$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa File: 012bce04-c29f-38f8-9f97-3ab6b1af1180.roa (raw, json) Hash identifier: 0OqGy5SliFG9HE5cXcBs0BFnlDU+2zRk0Q2395NdHlw= Subject key identifier: AB:40:2B:F9:9A:AC:46:85:9C:86:64:1B:52:C6:C5:EB:49:E0:FC:77 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B6631F15E3D7E12CB188D8B00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 22885 IP address blocks: 199.0.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f1:5e:3d:7e:12:cb:18:8d:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=c4c6a934-d6da-4e08-b115-b33d37789207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:c2:49:3d:77:0c:64:2e:65:39:77:c9:6a: 7f:36:26:3a:ee:43:7a:6f:42:47:34:1d:30:10:a0: 7b:0d:0b:27:cf:e6:b2:7d:1a:e7:82:36:a3:c0:dd: 80:2a:0d:1b:49:0e:b1:21:28:49:0f:2d:22:89:ec: a4:73:23:70:3c:61:35:10:51:47:a3:20:7e:ce:70: 95:a5:1a:dc:9f:1f:72:ae:2b:58:5f:f3:6a:45:bd: 95:3f:51:f1:81:31:6a:04:f2:df:a8:48:95:c2:fe: 09:bf:87:78:4c:96:ed:a3:9a:81:5f:86:64:1d:5b: 4e:42:8f:6b:1c:9d:05:a1:93:1b:21:40:69:b5:c3: 82:9e:80:c3:ce:4c:81:9b:b5:c5:80:e5:27:07:27: 79:cb:91:74:75:17:f5:a7:6e:93:74:2e:d9:c1:82: 73:da:54:ea:5f:80:a2:32:5d:f0:07:cc:f2:4b:a5: f1:19:4c:23:8d:7e:12:d8:5c:4c:22:28:b9:67:fc: 75:9f:62:b1:9c:0b:05:2a:1b:bd:3f:86:e5:32:78: 27:e2:ee:6e:b3:51:17:1b:8f:95:55:a0:f7:f3:a3: b2:ff:e7:88:5e:f5:ef:f8:91:01:75:dc:9f:a7:49: 0f:63:4e:eb:4d:cd:f1:f9:cd:0c:f5:10:58:4f:1c: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:40:2B:F9:9A:AC:46:85:9C:86:64:1B:52:C6:C5:EB:49:E0:FC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:df:90:7d:9f:a4:c1:8f:8b:ed:41:61:ca:15:02:45:29:cf: ff:d4:4d:7d:1a:43:dd:ef:a5:3e:e1:67:92:58:71:50:b8:e8: 97:61:1a:38:d8:2e:79:e4:55:a2:db:3e:3b:6c:01:34:d4:1f: 1c:c7:91:08:8e:f0:68:89:f1:97:f5:fd:94:8f:56:12:a4:97: 50:f7:ef:55:e6:50:76:26:29:90:24:37:6a:2f:1d:65:56:95: 15:5d:26:62:d5:f4:61:71:c2:35:50:f8:5e:ef:ef:ae:c0:b9: 25:c4:3b:37:ba:e8:4c:94:92:cc:c5:c0:67:c7:7d:fa:fc:d0: 9b:95:34:cf:4f:19:b3:10:1d:fe:82:88:18:8f:b8:1b:1e:80: fd:b8:a6:3a:9d:7f:87:a6:eb:af:77:ff:fb:47:17:67:65:60: 86:b3:8f:ca:44:56:68:57:f5:dd:7f:9d:76:2b:f9:e2:85:6a: 20:1c:ae:49:2d:8e:24:b2:50:8a:d9:f8:68:aa:46:da:94:0e: 9b:f4:39:e9:4a:be:df:d1:06:e3:0a:61:94:8c:a9:2c:d2:5f: a4:4d:b3:a0:c3:79:86:b9:60:32:f0:1a:dd:68:59:8d:1b:4e: 78:d3:de:d3:e5:dc:2e:cc:f8:93:6c:23:bb:b5:62:a8:81:e1: d0:d7:0d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfFePX4SyxiNiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YzRjNmE5MzQtZDZkYS00ZTA4LWIxMTUtYjMzZDM3Nzg5MjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT7CST13DGQuZTl3yWp/NiY67kN6b0JHNB0w EKB7DQsnz+ayfRrngjajwN2AKg0bSQ6xIShJDy0iieykcyNwPGE1EFFHoyB+znCV pRrcnx9yritYX/NqRb2VP1HxgTFqBPLfqEiVwv4Jv4d4TJbto5qBX4ZkHVtOQo9r HJ0FoZMbIUBptcOCnoDDzkyBm7XFgOUnByd5y5F0dRf1p26TdC7ZwYJz2lTqX4Ci Ml3wB8zyS6XxGUwjjX4S2FxMIii5Z/x1n2KxnAsFKhu9P4blMngn4u5us1EXG4+V VaD386Oy/+eIXvXv+JEBddyfp0kPY07rTc3x+c0M9RBYTxxmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtAK/marEaFnIZkG1LGxetJ4Px3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDEyYmNlMDQtYzI5Zi0z OGY4LTlmOTctM2FiNmIxYWYxMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJffkH2fpMGPi+1BYcoVAkUpz//UTX0aQ93vpT7hZ5JYcVC46JdhGjjY LnnkVaLbPjtsATTUHxzHkQiO8GiJ8Zf1/ZSPVhKkl1D371XmUHYmKZAkN2ovHWVW lRVdJmLV9GFxwjVQ+F7v767AuSXEOze66EyUkszFwGfHffr80JuVNM9PGbMQHf6C iBiPuBsegP24pjqdf4em6693//tHF2dlYIazj8pEVmhX9d1/nXYr+eKFaiAcrkkt jiSyUIrZ+GiqRtqUDpv0OelKvt/RBuMKYZSMqSzSX6RNs6DDeYa5YDLwGt1oWY0b TnjT3tPl3C7M+JNsI7u1YqiB4dDXDd4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:49:21 2025 by rpki-client