$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa File: 6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa (raw, json) Hash identifier: KzlVUEAUkfTSfpx1FLj9Ex1/rVoGJpqapS/oKahWV3Y= Subject key identifier: EE:81:E8:2F:2D:42:07:9B:CD:8F:21:0C:AF:A1:52:5F:F5:31:EA:9B Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A857600F2B226D45E8535E100 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 25961 IP address blocks: 199.91.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:00:f2:b2:26:d4:5e:85:35:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=88e2cd94-e064-411d-8b43-14bd5f938414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:72:2a:c9:f3:90:d2:5e:d4:9c:55:f6:f9: 83:4f:a4:0d:aa:d5:bc:30:a2:f0:71:08:c0:5c:36: e0:27:9a:ec:31:99:55:f4:bc:72:bd:11:1d:f1:92: 38:28:98:79:5b:61:e0:10:42:8d:be:ed:e6:62:33: a2:b6:2b:1e:17:ad:83:04:75:bf:cf:a7:d6:6e:6d: a5:09:ad:e6:f9:35:31:61:73:59:02:bd:6e:76:a7: 80:46:2a:70:a2:45:89:0e:ba:78:fb:26:99:92:17: 98:d2:9c:c3:a6:40:8f:de:d0:44:ae:72:39:17:8e: ec:61:a6:86:ce:7e:9c:3b:4c:72:36:62:d1:02:60: a1:92:e4:54:9c:7c:50:40:62:ea:bd:84:42:41:39: 8c:62:c8:b5:9e:e4:08:6b:9d:22:82:64:9f:59:9f: f4:4b:93:64:f3:4b:22:e5:fc:ff:fb:44:6e:6f:03: 67:99:bd:c8:e9:15:5b:80:e1:a0:05:4b:3c:b6:6c: 05:7f:14:bb:ce:d9:a3:f9:50:8e:6e:4e:16:75:b7: 4e:1c:d1:33:78:33:dc:66:cb:43:76:eb:48:ac:69: 99:40:af:e7:ca:2f:16:e9:8b:f2:47:89:3b:fb:ea: 03:61:52:d6:e8:dd:35:4b:7f:d6:55:18:88:ba:25: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:81:E8:2F:2D:42:07:9B:CD:8F:21:0C:AF:A1:52:5F:F5:31:EA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:16:44:69:30:4c:6f:2f:60:bd:3d:86:29:04:f8:c8:e6:fd: d4:1d:af:a4:12:9e:58:21:78:9c:22:aa:8f:09:99:9e:33:ac: 6d:d0:5f:22:89:5d:f0:b0:54:71:c9:8d:cb:81:11:97:03:84: e9:8b:41:30:7e:d8:87:61:70:f7:dc:c6:32:b8:1b:ed:9b:c9: e3:1a:04:e4:c7:7c:a9:b8:95:85:3a:5b:4c:11:b1:57:13:56: 3d:5d:ef:50:71:1a:38:85:7a:8d:93:6d:a6:5d:16:06:18:46: de:d4:48:88:2f:90:01:39:41:d5:a6:d7:7b:1a:97:bf:cb:b7: 51:43:fa:18:e7:87:44:35:91:d4:8c:7d:29:64:4c:3e:30:a9: d8:e1:bf:77:48:15:6d:11:88:fd:11:ee:d9:bb:92:ff:89:cc: 5c:58:90:26:9a:76:b2:ed:01:cd:67:f1:b3:64:a5:9c:e6:0e: d8:27:05:f0:96:94:08:02:5d:52:9e:e8:4d:a5:1c:71:c0:da: 5e:0c:f8:fa:bf:8c:fd:45:67:e4:ac:0d:e6:3f:6b:45:94:1e: f8:55:79:96:d1:7a:53:d0:1b:22:4a:a5:56:7b:00:24:07:17: a7:86:74:36:11:45:ca:84:1b:1f:8f:09:df:9a:72:b3:ca:7a: 52:d4:4d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgDysibUXoU14QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ODhlMmNkOTQtZTA2NC00MTFkLThiNDMtMTRiZDVmOTM4NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRNyKsnzkNJe1JxV9vmDT6QNqtW8MKLwcQjA XDbgJ5rsMZlV9LxyvREd8ZI4KJh5W2HgEEKNvu3mYjOitiseF62DBHW/z6fWbm2l Ca3m+TUxYXNZAr1udqeARipwokWJDrp4+yaZkheY0pzDpkCP3tBErnI5F47sYaaG zn6cO0xyNmLRAmChkuRUnHxQQGLqvYRCQTmMYsi1nuQIa50igmSfWZ/0S5Nk80si 5fz/+0RubwNnmb3I6RVbgOGgBUs8tmwFfxS7ztmj+VCObk4WdbdOHNEzeDPcZstD dutIrGmZQK/nyi8W6YvyR4k7++oDYVLW6N01S3/WVRiIuiWShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6B6C8tQgebzY8hDK+hUl/1MeqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNmZhODllMzQtNWM3OC0z YmIxLTgwNWUtZDViNzE5MWIyMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0WRGkwTG8vYL09hikE+Mjm/dQdr6QSnlgheJwiqo8JmZ4zrG3QXyKJ XfCwVHHJjcuBEZcDhOmLQTB+2IdhcPfcxjK4G+2byeMaBOTHfKm4lYU6W0wRsVcT Vj1d71BxGjiFeo2TbaZdFgYYRt7USIgvkAE5QdWm13sal7/Lt1FD+hjnh0Q1kdSM fSlkTD4wqdjhv3dIFW0RiP0R7tm7kv+JzFxYkCaadrLtAc1n8bNkpZzmDtgnBfCW lAgCXVKe6E2lHHHA2l4M+Pq/jP1FZ+SsDeY/a0WUHvhVeZbRelPQGyJKpVZ7ACQH F6eGdDYRRcqEGx+PCd+acrPKelLUTXA= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:45 2025 by rpki-client