$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa File: 1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json) Hash identifier: RBb+2zR7v2K1Ki5j1ggHE70T00YeWn7lXVVYx/i0H2I= Subject key identifier: 8B:7C:0F:07:A6:95:2D:0C:C1:69:EC:21:AA:04:93:E0:5D:CE:A7:F2 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584BC10ADA955C8BC262ACF5C070 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 11052 IP address blocks: 199.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:da:95:5c:8b:c2:62:ac:f5:c0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=793fbee1-5952-4e0a-b589-616f3a4491ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:43:87:5c:84:7f:09:c8:35:dd:68:0d:f2: 34:f0:4a:6b:4e:8c:69:d6:ae:d6:79:0c:95:96:49: 0f:b9:76:e1:73:bf:5f:1f:28:fc:6d:83:24:02:9d: 79:68:7f:56:23:5d:16:49:89:fa:95:c2:60:f0:98: ed:d8:b5:91:78:53:54:f2:3f:11:a0:e6:3d:2f:f0: 00:db:62:dc:d4:2e:7a:d3:d0:16:9a:27:6b:db:2b: a8:4d:8a:fa:b0:cc:2d:a5:3a:f9:2e:ad:04:17:c7: f3:ae:cb:06:d4:58:f9:a1:23:56:cc:cc:80:00:87: dc:89:58:fe:c0:20:f1:e8:d4:39:66:b1:b7:be:c8: 54:45:2e:8a:e5:50:70:a1:06:38:c5:79:0a:4e:3d: ea:92:93:7c:4a:1b:2a:2a:d3:9c:39:0e:a6:0a:f2: eb:b3:f7:62:3c:5d:07:56:c1:d4:59:ae:19:d6:c9: c3:97:72:9d:8d:79:38:1f:dc:51:cd:4f:e8:d3:9b: 2e:33:94:83:db:0d:cc:63:cc:38:6f:49:77:53:6a: 70:11:93:bc:26:d6:87:f3:74:91:f6:d4:bf:14:46: 31:9a:b6:6e:ea:03:e7:78:95:ed:be:ec:06:65:02: 4f:cb:42:ea:70:a3:5b:47:94:87:14:84:7b:21:05: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7C:0F:07:A6:95:2D:0C:C1:69:EC:21:AA:04:93:E0:5D:CE:A7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:21:38:10:86:47:5e:0a:ec:ea:e3:16:a7:1c:f0:d2:57:0b: 4f:f1:26:f0:6e:e7:84:fc:27:76:ae:2e:74:be:43:eb:ee:16: 31:44:6d:75:37:7f:68:29:fc:1d:a5:be:19:aa:4b:bc:06:a1: af:0e:10:66:be:20:cc:3e:aa:74:f8:d4:70:91:86:17:a0:b8: 01:00:d4:55:a4:b2:d1:4b:06:6f:ff:42:67:6f:e7:61:3e:0b: b8:6a:79:9a:f7:01:a2:57:d3:83:53:27:c1:f4:82:af:5f:35: 97:d2:8c:70:02:b7:2b:48:e1:b9:3d:75:44:18:24:c5:1d:e0: 21:6c:4f:b8:03:f9:b5:ef:aa:cc:91:26:74:5b:5e:ca:cd:c9: ba:5a:90:b7:e4:f8:45:2d:9a:44:8d:a3:80:f0:5a:1e:66:1f: ec:e3:70:94:2f:b6:fe:e5:06:ce:a1:9c:4a:c6:b8:5a:cb:e7: 2b:00:d7:97:3f:74:25:f3:e3:82:57:8f:20:71:5d:7d:ac:05: c6:89:6c:de:5b:de:2d:5c:94:64:de:8c:c4:f0:0d:64:bd:b7: 01:e8:4d:50:96:7f:70:79:9f:03:c3:a0:e9:83:1a:77:0f:92: a3:4f:ba:81:bc:9a:7c:8d:dc:f5:86:8d:df:04:9c:4e:07:c6: 00:52:ba:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtqVXIvCYqz1wHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk NzkzZmJlZTEtNTk1Mi00ZTBhLWI1ODktNjE2ZjNhNDQ5MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9VDh1yEfwnINd1oDfI08EprToxp1q7WeQyV lkkPuXbhc79fHyj8bYMkAp15aH9WI10WSYn6lcJg8Jjt2LWReFNU8j8RoOY9L/AA 22Lc1C5609AWmidr2yuoTYr6sMwtpTr5Lq0EF8fzrssG1Fj5oSNWzMyAAIfciVj+ wCDx6NQ5ZrG3vshURS6K5VBwoQY4xXkKTj3qkpN8ShsqKtOcOQ6mCvLrs/diPF0H VsHUWa4Z1snDl3KdjXk4H9xRzU/o05suM5SD2w3MY8w4b0l3U2pwEZO8JtaH83SR 9tS/FEYxmrZu6gPneJXtvuwGZQJPy0LqcKNbR5SHFIR7IQUs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt8DwemlS0MwWnsIaoEk+BdzqfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMWVmYWNhMmUtZWNiNy0z YWYyLWE2ODAtYWE0Y2QyNGRmNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMhOBCGR14K7OrjFqcc8NJXC0/xJvBu54T8J3auLnS+Q+vuFjFEbXU3 f2gp/B2lvhmqS7wGoa8OEGa+IMw+qnT41HCRhheguAEA1FWkstFLBm//Qmdv52E+ C7hqeZr3AaJX04NTJ8H0gq9fNZfSjHACtytI4bk9dUQYJMUd4CFsT7gD+bXvqsyR JnRbXsrNybpakLfk+EUtmkSNo4DwWh5mH+zjcJQvtv7lBs6hnErGuFrL5ysA15c/ dCXz44JXjyBxXX2sBcaJbN5b3i1clGTejMTwDWS9twHoTVCWf3B5nwPDoOmDGncP kqNPuoG8mnyN3PWGjd8EnE4HxgBSusE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:08 2025 by rpki-client