$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/520952de-ffd7-3e22-ab10-3e2f4c8675e7.roa File: 520952de-ffd7-3e22-ab10-3e2f4c8675e7.roa (raw, json) Hash identifier: ag4BGtBwBs3YkYWrPv5DKNgNK2sAbVm6UHwFY+/4vrA= Subject key identifier: 07:E4:65:39:D5:63:2D:01:74:6D:40:4E:8F:D1:67:41:FF:A9:E3:9E Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB6471C7DAD2023F43A80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/520952de-ffd7-3e22-ab10-3e2f4c8675e7.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 199.193.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:47:1c:7d:ad:20:23:f4:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=44f36ed0-a7cf-4e7a-a92f-f35d54cb59a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:80:d0:3b:9a:16:a7:97:4c:9a:44:ac:4a: 33:47:6d:2d:f5:ba:aa:df:b5:61:31:2f:e7:ec:60: ec:28:18:4f:04:18:1f:d3:a2:56:6a:6d:91:99:8a: de:30:f5:dc:28:74:cd:c6:f2:27:ee:eb:fe:39:f6: 42:b4:0a:06:22:7e:de:d9:af:82:d1:bf:70:41:b5: 5b:d8:cb:4f:bd:30:5d:9f:8b:71:31:1f:a9:91:ae: 18:1b:e5:90:7f:76:b1:2b:fa:19:9c:e9:e5:7f:4e: 7c:20:c5:02:a5:ed:ea:4c:b1:57:60:30:88:2c:38: f2:b0:74:b9:f1:8e:63:8a:94:78:26:ab:17:b7:c4: 45:10:54:6e:53:5b:b5:39:17:12:06:8c:da:0c:d9: 74:04:87:dd:e7:70:cd:5d:d3:97:9f:2d:2b:e9:67: d7:d5:a1:82:ce:19:26:46:2c:4d:8d:bc:13:69:70: 66:55:af:ab:20:ee:9a:ee:0b:a2:95:30:b2:f9:df: 8e:24:e6:0d:d0:7e:39:21:4c:6b:f4:6e:ac:50:1b: ac:9b:f4:6f:97:00:e7:d9:ba:f9:14:ab:3a:94:a7: c5:bd:e2:d6:b8:54:14:5e:3f:94:04:c6:7c:1b:99: 62:dc:fc:88:16:3b:66:7d:b8:08:2e:71:e8:57:5a: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E4:65:39:D5:63:2D:01:74:6D:40:4E:8F:D1:67:41:FF:A9:E3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/520952de-ffd7-3e22-ab10-3e2f4c8675e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:31:9f:d6:79:1a:52:cc:c5:e9:cb:a9:89:57:60:47:82:e2: 03:a3:94:49:3a:57:0f:54:fc:69:56:22:ec:c9:05:d8:cb:26: 8f:62:77:64:cb:7b:64:39:2f:58:02:ef:70:ea:3a:93:48:d0: b9:be:0e:2a:eb:19:54:0c:56:18:d7:b7:ac:8c:31:ce:7d:52: f3:81:b0:ca:38:ac:b2:5a:fe:4c:ef:40:57:36:2d:20:fe:e6: ca:2a:13:9b:d2:20:b9:e2:b9:6e:98:17:fd:45:1e:54:17:65: e4:99:df:f1:5b:ec:06:f4:ee:fe:13:58:9c:81:2d:06:3c:26: 4b:ba:24:d9:77:fb:9b:91:42:05:6b:f6:3d:26:a1:8a:b7:44: d6:d7:03:f0:cf:6e:fd:25:4b:08:9d:b7:4c:f7:c1:42:e1:98: 66:3f:ed:57:63:eb:39:67:d6:2b:e1:d7:e3:3b:37:30:05:3f: 5d:a9:f7:40:89:6f:83:e8:16:0c:5f:97:60:a2:fd:ee:e5:79: ce:d0:9d:e3:83:17:10:70:c6:a5:b1:72:a9:ff:dc:0c:64:0c: 5c:94:25:c1:e4:57:8e:8b:66:e1:04:18:09:cf:50:4c:36:ee: 44:90:e6:c8:57:9a:6c:83:04:d6:0a:49:7b:a0:18:21:45:04: 71:6d:7e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLZHHH2tICP0OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDRmMzZlZDAtYTdjZi00ZTdhLWE5MmYtZjM1ZDU0Y2I1OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTaA0DuaFqeXTJpErEozR20t9bqq37VhMS/n 7GDsKBhPBBgf06JWam2RmYreMPXcKHTNxvIn7uv+OfZCtAoGIn7e2a+C0b9wQbVb 2MtPvTBdn4txMR+pka4YG+WQf3axK/oZnOnlf058IMUCpe3qTLFXYDCILDjysHS5 8Y5jipR4JqsXt8RFEFRuU1u1ORcSBozaDNl0BIfd53DNXdOXny0r6WfX1aGCzhkm RixNjbwTaXBmVa+rIO6a7guilTCy+d+OJOYN0H45IUxr9G6sUBusm/RvlwDn2br5 FKs6lKfFveLWuFQUXj+UBMZ8G5li3PyIFjtmfbgILnHoV1q9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfkZTnVYy0BdG1ATo/RZ0H/qeOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNTIwOTUyZGUtZmZkNy0z ZTIyLWFiMTAtM2UyZjRjODY3NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIExn9Z5GlLMxenLqYlXYEeC4gOjlEk6Vw9U/GlWIuzJBdjLJo9id2TL e2Q5L1gC73DqOpNI0Lm+DirrGVQMVhjXt6yMMc59UvOBsMo4rLJa/kzvQFc2LSD+ 5soqE5vSILniuW6YF/1FHlQXZeSZ3/Fb7Ab07v4TWJyBLQY8Jku6JNl3+5uRQgVr 9j0moYq3RNbXA/DPbv0lSwidt0z3wULhmGY/7Vdj6zln1ivh1+M7NzAFP12p90CJ b4PoFgxfl2Ci/e7lec7QneODFxBwxqWxcqn/3AxkDFyUJcHkV46LZuEEGAnPUEw2 7kSQ5shXmmyDBNYKSXugGCFFBHFtfk0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:37 2025 by rpki-client