$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa File: 14a64848-7c79-3fb9-8ab0-2b575e721f30.roa (raw, json) Hash identifier: HEHfJ9jVIH4aOi/R6WZE4i2vriycaBjBupK9amBFlfI= Subject key identifier: 87:78:9E:C8:A1:C0:AF:8B:B9:2B:8B:0A:54:C9:A2:AF:EC:35:20:25 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584F6F22F2A30DE93243AA9B9880 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 400400 IP address blocks: 199.250.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f2:a3:0d:e9:32:43:aa:9b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=ab3fabf2-5710-48cd-b974-e62f69733d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:75:5c:ee:6d:77:3e:57:ef:4e:4b:0a:14:b4: 69:68:63:68:e4:a9:a1:a4:3a:6f:87:c9:60:4d:c7: d5:ba:95:63:26:77:39:a8:30:ca:c1:f5:9b:4c:63: 9b:e6:13:83:f1:27:cd:3b:a6:0a:90:e9:0a:f9:2c: 88:54:b7:93:23:d3:f7:4f:20:11:03:37:03:af:93: ce:3d:08:8e:0b:60:53:92:22:e0:aa:ab:6e:05:1a: 70:5c:ad:d8:8f:fc:f8:b4:18:f4:5b:07:d2:47:38: cc:5f:c9:bc:20:5e:3a:0b:61:8b:ac:24:91:c3:5f: 2f:16:60:bc:04:a1:6e:79:c7:12:71:c6:73:dc:cb: 31:2e:af:76:9c:dc:4b:b3:5b:7b:fb:69:a0:da:e7: ec:80:28:4a:ed:85:d1:43:f5:b3:c8:07:3b:6c:b2: 40:b9:4d:ea:65:9c:86:5d:25:4e:97:2a:2e:d7:b6: 02:9f:89:dc:30:a5:b5:7f:1d:52:09:8d:7f:fc:59: 3f:b8:98:5c:bf:14:5f:d1:fd:48:76:f7:b7:26:68: b7:ad:8a:88:7d:f5:23:3e:47:34:5e:a9:d5:69:f9: 1a:8b:72:76:b2:38:9b:6c:d6:e0:46:7a:5d:47:56: 25:a5:47:96:59:a1:8f:69:f7:df:24:de:e9:86:12: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:78:9E:C8:A1:C0:AF:8B:B9:2B:8B:0A:54:C9:A2:AF:EC:35:20:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/14a64848-7c79-3fb9-8ab0-2b575e721f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 199.250.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b0:02:cb:1c:b9:0a:a0:62:52:74:a3:31:3d:fa:31:15:be: 48:ee:9a:9a:1e:f2:f3:46:08:1c:9d:d8:ad:f9:c2:f9:9d:ac: 2d:59:b1:ad:1c:e9:9d:98:6f:ce:8f:15:c2:01:4f:dc:c5:ce: c8:f6:8e:83:f4:46:39:7d:2f:87:bb:31:c1:b3:db:c2:89:f3: 6a:56:df:3f:e5:b2:4d:33:1d:c4:cf:ae:5d:9a:93:af:2b:a7: a3:70:24:56:fb:d8:4e:73:8f:ee:55:aa:94:ba:94:b1:36:17: 0a:68:6d:8a:c0:44:f9:75:fb:70:c8:47:3b:c2:95:18:6b:bb: 7e:f6:e3:d4:42:f8:19:2c:ab:43:72:10:9e:9e:4b:4c:3d:e6: 9b:f6:1c:0e:15:fc:21:d0:91:c7:f0:af:29:c8:32:84:8a:3a: c7:04:6d:86:26:cf:5f:fc:a7:bd:0c:9d:26:98:21:80:2c:f1: 1d:df:8c:f2:85:a5:8c:eb:59:65:18:75:fd:bf:7c:7b:6e:7d: 73:37:d5:cd:1c:d6:09:ee:a4:aa:3c:0c:cb:34:ec:22:66:07: ae:09:a6:c5:c2:e2:f0:35:2a:33:8d:94:43:53:89:3a:b1:9b: 59:c7:5e:e5:db:d4:d7:f6:03:e6:f9:68:ba:0f:ca:3d:39:bf: 70:da:88:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvKjDekyQ6qbmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YWIzZmFiZjItNTcxMC00OGNkLWI5NzQtZTYyZjY5NzMzZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHVc7m13PlfvTksKFLRpaGNo5KmhpDpvh8lg TcfVupVjJnc5qDDKwfWbTGOb5hOD8SfNO6YKkOkK+SyIVLeTI9P3TyARAzcDr5PO PQiOC2BTkiLgqqtuBRpwXK3Yj/z4tBj0WwfSRzjMX8m8IF46C2GLrCSRw18vFmC8 BKFueccSccZz3MsxLq92nNxLs1t7+2mg2ufsgChK7YXRQ/WzyAc7bLJAuU3qZZyG XSVOlyou17YCn4ncMKW1fx1SCY1//Fk/uJhcvxRf0f1Idve3Jmi3rYqIffUjPkc0 XqnVafkai3J2sjibbNbgRnpdR1YlpUeWWaGPafffJN7phhI5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId4nsihwK+LuSuLClTJoq/sNSAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMTRhNjQ4NDgtN2M3OS0z ZmI5LThhYjAtMmI1NzVlNzIxZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6wAsscuQqgYlJ0ozE9+jEVvkjumpoe8vNGCByd2K35wvmdrC1Zsa0c 6Z2Yb86PFcIBT9zFzsj2joP0Rjl9L4e7McGz28KJ82pW3z/lsk0zHcTPrl2ak68r p6NwJFb72E5zj+5VqpS6lLE2FwpobYrARPl1+3DIRzvClRhru37249RC+Bksq0Ny EJ6eS0w95pv2HA4V/CHQkcfwrynIMoSKOscEbYYmz1/8p70MnSaYIYAs8R3fjPKF pYzrWWUYdf2/fHtufXM31c0c1gnupKo8DMs07CJmB64JpsXC4vA1KjONlENTiTqx m1nHXuXb1Nf2A+b5aLoPyj05v3DaiLQ= -----END CERTIFICATE-----Generated at Tue Oct 13 19:01:24 2026 by rpki-client