$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa File: cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa (raw, json) Hash identifier: 0AXFnh4ukHlxhsK+3mLhmKqF4MHF+L2oBGXlmZ1mMmg= Subject key identifier: CC:86:03:54:28:85:22:D7:9E:F7:CA:F4:5C:44:3D:60:68:55:89:45 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584B0A116A782CE5EBED072CDF20 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 26196 IP address blocks: 199.47.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6a:78:2c:e5:eb:ed:07:2c:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=33c7540d-4a3a-4248-8a29-4522ec1b18f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:67:57:3c:54:d2:55:b0:61:fa:d2:44:8d: 59:4e:e4:cb:69:59:d1:bc:59:fc:13:d5:45:63:bc: 5c:36:44:99:87:20:8d:ae:31:60:49:4b:08:86:43: 54:02:59:92:b8:15:4c:bc:f9:7a:88:ff:4b:fd:52: 66:04:86:67:04:d1:36:7d:51:7c:ec:58:13:11:bc: e9:28:b5:4b:bc:57:8c:78:f0:fd:58:82:d2:af:71: 11:6e:ea:8a:dd:22:c8:8e:14:98:fb:63:fc:95:5b: 16:48:bc:e7:45:1b:5f:7e:72:b4:7d:09:89:5c:ae: 01:88:c4:17:ee:93:15:52:48:f9:95:92:59:0c:a6: bb:b1:83:a5:da:c7:cb:2e:40:29:e8:4e:3c:23:b3: db:ba:c3:ed:81:cf:e9:e8:02:cc:70:98:f6:15:43: 7a:84:f3:55:92:37:8a:89:dd:15:8f:bd:3d:6c:f1: a9:7c:33:74:df:95:9d:7b:a1:4a:0b:00:41:dd:53: 80:6b:36:e8:83:bc:41:f0:7e:43:c5:c1:89:e8:05: 77:63:cc:d8:5c:b0:45:88:59:3b:02:13:11:30:80: ab:93:7d:01:8f:eb:c1:fb:f1:b5:25:ae:71:82:6e: 6d:4a:6d:3c:d3:06:f2:47:3f:aa:2e:89:68:d3:45: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:03:54:28:85:22:D7:9E:F7:CA:F4:5C:44:3D:60:68:55:89:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.47.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:13:ea:16:26:48:9e:8a:5e:d1:43:37:68:ec:bf:d4:3c:c4: 90:a7:0e:e8:99:ea:fc:5e:a4:db:8b:62:9a:c5:65:4a:1a:a8: b0:8b:66:dc:38:13:8a:07:ef:ff:d8:39:40:64:9a:a0:cb:ac: 0c:65:bb:b6:98:f4:d5:a2:c0:eb:48:b6:c2:0c:04:28:7a:be: 51:c3:6c:3d:6f:00:27:45:53:ea:be:dd:07:38:fb:b7:16:8e: 15:01:1d:90:7f:6d:ee:13:1c:a9:3d:c3:b9:48:83:db:0f:7d: 4a:88:cd:46:6d:de:9d:57:85:3e:da:d6:87:9c:20:06:75:84: 8a:9d:b6:bd:3f:03:28:6a:45:cb:7b:d4:5b:70:b9:45:41:fc: cd:32:4f:af:5c:5f:fa:9d:19:fc:d2:e1:74:db:f2:08:00:0b: c7:25:1b:24:65:43:05:6e:cb:f5:84:d2:f4:3a:8f:29:8e:bc: a8:68:ff:aa:fb:46:a9:4e:ec:c4:bd:94:27:88:62:a4:ba:0c: 04:e8:b1:ba:77:f0:52:f6:a8:53:d1:c0:45:af:80:33:c8:97: 53:ea:d1:97:17:86:4a:3f:2e:e9:e8:b3:e4:f9:1b:b7:d5:78: 89:f1:85:c3:36:4b:44:66:ca:26:92:c1:e9:b9:98:c2:ed:7f: fe:4a:bb:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWp4LOXr7Qcs3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MzNjNzU0MGQtNGEzYS00MjQ4LThhMjktNDUyMmVjMWIxOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+RnVzxU0lWwYfrSRI1ZTuTLaVnRvFn8E9VF Y7xcNkSZhyCNrjFgSUsIhkNUAlmSuBVMvPl6iP9L/VJmBIZnBNE2fVF87FgTEbzp KLVLvFeMePD9WILSr3ERbuqK3SLIjhSY+2P8lVsWSLznRRtffnK0fQmJXK4BiMQX 7pMVUkj5lZJZDKa7sYOl2sfLLkAp6E48I7PbusPtgc/p6ALMcJj2FUN6hPNVkjeK id0Vj709bPGpfDN035Wde6FKCwBB3VOAazbog7xB8H5DxcGJ6AV3Y8zYXLBFiFk7 AhMRMICrk30Bj+vB+/G1Ja5xgm5tSm080wbyRz+qLolo00W7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyGA1QohSLXnvfK9FxEPWBoVYlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvY2I0OGRhMGYtOTFhNy0z ZmY1LTljMGItNTE0Y2I0MmZkZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcT6hYmSJ6KXtFDN2jsv9Q8xJCnDuiZ6vxepNuLYprFZUoaqLCLZtw4 E4oH7//YOUBkmqDLrAxlu7aY9NWiwOtItsIMBCh6vlHDbD1vACdFU+q+3Qc4+7cW jhUBHZB/be4THKk9w7lIg9sPfUqIzUZt3p1XhT7a1oecIAZ1hIqdtr0/AyhqRct7 1FtwuUVB/M0yT69cX/qdGfzS4XTb8ggAC8clGyRlQwVuy/WE0vQ6jymOvKho/6r7 RqlO7MS9lCeIYqS6DATosbp38FL2qFPRwEWvgDPIl1Pq0ZcXhko/Lunos+T5G7fV eInxhcM2S0RmyiaSwem5mMLtf/5Ku0M= -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:28 2025 by rpki-client