2:ef:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWIyNStun6lLHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM2MmVmMjItYTM5MS00MjUyLThkNzEtMTVkNDFjMWM1 YWE4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MzUxOTVhNDQtMjhjMC00YTM3LThkNTEtOWQ3ZjMxNDBkMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk13uUPfEyuI4QQflTekL634m6+7tKqMTOR8 +QbT4SbCA66TvQ6XuvnEVuB0mkJui2Kyux1BsUX9MOSLzKg5Wl7ujqKok6qGeNie UY01DYzQbwEcTVVsbHXC8gb6GAGJo69ySxkoBQeHFiqWZdLJrvYN0BvMHknaSPwx 51AmYrBzaHqAqj0Qlf2cLMn+zLYPPsYGILMOd6wLgdfqMTN2zWMXIjEqPLkZTDZC 8/I7cKGhotbezgOCpOEzGuxIddzTfRdyU2QuACLffq6KHb1ZhWM+SxMS+Od5XcX6 7PG8zW3hWNHjiEEuuBRXDOI4+5iBqcJk3s1uaMGyYYLJ/0P4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWYlwPNg+bwd9yG2fcXl6BH1wsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzYy ZWYyMi1hMzkxLTQyNTItOGQ3MS0xNWQ0MWMxYzVhYTgvN2U1ZmVlOTMtOWUyNy0z NzdmLTk5NTQtZjVhODExNzY2OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM2MmVmMjItYTM5MS00MjUyLThk NzEtMTVkNDFjMWM1YWE4L2VjNjJlZjIyLWEzOTEtNDI1Mi04ZDcxLTE1ZDQxYzFj NWFhOC5jcmwwHwYDVR0jBBgwFoAUioAeJwISkxzm3P9gstv5XTgfw5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzYyZWYyMi1hMzkxLTQyNTItOGQ3MS0xNWQ0 MWMxYzVhYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANT4a3uTMXOPsNKVk292F5PAwiWuo5fS5fwf9zQ8udN7ai/T26GaD+XT bnYwEMrIJ2OXgyiZWWbiDb/nhVWR1UeEKNHhvmzLmwCofws8BBGGXHIX+4d0p6bL 56iVD+4Pk+CIGUShLC18aJj2if0PlOnXThNdP8YWzOJYmPMPqibqB5DMj2ydCEHA 7PhFPlPvNpfQUatmkpZaYFUGCe8zdJzhRk2tHIkpV0eA33I7Ki1QI/WN7C72J6+W SSi14U7J79RNoqXz5N4pUQP2oVU845uvdzP4pSMjHTEub5awLgu9yzwmd4C9Rr9B ASK/bC4MpI1sM2yakaXOMfgQld+i78k= -----END CERTIFICATE-----Generated at Wed Nov 5 02:03:21 2025 by rpki-client