$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa File: 515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa (raw, json) Hash identifier: XqTJ3Yk1FI4CSpJ6wPnWpNYU5TqAel5RJN7ENwvXlRk= Subject key identifier: B1:4B:04:03:E6:89:14:92:7D:24:C8:22:03:C6:78:5D:73:AF:82:18 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F4328584BABFD0785B77B9463E0FDC240 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 138997 IP address blocks: 199.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:07:85:b7:7b:94:63:e0:fd:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=9bd30140-c78a-40df-8066-a9ac56352eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:6c:42:b7:0e:05:bb:6a:84:4b:46:fa:f2: a0:e0:c4:20:3a:53:98:aa:e7:6b:e1:a3:3b:8a:5f: dd:7b:51:3f:94:78:b2:15:3d:33:58:56:e0:0e:fe: d2:ec:79:cc:66:33:2b:c3:a8:dc:c5:2b:60:6d:ce: eb:f6:ee:22:d7:0f:bd:fc:67:dd:ca:e2:53:b2:ce: f6:39:98:a6:92:4a:05:95:71:44:74:f8:e8:d8:8d: 65:a5:62:ac:15:30:cc:48:33:91:df:76:5f:46:7b: 77:f3:46:8a:21:2a:89:e2:4f:d0:49:e9:cc:bb:a8: e2:cb:34:44:3c:1a:1c:61:b9:5b:68:eb:81:bc:0c: 96:a5:7b:76:17:78:1b:f6:3f:98:e1:b4:f9:1b:ae: 9d:1d:53:7b:32:60:a6:98:26:37:f6:43:4e:97:be: 33:3e:fa:12:4f:26:32:f8:b7:ec:aa:fb:f4:c2:1c: 80:10:6f:8c:96:4d:cf:8b:99:b6:17:24:10:25:d1: 57:5c:f7:eb:d6:4a:18:cd:4f:c5:c4:b8:7e:44:d9: 55:38:3d:66:89:99:a1:cd:28:56:c5:45:87:a2:d7: fb:da:10:1c:10:f5:db:69:89:e0:27:b2:f8:b2:c3: 9f:47:0f:df:bd:f1:38:2e:06:69:57:f2:6b:22:f6: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4B:04:03:E6:89:14:92:7D:24:C8:22:03:C6:78:5D:73:AF:82:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:73:6b:65:24:06:96:97:89:1b:c6:4b:c7:9c:3d:14:8f: 4c:e4:3a:42:39:a1:9f:04:00:a9:7c:cf:53:79:07:ed:9b:c4: 1f:48:23:ed:b7:07:c6:28:7e:70:c5:e8:b5:3a:1a:00:0d:7d: 73:a8:76:74:3c:11:57:54:7d:7e:3c:28:6e:1a:ae:20:b7:e4: 9f:29:c2:11:85:8a:d2:76:cc:31:36:65:02:be:f5:c1:9c:0e: d1:e5:21:01:44:95:c4:c8:4c:54:17:b0:70:92:70:ab:d7:98: 77:e6:ad:51:27:3c:bd:35:4e:bc:e7:c4:7c:6a:20:36:ed:61: 17:8f:61:1a:51:1b:6e:37:25:9c:6e:b3:73:4d:e1:1e:20:d4: 34:60:15:28:a4:15:2a:00:1a:de:b8:dc:1a:a0:b4:2c:e0:26: a5:aa:ce:60:5b:94:8f:f2:79:42:f8:79:cb:d0:92:1c:77:91: c6:5c:b1:46:52:88:54:c9:04:d6:c3:db:b0:62:d1:93:1a:a0: 2a:a3:52:47:17:ac:bb:9c:ed:e2:21:27:98:2b:ec:f4:23:14: f1:6c:f9:f6:ed:4a:97:60:b8:1e:bc:fe:b8:2a:71:1d:87:12: 04:a0:7a:5e:ed:ab:e0:54:34:c7:f8:bc:99:f6:5b:bc:74:c7: 0c:a5:d2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QeFt3uUY+D9wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OWJkMzAxNDAtYzc4YS00MGRmLTgwNjYtYTlhYzU2MzUyZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5RsQrcOBbtqhEtG+vKg4MQgOlOYqudr4aM7 il/de1E/lHiyFT0zWFbgDv7S7HnMZjMrw6jcxStgbc7r9u4i1w+9/GfdyuJTss72 OZimkkoFlXFEdPjo2I1lpWKsFTDMSDOR33ZfRnt380aKISqJ4k/QSenMu6jiyzRE PBocYblbaOuBvAyWpXt2F3gb9j+Y4bT5G66dHVN7MmCmmCY39kNOl74zPvoSTyYy +Lfsqvv0whyAEG+Mlk3Pi5m2FyQQJdFXXPfr1koYzU/FxLh+RNlVOD1miZmhzShW xUWHotf72hAcEPXbaYngJ7L4ssOfRw/fvfE4LgZpV/JrIvaZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFLBAPmiRSSfSTIIgPGeF1zr4IYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvNTE1YTY3YjUtMmY2YS0z MTU0LTg5MWEtNTFhZDFmYTQ3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUc2tlJAaWl4kbxkvHnD0Uj0zkOkI5oZ8EAKl8z1N5B+2bxB9II+23 B8YofnDF6LU6GgANfXOodnQ8EVdUfX48KG4ariC35J8pwhGFitJ2zDE2ZQK+9cGc DtHlIQFElcTITFQXsHCScKvXmHfmrVEnPL01TrznxHxqIDbtYRePYRpRG243JZxu s3NN4R4g1DRgFSikFSoAGt643BqgtCzgJqWqzmBblI/yeUL4ecvQkhx3kcZcsUZS iFTJBNbD27Bi0ZMaoCqjUkcXrLuc7eIhJ5gr7PQjFPFs+fbtSpdguB68/rgqcR2H EgSgel7tq+BUNMf4vJn2W7x0xwyl0mk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:00 2025 by rpki-client