$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: UqKeoRmZXmWoIQesAvopfTrS167PwLlgVdVDaBtzZzY= Subject key identifier: 70:C2:65:54:74:AB:CA:89:CE:A7:9E:81:E1:41:2D:E8:6D:5E:BA:AC Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584AECC1226BC2345D0FEE323560 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:22:6b:c2:34:5d:0f:ee:32:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a879dfa4-2d7c-4e60-852c-414546c4c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:77:62:40:62:87:26:60:72:3c:9e:93:88: 79:c0:7e:80:ab:25:ca:15:4b:76:8d:2a:bd:11:6c: ed:09:4e:7d:9c:a1:31:ee:cf:e6:90:60:6b:26:78: e2:e3:53:1c:bd:fc:6f:92:6d:e7:3a:f2:ed:f2:82: 88:f5:e3:31:59:38:63:3e:10:98:04:af:4f:a0:71: 5a:84:36:c5:a0:65:f2:39:48:97:91:10:8c:a2:9e: ae:03:a2:fa:46:bb:5a:f6:1d:62:a4:c2:c4:c4:a8: c5:fe:8b:cd:66:e8:44:89:59:3f:4c:fb:51:aa:92: 79:23:73:c4:b4:37:1d:bd:a4:42:90:3e:f7:b2:4f: 8b:30:20:28:74:ef:3d:95:04:9b:19:33:40:55:15: 02:26:f1:22:9f:c9:3c:44:f3:29:9d:16:9b:87:36: 8c:4f:50:ee:4c:b9:12:81:8b:32:03:52:d5:53:a8: a2:61:46:61:7b:03:a8:a8:fb:f4:16:8e:72:cf:63: 32:a2:e2:b7:0b:02:84:a7:e4:2a:31:3e:cf:2e:0e: eb:e7:94:e9:cf:a1:b2:ae:68:9b:0c:05:c0:fe:7b: b2:81:00:3a:72:eb:5d:c1:8f:c4:6b:1d:a6:b6:9f: 1e:55:e0:b3:2d:e9:61:58:f5:3b:3d:6f:3f:3f:1c: ed:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:65:54:74:AB:CA:89:CE:A7:9E:81:E1:41:2D:E8:6D:5E:BA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:d1:77:e8:90:3d:92:30:97:4e:8b:6c:9e:a8:44:ed:cc: 86:33:4f:e5:cd:b3:50:b1:45:37:6f:69:5c:ba:d2:42:a5:a9: c7:f7:95:63:86:ba:fb:d0:f2:32:31:e5:48:ab:3f:59:1f:0c: d7:b9:cd:51:dd:b6:a0:62:ab:aa:c1:61:46:f4:22:3b:df:ee: 2e:60:7c:c8:6e:fa:06:7e:93:b0:0c:ec:5f:ba:0c:0c:a6:f5: 21:e4:86:13:45:a4:d3:33:85:f7:7b:6b:a4:e7:3c:8a:6e:bb: 3f:ce:f3:9d:00:0e:1d:3d:56:62:96:9f:ce:b0:10:31:a4:fa: 72:11:01:49:b4:48:6f:c9:17:e7:56:1b:70:c2:ac:94:d7:7e: 91:7f:47:e6:82:65:19:98:5e:03:9d:2b:9b:6f:ee:1c:3d:af: 61:04:45:f5:f7:d3:9b:98:5c:f8:a0:3a:0d:fe:f0:f1:cd:42: 52:39:f0:6c:fb:a6:b1:52:0f:e0:e8:5c:ea:ff:19:df:e9:76: 88:32:a6:3e:8d:73:34:74:60:52:ed:86:ca:0b:74:28:f0:89: 63:64:26:ad:f5:6f:7e:dd:36:cd:24:e1:18:ea:e7:25:87:23: b1:f6:df:d4:f9:3f:6c:62:07:6b:84:09:a8:ce:f4:45:76:56: df:71:32:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSJrwjRdD+4yNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTg3OWRmYTQtMmQ3Yy00ZTYwLTg1MmMtNDE0NTQ2YzRjOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yZ3YkBihyZgcjyek4h5wH6AqyXKFUt2jSq9 EWztCU59nKEx7s/mkGBrJnji41Mcvfxvkm3nOvLt8oKI9eMxWThjPhCYBK9PoHFa hDbFoGXyOUiXkRCMop6uA6L6Rrta9h1ipMLExKjF/ovNZuhEiVk/TPtRqpJ5I3PE tDcdvaRCkD73sk+LMCAodO89lQSbGTNAVRUCJvEin8k8RPMpnRabhzaMT1DuTLkS gYsyA1LVU6iiYUZhewOoqPv0Fo5yz2MyouK3CwKEp+QqMT7PLg7r55Tpz6Gyrmib DAXA/nuygQA6cutdwY/Eax2mtp8eVeCzLelhWPU7PW8/PxztGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDCZVR0q8qJzqeegeFBLehtXrqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFF0XfokD2SMJdOi2yeqETtzIYzT+XNs1CxRTdvaVy60kKlqcf3lWOG uvvQ8jIx5UirP1kfDNe5zVHdtqBiq6rBYUb0Ijvf7i5gfMhu+gZ+k7AM7F+6DAym 9SHkhhNFpNMzhfd7a6TnPIpuuz/O850ADh09VmKWn86wEDGk+nIRAUm0SG/JF+dW G3DCrJTXfpF/R+aCZRmYXgOdK5tv7hw9r2EERfX305uYXPigOg3+8PHNQlI58Gz7 prFSD+DoXOr/Gd/pdogypj6NczR0YFLthsoLdCjwiWNkJq31b37dNs0k4Rjq5yWH I7H239T5P2xiB2uECajO9EV2Vt9xMrE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:34 2025 by rpki-client