$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa File: f2a698c5-0709-39f9-ae58-e419ba0b629f.roa (raw, json) Hash identifier: oRS1AmY/x2ficvkzkWA1301yp5XcGCsnNfk8rknW+Mc= Subject key identifier: 87:68:2A:EE:10:43:8B:C0:CD:E1:56:3E:2D:A8:BC:E6:8B:49:45:56 Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b Certificate serial: 010D0C9F4328584BBE4042A4D9BE6749AF592680 Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 397050 IP address blocks: 199.45.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:42:a4:d9:be:67:49:af:59:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5599362b-df6f-47f2-a4f1-ba1981a99a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:d5:97:8c:e4:3a:77:fd:18:02:24:e6:f6: 84:fa:8c:b9:12:0f:56:94:6b:ed:50:87:51:c2:2c: cb:cc:36:b6:73:9b:f9:93:c3:d8:09:d6:8b:e6:fd: 77:38:be:ef:86:ed:9e:71:f1:db:7e:af:62:3f:db: 6d:a6:e1:2e:21:6e:3b:f6:fd:e1:31:d2:8d:a8:05: e8:68:c8:4c:8d:63:2b:21:f4:16:ec:55:e4:57:f1: 1b:3e:d7:9f:a6:99:cb:3c:f1:4a:cf:02:00:90:a5: c5:05:4e:26:04:00:e2:bd:41:a8:9d:39:28:cf:18: 3b:3e:28:7b:db:75:7e:82:00:70:4a:e8:de:c3:54: 49:60:09:63:23:f7:d4:91:2e:b5:9b:e0:fa:08:c7: cb:d4:13:ac:b4:b1:45:e6:88:39:f5:cc:b5:04:be: 07:ab:1a:39:5f:7c:e1:2a:ef:71:d3:38:6c:35:60: 65:af:bf:ef:d8:68:05:15:72:fe:ae:9c:fe:78:e7: 0f:81:a1:9d:ac:3b:b4:36:d0:8e:d6:a4:2e:00:23: 04:ee:d4:57:cc:ba:16:8f:81:d6:20:8b:d0:52:07: c5:10:c3:4c:4e:c1:82:60:85:57:fc:4e:ba:8f:e9: 9b:bb:c6:c1:3d:39:b5:74:f3:b9:39:9b:b5:18:07: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:2A:EE:10:43:8B:C0:CD:E1:56:3E:2D:A8:BC:E6:8B:49:45:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl X509v3 Authority Key Identifier: keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4d:c6:0e:73:f8:51:37:1e:a1:68:f6:f5:ba:15:2c:8a:4c: 4c:bd:c2:fd:71:84:c8:ce:5d:e3:37:8a:30:6c:c3:e5:e3:33: 0c:02:89:24:91:0d:3f:05:1b:9a:12:97:26:7d:19:d4:a4:26: 2e:aa:6c:cb:13:38:db:b6:2c:96:fe:35:78:ca:91:de:26:46: f5:9c:44:e1:0c:de:e2:3d:02:04:45:3c:be:55:49:82:3e:a2: 32:60:e3:75:9e:c6:3b:ec:fe:8f:13:4f:6c:49:19:92:4d:d8: 09:73:70:d4:85:1f:c6:d4:23:7c:7d:66:44:82:bf:f2:62:d6: 13:6e:24:4b:14:06:de:9b:b1:e1:c2:37:bf:b8:42:47:7d:a6: 0a:7e:13:3c:01:ca:20:15:17:86:25:94:4b:a2:9f:d3:d6:26: fe:2e:83:af:55:36:b6:b5:86:4b:ef:10:97:d2:dc:12:99:5f: 72:fd:e2:07:07:e0:5d:55:a2:6f:e1:b0:bf:06:ce:fd:4a:64: d9:bb:56:85:d6:cc:5e:93:80:48:57:85:83:98:02:0f:76:ae: 2e:64:b5:6e:e3:93:86:a2:bd:3a:3b:4e:6a:61:c1:b7:2f:68: f7:7b:c3:34:f3:47:c1:3d:65:77:cc:2a:f8:ef:98:b1:14:60: 7d:5c:e1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEKk2b5nSa9ZJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyZGE4NzAtYmUwNi00NzFlLTg5YjYtZjUwNjNlYjcz NTBiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTU5OTM2MmItZGY2Zi00N2YyLWE0ZjEtYmExOTgxYTk5YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOvVl4zkOnf9GAIk5vaE+oy5Eg9WlGvtUIdR wizLzDa2c5v5k8PYCdaL5v13OL7vhu2ecfHbfq9iP9ttpuEuIW479v3hMdKNqAXo aMhMjWMrIfQW7FXkV/EbPtefppnLPPFKzwIAkKXFBU4mBADivUGonTkozxg7Pih7 23V+ggBwSujew1RJYAljI/fUkS61m+D6CMfL1BOstLFF5og59cy1BL4Hqxo5X3zh Ku9x0zhsNWBlr7/v2GgFFXL+rpz+eOcPgaGdrDu0NtCO1qQuACME7tRXzLoWj4HW IIvQUgfFEMNMTsGCYIVX/E66j+mbu8bBPTm1dPO5OZu1GActTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdoKu4QQ4vAzeFWPi2ovOaLSUVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOTJk YTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2ViNzM1MGIvZjJhNjk4YzUtMDcwOS0z OWY5LWFlNTgtZTQxOWJhMGI2MjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTkyZGE4NzAtYmUwNi00NzFlLTg5 YjYtZjUwNjNlYjczNTBiL2E5MmRhODcwLWJlMDYtNDcxZS04OWI2LWY1MDYzZWI3 MzUwYi5jcmwwHwYDVR0jBBgwFoAUp3QuSRW5cC/ot2BQ7Xqk3RSjdKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2 M2ViNzM1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRNxg5z+FE3HqFo9vW6FSyKTEy9wv1xhMjOXeM3ijBsw+XjMwwCiSSR DT8FG5oSlyZ9GdSkJi6qbMsTONu2LJb+NXjKkd4mRvWcROEM3uI9AgRFPL5VSYI+ ojJg43Wexjvs/o8TT2xJGZJN2AlzcNSFH8bUI3x9ZkSCv/Ji1hNuJEsUBt6bseHC N7+4Qkd9pgp+EzwByiAVF4YllEuin9PWJv4ug69VNra1hkvvEJfS3BKZX3L94gcH 4F1Vom/hsL8Gzv1KZNm7VoXWzF6TgEhXhYOYAg92ri5ktW7jk4aivTo7Tmphwbcv aPd7wzTzR8E9ZXfMKvjvmLEUYH1c4XM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:15 2025 by rpki-client