$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa File: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (raw, json) Hash identifier: JIAhJZiBW8RNY5aUITQMW95bg0YN6QM/I3JXCvHUbVE= Subject key identifier: 9F:07:8C:70:61:FC:9E:05:D3:E2:8F:01:71:54:43:10:98:42:14:73 Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584BB727BCB6735CD6133F0E8210 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 396982 IP address blocks: 199.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:b6:73:5c:d6:13:3f:0e:82:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=b48a63cb-7217-4a38-b24e-c511cc508a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:03:53:f6:d8:50:8f:ab:f9:90:ad:f4:1c: ad:2b:cd:2e:4c:1b:81:ba:60:9c:e4:f5:66:0f:6f: 0a:44:fc:79:fd:86:93:ef:06:61:fe:cc:07:99:f3: a3:60:e3:25:5a:cb:0c:64:06:f7:3e:0e:d9:48:89: 97:90:a5:ea:db:6b:e0:84:19:94:87:13:9a:4f:ff: cb:6c:3f:6e:f5:ff:e5:70:2e:1e:02:e7:56:3b:a4: 13:b8:d3:a8:08:54:11:4f:26:66:fc:79:80:f0:a2: 40:3b:63:71:95:1b:ba:5c:11:0d:83:c1:6f:54:0e: 43:aa:34:95:e0:a4:b1:bb:e2:0b:13:c6:d8:c3:08: ab:cc:a9:18:a3:70:8a:92:fd:7d:ec:81:e8:c2:8e: 0a:fc:34:d0:75:4c:43:b5:e8:68:e9:d7:3d:84:15: 03:68:9c:7a:1e:b0:b7:eb:ea:4b:a9:40:69:a5:2a: 11:a6:43:a0:76:7e:f2:20:7b:64:c7:cf:ff:5e:8f: 2a:37:a7:d8:14:40:69:94:ac:2c:df:0e:91:ce:80: f5:8a:99:13:35:70:d0:d2:d5:b7:8d:b5:5c:11:f0: 46:07:f4:aa:ed:00:b9:93:92:0e:ae:57:3d:a5:83: 3b:be:58:a4:6c:14:ae:72:7a:68:53:c8:19:3a:28: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:07:8C:70:61:FC:9E:05:D3:E2:8F:01:71:54:43:10:98:42:14:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e1:fd:b7:1f:19:a9:42:be:d8:44:e1:3d:2b:0f:27:3a:21: 0d:bf:4b:e8:95:3a:51:12:2b:c5:34:43:0b:fb:9a:bc:81:db: da:d2:ba:3b:c9:89:66:dd:de:76:6c:1f:19:07:fb:65:ca:8d: 7b:cd:62:1b:bc:f9:ee:53:71:fe:b9:0f:27:d2:2f:76:b0:93: f6:9a:6a:71:16:9f:74:13:82:da:27:f6:be:0a:ff:fe:ab:8b: f6:ea:1b:20:e6:4e:3d:9c:67:0d:b9:57:d7:36:30:d9:ca:ec: 00:42:70:77:0b:af:10:7f:13:07:3c:8d:4b:1c:73:92:28:48: cf:3f:1b:e8:2c:f2:6a:96:dc:f4:ef:55:38:6a:f8:a5:9a:44: 9d:f4:ff:99:4e:15:8b:60:09:85:28:63:e1:06:3f:8a:ac:15: 9f:71:71:b2:48:ff:bf:5c:0b:8e:86:45:78:0a:7d:44:8b:ec: 61:1e:e4:64:e4:63:a6:18:f5:5f:2f:48:a7:17:7f:e8:9b:04: c2:a1:d5:13:58:f3:ac:c5:88:9f:0a:60:ec:e9:00:1b:93:ac: bf:7a:98:4a:0d:d6:19:de:05:e0:47:3c:c3:78:39:15:b1:d5: 5a:cd:71:50:dc:d9:2b:84:dd:1f:d9:44:d3:5e:57:3f:05:a6: 50:58:75:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7y2c1zWEz8OghAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YjQ4YTYzY2ItNzIxNy00YTM4LWIyNGUtYzUxMWNjNTA4YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb8DU/bYUI+r+ZCt9BytK80uTBuBumCc5PVm D28KRPx5/YaT7wZh/swHmfOjYOMlWssMZAb3Pg7ZSImXkKXq22vghBmUhxOaT//L bD9u9f/lcC4eAudWO6QTuNOoCFQRTyZm/HmA8KJAO2NxlRu6XBENg8FvVA5DqjSV 4KSxu+ILE8bYwwirzKkYo3CKkv197IHowo4K/DTQdUxDteho6dc9hBUDaJx6HrC3 6+pLqUBppSoRpkOgdn7yIHtkx8//Xo8qN6fYFEBplKws3w6RzoD1ipkTNXDQ0tW3 jbVcEfBGB/Sq7QC5k5IOrlc9pYM7vlikbBSucnpoU8gZOig9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8HjHBh/J4F0+KPAXFUQxCYQhRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvNGNhZmJmZDItMzViMC0z ZDA3LThkMTMtMTFmNmJkYmEyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjh/bcfGalCvthE4T0rDyc6IQ2/S+iVOlESK8U0Qwv7mryB29rSujvJ iWbd3nZsHxkH+2XKjXvNYhu8+e5Tcf65DyfSL3awk/aaanEWn3QTgton9r4K//6r i/bqGyDmTj2cZw25V9c2MNnK7ABCcHcLrxB/Ewc8jUscc5IoSM8/G+gs8mqW3PTv VThq+KWaRJ30/5lOFYtgCYUoY+EGP4qsFZ9xcbJI/79cC46GRXgKfUSL7GEe5GTk Y6YY9V8vSKcXf+ibBMKh1RNY86zFiJ8KYOzpABuTrL96mEoN1hneBeBHPMN4ORWx 1VrNcVDc2SuE3R/ZRNNeVz8FplBYdTI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:44 2025 by rpki-client