$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/227c8d52-247f-37b6-9d41-50ac071e4047.roa File: 227c8d52-247f-37b6-9d41-50ac071e4047.roa (raw, json) Hash identifier: 3Jj9BOAWfDk+b+SXLW1i9XpJVydYfHleqk8YGzWpYxE= Subject key identifier: 8B:31:71:C2:FE:F5:CA:C1:1C:E8:20:6C:D7:E5:02:F0:6A:B3:AA:B6 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584BA0D25CF8813E3E5EDDC2EE40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/227c8d52-247f-37b6-9d41-50ac071e4047.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 6649 IP address blocks: 199.193.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:f8:81:3e:3e:5e:dd:c2:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=91a43734-a6f0-4db9-bf04-3d3fc3804436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:64:cb:46:9b:c2:fa:2b:89:94:6c:4c:91: e4:c1:2b:5a:64:f1:72:f8:3b:fa:2a:12:44:69:e9: 16:dc:69:2b:3d:75:63:8c:92:5c:65:5c:e8:1a:30: af:f8:9e:13:03:82:8f:d6:7e:33:b2:0f:6c:21:48: 20:3e:8e:69:a9:f1:8e:74:bd:ee:75:82:29:16:42: 16:64:0d:37:b4:e0:5e:23:dc:77:6e:97:b2:12:c8: a0:69:c9:62:83:7b:f3:63:4c:49:27:7b:0d:b2:13: ba:97:2a:33:74:24:12:e0:26:0a:ad:51:24:34:17: af:a5:5c:8c:58:3c:9b:33:17:95:b8:15:bd:5c:88: a0:97:bc:31:86:76:27:6c:31:c5:7d:99:63:f4:ce: f2:c0:ca:b9:44:67:7e:30:ce:83:63:5b:75:c6:bd: cd:90:b9:43:5f:7d:0b:0b:3a:93:bf:26:78:14:28: 27:6e:66:f8:89:e0:14:86:fd:33:7a:e4:4b:03:40: 42:b8:4e:6f:24:8a:f2:b5:59:0d:1b:54:df:95:43: 99:1c:a1:fa:5a:65:e7:b2:e3:96:56:8f:38:15:0e: f3:86:af:22:3e:27:86:87:80:ea:6c:00:10:83:d8: 20:69:9f:39:8b:14:91:93:f2:6c:35:3e:d8:36:e3: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:31:71:C2:FE:F5:CA:C1:1C:E8:20:6C:D7:E5:02:F0:6A:B3:AA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/227c8d52-247f-37b6-9d41-50ac071e4047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fa:b8:ec:f3:18:58:82:67:db:8f:8c:fe:61:5e:90:6d:cb: 8c:4d:92:30:d2:f4:b8:3f:21:bb:7d:7a:ae:cc:f4:57:52:ab: 3e:f7:37:b3:61:69:4f:2f:b6:df:fe:a3:29:27:d4:02:fa:af: 6e:07:2a:6e:10:c2:55:42:8a:c8:98:15:8c:cf:43:6b:63:00: 91:da:6d:1c:b5:1d:48:3d:9c:9f:fc:79:c9:38:3b:c4:c9:8c: 5c:ca:59:10:09:2e:34:8d:99:dd:e5:39:cb:58:22:45:23:c2: 4a:a2:9e:89:c1:e4:58:21:4c:8f:62:13:1e:f1:fa:d8:a0:b2: bf:9e:a6:8a:f4:11:e7:19:17:f3:ab:bf:eb:f4:1a:c4:2a:17: c6:fe:fa:b9:cf:2d:5d:2a:08:6d:2c:71:11:df:2f:24:bf:89: a1:59:cc:2d:6b:22:0d:16:55:e7:b3:51:1e:81:6f:e9:8c:e6: 3c:dc:d0:e7:0a:aa:82:f3:60:57:c8:66:94:ec:43:2f:a2:e5: 0e:f7:07:d9:e1:95:0e:8c:42:79:0b:e1:8d:dc:43:e8:56:4c: ca:f6:24:eb:9e:bf:70:55:84:9a:63:aa:b5:94:07:72:9a:9b: 40:ac:72:6f:52:56:fa:77:f7:b8:1d:88:cb:3e:b7:88:7d:21: 8e:cb:63:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lz4gT4+Xt3C7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTFhNDM3MzQtYTZmMC00ZGI5LWJmMDQtM2QzZmMzODA0NDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIhky0abwvoriZRsTJHkwStaZPFy+Dv6KhJE aekW3GkrPXVjjJJcZVzoGjCv+J4TA4KP1n4zsg9sIUggPo5pqfGOdL3udYIpFkIW ZA03tOBeI9x3bpeyEsigaclig3vzY0xJJ3sNshO6lyozdCQS4CYKrVEkNBevpVyM WDybMxeVuBW9XIigl7wxhnYnbDHFfZlj9M7ywMq5RGd+MM6DY1t1xr3NkLlDX30L CzqTvyZ4FCgnbmb4ieAUhv0zeuRLA0BCuE5vJIrytVkNG1TflUOZHKH6WmXnsuOW Vo84FQ7zhq8iPieGh4DqbAAQg9ggaZ85ixSRk/JsNT7YNuPmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsxccL+9crBHOggbNflAvBqs6q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMjI3YzhkNTItMjQ3Zi0z N2I2LTlkNDEtNTBhYzA3MWU0MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv6uOzzGFiCZ9uPjP5hXpBty4xNkjDS9Lg/Ibt9eq7M9FdSqz73N7Nh aU8vtt/+oykn1AL6r24HKm4QwlVCisiYFYzPQ2tjAJHabRy1HUg9nJ/8eck4O8TJ jFzKWRAJLjSNmd3lOctYIkUjwkqinonB5FghTI9iEx7x+tigsr+epor0EecZF/Or v+v0GsQqF8b++rnPLV0qCG0scRHfLyS/iaFZzC1rIg0WVeezUR6Bb+mM5jzc0OcK qoLzYFfIZpTsQy+i5Q73B9nhlQ6MQnkL4Y3cQ+hWTMr2JOuev3BVhJpjqrWUB3Ka m0Cscm9SVvp397gdiMs+t4h9IY7LY0g= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:23 2025 by rpki-client