$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json) Hash identifier: +2v1NgDmZdXA5AmTHlEvdolAG7Ul4enWjnhpj1VxwR4= Subject key identifier: D9:0D:93:39:72:30:A0:D2:2D:98:1C:9F:13:BA:BE:F1:FB:AD:7B:A2 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584B2A2C26C979C5B60D587D39C0 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:26:c9:79:c5:b6:0d:58:7d:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=abed393e-0d5e-4db8-bde2-b5fa133bcda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:22:a7:6c:f5:31:94:ff:54:3b:9e:c6:f3: 2b:66:9b:1c:78:76:56:06:75:9c:4b:11:e2:bb:4d: 8c:93:03:1e:3b:4f:09:7a:1e:2e:b6:97:60:86:d7: af:e4:3d:c8:66:5f:06:64:a5:ef:5f:63:19:ce:b9: a5:33:a4:4d:2c:06:bf:ed:12:8f:48:0f:db:4e:90: bc:81:5d:8e:c4:21:b4:eb:e4:3e:34:bf:45:3a:f0: fa:8c:13:b2:cc:58:e2:c3:b7:a0:1b:b0:9d:c1:7d: 10:62:92:d4:60:69:b2:34:0f:3b:02:2b:ed:d1:8c: 9f:60:a5:26:1a:99:42:90:46:1f:96:0b:37:e9:64: ab:27:b5:9d:17:fb:78:75:f0:3e:ba:21:6f:0e:b2: 3d:a6:14:ca:b9:5c:d0:e1:52:11:d0:65:eb:6f:ec: d9:92:64:ed:be:75:d7:c4:01:64:d6:a0:a6:7f:79: e6:18:b0:68:fa:74:60:66:02:8a:14:39:b4:dd:f9: d5:99:8e:1e:e4:0f:e7:3d:09:f4:dd:f9:a5:6c:1a: 16:b5:97:2b:c5:cc:31:5c:96:6e:61:60:27:c7:a2: 71:d2:32:38:35:3b:c9:d0:ac:cd:b3:ca:62:0c:7c: 38:45:14:44:0b:64:79:6b:ac:12:2c:be:11:b6:17: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:93:39:72:30:A0:D2:2D:98:1C:9F:13:BA:BE:F1:FB:AD:7B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:54:0a:03:c9:3f:c0:33:72:d8:7f:ac:dd:86:37:cb:75:2f: 1c:e7:cf:c1:c9:36:32:1b:9c:f4:e9:03:de:ab:c7:43:a3:93: 73:e5:f8:47:69:cf:e9:39:c1:2d:a3:d8:c8:73:b6:ff:7b:75: 53:51:16:45:8e:b7:3f:76:8d:b9:e6:fb:e8:da:ab:c7:f8:0b: 81:8d:8a:35:b5:d1:c0:a0:09:cb:c0:1b:60:19:d4:70:a6:d6: 4c:32:4c:c8:3d:50:75:3e:12:d8:6d:bb:e2:82:ae:f8:03:ff: 43:a9:2d:78:81:50:62:71:d7:51:84:8c:32:fb:0d:08:57:e0: 9c:ab:ac:d9:3c:36:68:a9:57:b3:43:93:6c:f6:c1:e9:36:49: a7:16:58:8a:38:7b:0a:4a:15:6c:b6:e2:50:3e:de:81:51:f6: 30:e7:e2:1e:90:50:9d:bf:13:51:0f:91:bd:19:1d:0d:a0:83: 08:08:59:d2:f1:91:9b:35:1a:9b:19:07:22:84:66:77:f2:40: 1e:a4:19:7d:29:69:2f:15:46:da:e7:d5:0f:90:67:c9:45:64: a3:08:cf:d1:c8:c1:69:fc:1f:ba:74:da:ea:0a:77:0a:70:cf: 44:c2:42:20:1f:74:fe:45:25:f2:e1:f7:5e:f5:30:3d:0b:e7: 98:16:0a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCbJecW2DVh9OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YWJlZDM5M2UtMGQ1ZS00ZGI4LWJkZTItYjVmYTEzM2JjZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4gip2z1MZT/VDuexvMrZpsceHZWBnWcSxHi u02MkwMeO08Jeh4utpdghtev5D3IZl8GZKXvX2MZzrmlM6RNLAa/7RKPSA/bTpC8 gV2OxCG06+Q+NL9FOvD6jBOyzFjiw7egG7CdwX0QYpLUYGmyNA87Aivt0YyfYKUm GplCkEYflgs36WSrJ7WdF/t4dfA+uiFvDrI9phTKuVzQ4VIR0GXrb+zZkmTtvnXX xAFk1qCmf3nmGLBo+nRgZgKKFDm03fnVmY4e5A/nPQn03fmlbBoWtZcrxcwxXJZu YWAnx6Jx0jI4NTvJ0KzNs8piDHw4RRREC2R5a6wSLL4RthdzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkNkzlyMKDSLZgcnxO6vvH7rXuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvY2E5NDM3YWItM2I0Ny0z YjI4LTliNzEtYjdmNGU0MjEzNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhUCgPJP8Azcth/rN2GN8t1Lxznz8HJNjIbnPTpA96rx0Ojk3Pl+Edp z+k5wS2j2Mhztv97dVNRFkWOtz92jbnm++jaq8f4C4GNijW10cCgCcvAG2AZ1HCm 1kwyTMg9UHU+Ethtu+KCrvgD/0OpLXiBUGJx11GEjDL7DQhX4JyrrNk8NmipV7ND k2z2wek2SacWWIo4ewpKFWy24lA+3oFR9jDn4h6QUJ2/E1EPkb0ZHQ2ggwgIWdLx kZs1GpsZByKEZnfyQB6kGX0paS8VRtrn1Q+QZ8lFZKMIz9HIwWn8H7p02uoKdwpw z0TCQiAfdP5FJfLh9171MD0L55gWCtw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:28 2025 by rpki-client