$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa File: a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json) Hash identifier: /VSmo3m6PDmR0Zt587ZRt1lZOae5ttJxyqofzLiM8+A= Subject key identifier: C9:7B:E0:B7:FB:1C:B9:C6:AF:71:62:D4:3A:E1:70:BC:98:7B:37:19 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A81465187B6E1F2B1A98AB880 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 11404 IP address blocks: 199.91.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:51:87:b6:e1:f2:b1:a9:8a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2d907e47-f4d6-4ee3-b60f-71968b255caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:71:6a:2b:83:96:c4:ce:7c:00:f3:3d:cf: a1:a3:54:24:10:41:fc:a9:ef:3f:9b:35:ad:1f:98: 0c:2c:a4:5a:84:da:d4:32:47:a8:6e:d0:b9:f4:6c: 6b:a6:67:9a:2f:97:d3:e7:c5:da:35:e6:a8:b9:72: 43:96:b6:63:a8:a4:6a:0a:4d:ce:3b:12:92:27:ec: 2d:fa:26:1f:04:b4:5a:d1:24:11:ac:e0:e4:2e:ab: 0e:be:37:c4:b1:60:0a:cc:ae:e3:30:8b:bb:12:4f: 98:74:4e:dd:bd:72:5d:f1:ab:92:12:15:1a:86:d2: 1d:5c:6c:e2:b7:31:c0:59:63:00:16:0f:72:c5:f1: 1f:61:bd:04:b4:6c:38:03:e7:da:07:49:bb:9b:f5: ae:3e:05:9f:14:d0:86:0e:3d:07:05:62:35:c2:26: 1e:e6:74:28:6a:a1:cd:d8:52:c9:a2:d4:e4:65:b6: 6b:18:da:23:cb:03:4d:af:de:a2:4c:c2:32:8d:80: 30:95:eb:05:bb:8b:b9:be:07:b3:29:6c:c7:2b:05: 4d:cc:9f:9a:50:6a:5e:1c:e5:ba:9f:f2:76:f0:8b: ce:52:5e:38:1f:85:09:8b:ba:d8:60:4b:8e:8f:fb: fd:ba:ef:2e:36:ca:71:c6:98:f6:cc:b3:21:f4:91: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:E0:B7:FB:1C:B9:C6:AF:71:62:D4:3A:E1:70:BC:98:7B:37:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:60:63:73:5c:30:c9:a0:9a:ad:68:80:2b:2c:f0:e9:c4:d6: fc:27:4d:67:79:8b:d9:ee:62:3c:36:1b:b4:8a:10:08:dc:0a: 21:f4:35:2a:5b:cf:1c:1b:8d:83:3c:6f:12:0b:ac:bd:4d:86: f3:bc:fa:93:80:98:bb:8a:d0:e6:d8:64:40:fd:f0:4c:1a:48: 4e:d7:92:15:e8:b6:09:ba:37:15:ff:71:f4:d4:67:ca:c4:67: 61:20:02:76:dd:a5:bb:92:d4:c8:d8:fe:a0:5e:e2:3b:1d:a5: c9:e2:e7:69:81:e2:7f:8e:ef:04:d5:e4:41:42:ac:ff:dc:d8: 55:a0:e9:bb:8d:e0:14:a6:5e:9b:ba:3b:b4:11:00:47:14:48: b5:39:eb:58:21:67:0b:bb:03:6d:19:25:24:06:fb:a5:25:86: 35:b1:bf:89:d3:b8:36:25:4a:10:ee:b8:a9:bd:37:c4:fa:e3: 68:f5:16:9b:3f:07:c5:28:1b:0d:41:3d:2e:06:ee:42:82:45: 97:2a:8d:bd:3e:cc:56:17:20:95:41:44:e2:c2:c4:6a:55:bf: 72:da:6c:33:7e:c9:9a:cd:5a:76:ba:ca:7e:10:f7:8e:9d:b4: 87:47:97:23:1d:c2:c6:9d:34:18:db:84:80:86:81:00:8a:2d: 56:69:0c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlGHtuHysamKuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmQ5MDdlNDctZjRkNi00ZWUzLWI2MGYtNzE5NjhiMjU1Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U5xaiuDlsTOfADzPc+ho1QkEEH8qe8/mzWt H5gMLKRahNrUMkeobtC59GxrpmeaL5fT58XaNeaouXJDlrZjqKRqCk3OOxKSJ+wt +iYfBLRa0SQRrODkLqsOvjfEsWAKzK7jMIu7Ek+YdE7dvXJd8auSEhUahtIdXGzi tzHAWWMAFg9yxfEfYb0EtGw4A+faB0m7m/WuPgWfFNCGDj0HBWI1wiYe5nQoaqHN 2FLJotTkZbZrGNojywNNr96iTMIyjYAwlesFu4u5vgezKWzHKwVNzJ+aUGpeHOW6 n/J28IvOUl44H4UJi7rYYEuOj/v9uu8uNspxxpj2zLMh9JGmAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl74Lf7HLnGr3Fi1DrhcLyYezcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTlhMDJkYTMtMTA0NC0z NWY0LTkwOTUtZTQwYWEzNTBhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9gY3NcMMmgmq1ogCss8OnE1vwnTWd5i9nuYjw2G7SKEAjcCiH0NSpb zxwbjYM8bxILrL1NhvO8+pOAmLuK0ObYZED98EwaSE7XkhXotgm6NxX/cfTUZ8rE Z2EgAnbdpbuS1MjY/qBe4jsdpcni52mB4n+O7wTV5EFCrP/c2FWg6buN4BSmXpu6 O7QRAEcUSLU561ghZwu7A20ZJSQG+6UlhjWxv4nTuDYlShDuuKm9N8T642j1Fps/ B8UoGw1BPS4G7kKCRZcqjb0+zFYXIJVBROLCxGpVv3LabDN+yZrNWna6yn4Q946d tIdHlyMdwsadNBjbhICGgQCKLVZpDFY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:07 2025 by rpki-client