$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa File: a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json) Hash identifier: M3ZFkgCxDWaEZqtKNr19uol2jIfmdh9CWVDix2a6cLQ= Subject key identifier: CA:D9:9C:80:5F:D8:32:E1:13:E5:D1:AA:5F:7F:34:EF:6E:FE:71:54 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584BC10ADA82F89E5901FF535400 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 11052 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:da:82:f8:9e:59:01:ff:53:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=1305b38c-ead8-481f-9a40-09ba016d6257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:36:6a:27:5d:a8:40:4f:d1:ce:c7:3a:10: 2c:0e:31:df:b4:53:1d:29:2f:1a:fa:8f:96:85:07: 64:59:61:59:b2:48:66:94:3d:1a:1e:b2:39:0f:b8: 31:98:9b:f5:86:db:1f:02:ef:f7:f1:52:e7:43:04: f8:fe:06:28:80:7c:03:6b:bd:06:80:09:f5:3e:10: 0a:80:d5:c7:f2:8b:f5:91:01:99:7d:ab:9b:95:5d: 2c:1a:09:d1:35:ba:26:09:14:8a:b1:13:71:19:d7: 65:cf:38:6d:c2:76:b6:c1:65:54:e7:b3:20:51:10: 34:8a:b9:0d:13:d1:7d:6e:6f:7e:8a:a2:96:26:a5: 40:ea:9a:e7:3d:16:25:fc:fa:9d:44:76:33:1d:03: 01:b7:33:06:8d:a1:ba:6b:cb:b4:e9:6f:47:16:52: d1:dc:05:d6:25:15:5b:47:a1:73:98:b2:84:74:42: 6d:6c:33:6c:61:70:4d:cc:35:1a:4e:11:19:26:ef: 07:96:e9:71:62:d8:4f:54:7d:35:67:5e:55:41:f3: b6:e3:f9:f9:cc:1d:61:72:e7:97:cc:53:2b:a6:da: eb:0a:1e:8c:80:b7:b5:38:ee:7c:e5:8f:42:8c:fd: f2:57:1a:73:01:4d:bb:bf:ba:42:09:cb:76:c9:53: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:9C:80:5F:D8:32:E1:13:E5:D1:AA:5F:7F:34:EF:6E:FE:71:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e3:b6:ab:4f:1c:4a:67:32:99:8c:fe:30:5b:1c:d5:48:80: af:de:f9:65:4f:be:09:f3:e0:0a:48:f1:78:2f:26:6f:d5:92: fa:3d:89:1b:06:e3:dd:97:b1:6e:f5:aa:42:53:0d:e1:2f:7b: 93:98:de:8c:cf:a6:89:32:e2:d8:62:32:dc:b6:3f:08:58:65: 08:a4:4d:06:19:ec:ca:05:58:f8:1e:6f:03:7b:a1:96:b6:c8: ea:9f:3a:19:af:03:8f:3e:be:44:b5:1e:eb:d3:35:13:3c:82: df:52:e9:6b:7c:fd:33:78:c1:88:c4:1f:60:b6:ff:50:d3:2e: 83:a4:5c:f2:c3:bd:13:ce:a3:cc:78:af:54:e7:a2:30:4d:2e: 86:92:16:88:74:1a:86:e3:02:17:96:75:09:77:1b:f4:ef:e7: fe:07:b1:4d:f1:49:bd:1e:3e:e0:8c:f5:65:21:37:ab:24:48: 70:c8:e2:1e:3d:aa:2d:a1:c6:63:30:ee:af:05:f7:b6:8d:6d: eb:95:bf:76:c3:51:b9:4d:cd:9e:c1:0c:7a:3d:de:13:41:53: fd:f5:fb:cf:f1:3d:03:c7:29:a5:c8:80:d3:5d:53:62:db:10: 27:34:f9:90:b6:e3:f7:17:da:4f:d7:67:b6:36:a7:80:73:03: 11:69:ac:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtqC+J5ZAf9TVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTMwNWIzOGMtZWFkOC00ODFmLTlhNDAtMDliYTAxNmQ2MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnY2aiddqEBP0c7HOhAsDjHftFMdKS8a+o+W hQdkWWFZskhmlD0aHrI5D7gxmJv1htsfAu/38VLnQwT4/gYogHwDa70GgAn1PhAK gNXH8ov1kQGZfaublV0sGgnRNbomCRSKsRNxGddlzzhtwna2wWVU57MgURA0irkN E9F9bm9+iqKWJqVA6prnPRYl/PqdRHYzHQMBtzMGjaG6a8u06W9HFlLR3AXWJRVb R6FzmLKEdEJtbDNsYXBNzDUaThEZJu8HlulxYthPVH01Z15VQfO24/n5zB1hcueX zFMrptrrCh6MgLe1OO585Y9CjP3yVxpzAU27v7pCCct2yVMcBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrZnIBf2DLhE+XRql9/NO9u/nFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTI0ZGM3OTYtYTM1NC0z NTM0LTg4MDctYzdmNGIzNDc1MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/jtqtPHEpnMpmM/jBbHNVIgK/e+WVPvgnz4ApI8XgvJm/Vkvo9iRsG 492XsW71qkJTDeEve5OY3ozPpoky4thiMty2PwhYZQikTQYZ7MoFWPgebwN7oZa2 yOqfOhmvA48+vkS1HuvTNRM8gt9S6Wt8/TN4wYjEH2C2/1DTLoOkXPLDvRPOo8x4 r1TnojBNLoaSFoh0GobjAheWdQl3G/Tv5/4HsU3xSb0ePuCM9WUhN6skSHDI4h49 qi2hxmMw7q8F97aNbeuVv3bDUblNzZ7BDHo93hNBU/31+8/xPQPHKaXIgNNdU2Lb ECc0+ZC24/cX2k/XZ7Y2p4BzAxFprL0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:04 2025 by rpki-client