$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa File: b08fdd2d-93d3-3967-9389-1c862db30c2b.roa (raw, json) Hash identifier: c81k1WJUtsBeqoWx4aT9olXwWAJoXovMqttIXpGLqes= Subject key identifier: 01:48:4E:37:84:CD:42:67:4B:DD:A0:B4:BB:D9:93:F9:14:D7:FA:E3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB5D91783B9D83FD95000 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 199.91.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:d9:17:83:b9:d8:3f:d9:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9c2d7966-58ca-4a3f-81a3-c26d351d6b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:67:ec:d0:0d:fd:86:fd:01:ec:f5:fa:52: 05:24:91:5f:d6:5a:7a:76:42:5a:3f:06:0c:f3:70: 20:19:3a:d9:5e:be:23:78:fd:5e:59:c2:71:5f:84: bf:62:67:64:99:01:f7:5c:80:dc:b3:11:34:b4:20: d2:f7:60:bb:e0:9a:f7:7d:37:e5:83:ec:d4:43:ef: 29:2b:7c:c7:bd:a1:4e:90:c2:30:00:24:32:3a:6d: 1b:f1:d7:8b:a6:8f:c8:a8:a4:ae:1b:52:ce:7b:6c: 0c:8c:62:38:91:e4:ac:90:bf:27:61:d9:31:22:4a: 67:18:8d:84:1d:f2:ee:28:ba:a1:ae:07:a5:79:0f: c2:52:5f:08:34:c1:3d:17:a2:6e:c5:74:7b:f2:95: df:64:2b:73:d4:72:75:b0:35:7d:41:ae:32:34:8c: 9c:07:db:91:00:6e:44:7c:5d:e5:14:63:77:a9:26: fa:8b:f8:f7:84:6e:34:fc:00:74:86:d7:88:74:71: 7d:4f:32:a2:e5:ba:f4:08:3f:13:ae:36:6d:c6:70: 5d:77:46:ea:8e:fe:f8:09:07:8a:6a:f1:5a:60:6e: 06:8a:1a:ea:4a:56:e3:23:65:26:49:66:e1:c2:3e: 7a:3d:01:e0:02:e0:28:91:ed:7b:26:dc:98:1c:05: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:4E:37:84:CD:42:67:4B:DD:A0:B4:BB:D9:93:F9:14:D7:FA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e9:e6:84:4f:a5:6b:96:29:4e:f9:d8:1a:97:cb:e5:9e:2d: ef:d9:aa:fe:98:2d:db:bd:56:b7:9a:33:41:00:03:33:f2:ed: a2:c5:6f:1f:57:ff:d7:be:a4:10:39:bd:06:6d:15:38:84:01: 5c:ba:d0:9d:e2:4a:f6:db:8c:a0:d1:0c:4b:02:35:6f:26:a9: 7e:97:dc:3f:03:a4:2f:a5:10:4a:80:b8:2c:25:f9:d5:a0:59: 11:20:32:03:b6:32:66:53:e0:7b:dd:c0:b2:9d:3c:b8:27:d5: b0:fe:03:d7:7f:12:8b:cc:c7:75:e9:d7:d7:31:54:e8:f7:c3: 8d:37:f0:ad:d5:f4:31:2f:5e:20:9b:28:68:66:93:38:ae:5d: 7d:fb:e0:41:57:d3:16:d6:c2:60:89:cd:ca:c1:b3:da:bd:0f: 48:1b:28:95:a4:72:1f:fb:af:49:46:f2:f5:ea:8f:24:19:64: 96:af:af:ec:98:52:f7:60:b7:2b:68:3c:21:da:ab:3d:37:b4: c0:52:e9:59:13:66:7e:e8:1c:ee:a7:c3:c0:e6:7a:fa:e1:fd: 29:d2:05:61:ab:93:bc:d8:58:03:66:40:20:8c:5d:39:e4:80: f3:15:eb:85:ba:6d:54:6f:00:ec:d1:7a:2f:42:5b:8b:90:a0: ef:26:ac:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLXZF4O52D/ZUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWMyZDc5NjYtNThjYS00YTNmLTgxYTMtYzI2ZDM1MWQ2Yjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM9n7NAN/Yb9Aez1+lIFJJFf1lp6dkJaPwYM 83AgGTrZXr4jeP1eWcJxX4S/YmdkmQH3XIDcsxE0tCDS92C74Jr3fTflg+zUQ+8p K3zHvaFOkMIwACQyOm0b8deLpo/IqKSuG1LOe2wMjGI4keSskL8nYdkxIkpnGI2E HfLuKLqhrgeleQ/CUl8INME9F6JuxXR78pXfZCtz1HJ1sDV9Qa4yNIycB9uRAG5E fF3lFGN3qSb6i/j3hG40/AB0hteIdHF9TzKi5br0CD8TrjZtxnBdd0bqjv74CQeK avFaYG4GihrqSlbjI2UmSWbhwj56PQHgAuAoke17JtyYHAVqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFITjeEzUJnS92gtLvZk/kU1/rjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjA4ZmRkMmQtOTNkMy0z OTY3LTkzODktMWM4NjJkYjMwYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrp5oRPpWuWKU752BqXy+WeLe/Zqv6YLdu9VreaM0EAAzPy7aLFbx9X /9e+pBA5vQZtFTiEAVy60J3iSvbbjKDRDEsCNW8mqX6X3D8DpC+lEEqAuCwl+dWg WREgMgO2MmZT4HvdwLKdPLgn1bD+A9d/EovMx3Xp19cxVOj3w4038K3V9DEvXiCb KGhmkziuXX374EFX0xbWwmCJzcrBs9q9D0gbKJWkch/7r0lG8vXqjyQZZJavr+yY UvdgtytoPCHaqz03tMBS6VkTZn7oHO6nw8Dmevrh/SnSBWGrk7zYWANmQCCMXTnk gPMV64W6bVRvAOzRei9CW4uQoO8mrBE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:38:07 2025 by rpki-client