$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa File: 0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa (raw, json) Hash identifier: N+IH5yHOM7dlKyG4RsmGzvE0iKwOjgdBTYwVHkiXJd8= Subject key identifier: 9C:FD:40:1A:F9:15:BB:9E:7D:48:61:77:CD:CF:EC:6C:F7:37:9F:54 Certificate issuer: /CN=4d2714ea-5618-446b-8e12-7743856af6e6 Certificate serial: 010D0C9F4328584B2FC19A12C9445736C9699E00 Authority key identifier: 52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 174 IP address blocks: 199.67.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:9a:12:c9:44:57:36:c9:69:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2714ea-5618-446b-8e12-7743856af6e6 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=9d4be9af-ceb9-4ce8-a3f3-d05b566c32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:df:e7:5a:ab:56:d2:0f:c3:1e:64:5e:93: c0:15:98:9a:81:ff:0a:45:c1:76:8d:ea:4d:a2:1e: 30:df:48:89:52:30:4f:f7:21:98:41:cb:81:87:c3: 97:69:51:3c:bd:c9:81:b7:8c:7a:70:18:4e:af:1f: 83:61:c2:6b:9b:5d:cc:7d:94:62:d8:b7:f3:57:44: bb:80:46:65:87:68:29:16:4c:a5:79:d4:b2:d3:f8: 1d:8c:e5:99:e1:5b:6c:82:40:2a:9e:f9:98:31:f1: 64:9e:65:6c:d3:4b:33:fe:05:b0:b7:f7:a5:8b:a5: b2:36:41:63:48:43:82:63:e4:e7:59:11:e7:c7:5a: 4c:9c:d1:49:0a:4a:39:65:ad:47:8d:1e:d8:33:e1: 81:ee:d5:9e:ff:14:99:19:2e:69:b6:51:b0:67:77: 63:21:53:a3:e2:8f:6d:60:a5:13:4b:5f:12:d1:ea: 22:25:f1:14:ed:77:1f:a3:18:54:4e:2a:2e:d9:fe: f2:73:c1:be:96:ad:14:05:2d:4f:19:3a:46:6d:0e: ae:9f:1c:ea:57:19:b1:5d:13:4a:85:33:01:cf:86: 25:1c:26:0a:91:63:24:e5:68:cb:64:0b:ce:aa:3c: 4e:30:12:af:94:cb:57:45:32:45:af:c5:58:5c:50: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:40:1A:F9:15:BB:9E:7D:48:61:77:CD:CF:EC:6C:F7:37:9F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl X509v3 Authority Key Identifier: keyid:52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer sbgp-ipAddrBlock: critical IPv4: 199.67.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8f:49:7b:32:59:d1:66:d5:d2:89:9a:74:dd:10:31:80:75: bb:1d:df:07:dc:76:fd:25:16:47:fd:28:dd:16:73:7b:4d:99: da:cf:ca:57:c6:52:c0:7f:42:6c:da:09:21:d7:3c:8e:82:a0: 23:b5:25:a6:5d:26:ff:28:6c:b5:09:1e:3f:9b:60:28:76:b2: a5:d5:8a:73:a7:d8:98:97:5c:4b:5d:7b:54:e8:7c:3d:73:c3: d5:40:6c:bd:4b:58:53:30:8c:7e:69:b3:1a:15:b7:f5:5b:31: a0:04:9f:f8:db:df:9d:c2:c6:ab:29:30:1c:f7:34:6e:60:78: 49:66:c7:7c:0f:8e:b6:bc:10:36:7e:04:46:8f:a4:cb:82:fe: e3:65:99:87:60:ca:51:b9:ae:f3:f7:3d:80:51:cb:78:5a:ea: cc:55:35:12:bd:f2:3f:58:99:8c:5f:93:33:66:35:e6:f6:ba: 96:60:d9:a1:22:87:0f:4d:33:87:00:06:f3:49:b9:04:3a:45: c7:75:ca:a3:1a:d6:a6:b7:2d:ec:71:7a:ce:67:e2:a8:c5:14: a6:62:a7:01:ad:32:ec:95:0c:46:96:ce:77:d1:7b:09:a1:8e: b5:2c:1f:32:ca:87:64:fd:e8:66:7f:dc:7b:e6:1c:b1:d5:09: e2:ae:f8:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZoSyURXNslpngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyNzE0ZWEtNTYxOC00NDZiLThlMTItNzc0Mzg1NmFm NmU2MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OWQ0YmU5YWYtY2ViOS00Y2U4LWEzZjMtZDA1YjU2NmMzMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiff51qrVtIPwx5kXpPAFZiagf8KRcF2jepN oh4w30iJUjBP9yGYQcuBh8OXaVE8vcmBt4x6cBhOrx+DYcJrm13MfZRi2LfzV0S7 gEZlh2gpFkyledSy0/gdjOWZ4VtsgkAqnvmYMfFknmVs00sz/gWwt/eli6WyNkFj SEOCY+TnWRHnx1pMnNFJCko5Za1HjR7YM+GB7tWe/xSZGS5ptlGwZ3djIVOj4o9t YKUTS18S0eoiJfEU7XcfoxhUTiou2f7yc8G+lq0UBS1PGTpGbQ6unxzqVxmxXRNK hTMBz4YlHCYKkWMk5WjLZAvOqjxOMBKvlMtXRTJFr8VYXFDKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz9QBr5FbuefUhhd83P7Gz3N59UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3 MTRlYS01NjE4LTQ0NmItOGUxMi03NzQzODU2YWY2ZTYvMGIyY2I5Y2MtYWE5Ni0z NWMxLWI1NTAtNmE0NzdlNmVmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQyNzE0ZWEtNTYxOC00NDZiLThl MTItNzc0Mzg1NmFmNmU2LzRkMjcxNGVhLTU2MTgtNDQ2Yi04ZTEyLTc3NDM4NTZh ZjZlNi5jcmwwHwYDVR0jBBgwFoAUUmJ6vasNUe3/bLp+LjclbXZAwwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3MTRlYS01NjE4LTQ0NmItOGUxMi03NzQz ODU2YWY2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx0NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6PSXsyWdFm1dKJmnTdEDGAdbsd3wfcdv0lFkf9KN0Wc3tNmdrPylfG UsB/QmzaCSHXPI6CoCO1JaZdJv8obLUJHj+bYCh2sqXVinOn2JiXXEtde1TofD1z w9VAbL1LWFMwjH5psxoVt/VbMaAEn/jb353CxqspMBz3NG5geElmx3wPjra8EDZ+ BEaPpMuC/uNlmYdgylG5rvP3PYBRy3ha6sxVNRK98j9YmYxfkzNmNeb2upZg2aEi hw9NM4cABvNJuQQ6Rcd1yqMa1qa3Lexxes5n4qjFFKZipwGtMuyVDEaWznfRewmh jrUsHzLKh2T96GZ/3HvmHLHVCeKu+Kw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:41 2025 by rpki-client