$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: DslSFJUg7vk3v0aMzu3qZl2hhGbTuFny1xA00Kf7ogU= Subject key identifier: 90:17:A1:4F:F6:A0:7A:0C:C0:84:CC:12:8A:C5:08:58:05:8E:60:7F Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584AE89121DC9467DFE27A1C47C0 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:21:dc:94:67:df:e2:7a:1c:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=19388595-5e34-472f-bd30-529d17a7a777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:7c:e6:bc:18:45:4c:78:d3:84:49:26:c3: ba:4d:f4:a2:ad:e0:c9:7c:0b:5a:b6:55:9d:37:ff: d5:9d:4a:ed:26:eb:40:74:9a:e4:77:db:69:68:f8: 9d:f4:51:59:ab:73:93:59:1a:8e:85:7c:af:67:40: e8:74:f0:c0:0c:05:93:87:2c:de:02:e9:6a:d8:28: eb:7b:ec:11:29:ee:4d:c9:ef:c0:b8:7a:13:7d:5d: 50:25:92:f4:98:6a:88:36:55:c9:96:3a:99:ed:31: d9:a4:4e:d9:80:dd:c3:f8:3b:54:79:42:e8:36:2f: 87:93:25:6e:36:93:1c:60:05:66:dd:0f:81:bb:20: d6:9e:7e:2b:1f:e6:8b:29:e8:42:c7:90:20:34:6a: ea:30:56:9d:49:aa:fe:6a:37:4d:97:c5:fc:1f:25: 34:ac:7d:a1:3f:52:b5:c3:93:6c:7b:e9:2f:67:ca: 1a:d8:8c:cd:b9:0a:05:c3:71:d8:f4:58:9b:cd:33: bb:27:ca:3c:51:55:b3:cf:f5:94:40:68:7e:86:aa: 31:82:b8:f9:17:e5:0d:dc:3a:70:94:4a:5f:52:ab: 62:9b:d9:12:ee:26:97:3b:65:9a:ba:9d:d9:21:a4: 44:2a:76:eb:a5:6b:91:75:13:5c:59:64:8f:fd:52: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:17:A1:4F:F6:A0:7A:0C:C0:84:CC:12:8A:C5:08:58:05:8E:60:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:05:c1:68:a3:41:e6:3e:ba:6f:22:0d:27:af:3a:a0:0f:52: 09:d0:04:36:46:76:c3:c0:f7:3e:b4:07:de:57:46:04:1c:c0: fb:b2:0c:48:51:4b:96:1c:50:68:b3:9a:f5:82:c7:af:79:5b: b4:a2:e5:0d:9b:27:d7:79:56:e4:c1:f1:1d:8d:23:32:4a:fc: 4f:7e:70:d7:54:fa:2e:48:31:d4:81:2e:9f:3d:87:a6:61:73: c4:61:a6:43:7f:bf:95:9d:51:00:25:16:86:f0:de:a6:f1:98: 03:be:84:3f:ed:3d:a0:29:21:05:83:4d:12:6f:fe:b3:d5:fa: 3e:19:c6:9f:0e:0b:34:ec:13:db:16:38:f0:45:ed:be:a2:78: 4b:d3:60:97:ce:66:1a:49:4e:87:eb:6b:5b:39:a5:b2:9a:3c: 83:77:10:6b:ba:af:28:5c:12:0f:d1:d7:59:40:88:15:a0:6e: 58:a6:ca:f6:76:c6:da:b8:84:00:24:cf:15:77:16:d5:e0:33: 73:e0:96:32:93:18:8d:6a:2d:6f:7b:bb:f1:85:8f:ff:58:6f: 15:bb:74:1d:93:d1:7e:61:66:0b:31:a1:9e:28:9d:e3:cd:16: 1b:00:42:b8:f2:98:c8:56:91:2e:66:b3:47:96:e0:1e:b0:62: 4a:2a:ee:0f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErokSHclGff4nocR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MTkzODg1OTUtNWUzNC00NzJmLWJkMzAtNTI5ZDE3YTdhNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgR85rwYRUx404RJJsO6TfSireDJfAtatlWd N//VnUrtJutAdJrkd9tpaPid9FFZq3OTWRqOhXyvZ0DodPDADAWThyzeAulq2Cjr e+wRKe5Nye/AuHoTfV1QJZL0mGqINlXJljqZ7THZpE7ZgN3D+DtUeULoNi+HkyVu NpMcYAVm3Q+BuyDWnn4rH+aLKehCx5AgNGrqMFadSar+ajdNl8X8HyU0rH2hP1K1 w5Nse+kvZ8oa2IzNuQoFw3HY9FibzTO7J8o8UVWzz/WUQGh+hqoxgrj5F+UN3Dpw lEpfUqtim9kS7iaXO2Waup3ZIaREKnbrpWuRdRNcWWSP/VIjNwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJAXoU/2oHoMwITMEorFCFgFjmB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAMFwWijQeY+um8iDSevOqAPUgnQBDZGdsPA 9z60B95XRgQcwPuyDEhRS5YcUGizmvWCx695W7Si5Q2bJ9d5VuTB8R2NIzJK/E9+ cNdU+i5IMdSBLp89h6Zhc8RhpkN/v5WdUQAlFobw3qbxmAO+hD/tPaApIQWDTRJv /rPV+j4Zxp8OCzTsE9sWOPBF7b6ieEvTYJfOZhpJTofra1s5pbKaPIN3EGu6ryhc Eg/R11lAiBWgblimyvZ2xtq4hAAkzxV3FtXgM3PgljKTGI1qLW97u/GFj/9YbxW7 dB2T0X5hZgsxoZ4onePNFhsAQrjymMhWkS5ms0eW4B6wYkoq7g8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:36:17 2025 by rpki-client