$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa File: c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json) Hash identifier: Ts4VkUMpa5T0isCDIP6VODAbwehnMx5u3ksLkjO1pmA= Subject key identifier: F9:91:D3:51:C5:4B:2D:80:15:50:41:9E:88:CB:E4:6F:55:92:7D:0C Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584BC10ADAA740D3782B474B5BC0 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 202 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:da:a7:40:d3:78:2b:47:4b:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=34c603bd-04d1-41c0-a702-dd0cce7bcc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:af:96:5d:1c:b6:b2:4d:b3:97:cd:e6:5b:7d: ea:ef:d9:5b:f6:62:22:7d:fb:2a:f6:01:66:e8:3e: 2a:48:ae:e5:73:90:e5:15:fe:3d:a7:1d:b7:41:7d: d5:40:79:6b:8a:2f:89:3a:05:43:51:58:bd:f9:70: 0b:dd:32:c7:a3:c3:0e:c6:99:b0:46:09:a7:d2:40: 1b:a8:e2:0a:f6:85:59:58:ab:3c:59:d6:29:8e:f1: 47:c6:78:2b:b4:ad:51:aa:bb:9b:13:13:32:e9:95: bd:35:1d:99:5f:09:46:50:6c:2b:35:2f:38:95:ac: e9:ac:53:ec:5b:39:b6:60:9e:7a:55:37:d5:22:ab: 96:7e:6d:09:a3:e3:56:1a:3e:92:49:d1:bd:88:57: 34:d2:8a:5f:03:a4:43:b2:a5:d9:ba:6a:27:1e:84: 47:f9:bd:c6:3c:08:d0:27:63:51:bb:a8:76:f5:d2: 93:02:25:a4:41:cb:e0:98:09:83:9e:4e:ef:3e:71: df:75:e3:34:5b:79:b4:61:3b:81:02:73:2a:86:2a: 1c:da:df:fa:2d:f1:cf:f1:ea:15:88:52:bb:59:7a: 37:81:66:77:2c:ae:f7:21:8b:ac:14:e9:55:c4:92: 68:38:e2:39:9c:25:b5:4b:1b:17:da:c0:6a:8e:80: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:91:D3:51:C5:4B:2D:80:15:50:41:9E:88:CB:E4:6F:55:92:7D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:58:8c:b8:b7:d2:48:12:6a:42:a5:a4:3a:88:e4:79:b2:01: 67:a8:53:3f:ed:e6:93:62:4e:af:0a:35:47:c1:5f:db:c6:d4: b1:2c:c8:a2:df:d2:cf:75:05:97:fd:01:ab:f1:81:b0:5b:83: 9c:42:5e:6c:b1:e6:36:c5:66:f1:ec:5b:b2:41:32:57:b7:ff: 34:c9:32:eb:d0:63:19:5c:87:de:74:46:34:e3:b0:65:6a:41: 7b:8b:0b:b3:30:8a:e9:c7:ef:9a:82:e1:58:c5:95:d2:a0:b7: 28:55:7f:3f:15:66:b0:82:79:50:3d:d3:67:bd:94:b6:f5:8e: 18:54:01:9e:d4:24:d6:ad:d6:dd:a8:85:56:af:b1:35:24:6b: 32:47:16:48:13:c9:72:8f:51:2b:c4:65:8a:de:02:77:cf:89: 57:48:32:0c:e3:f3:53:cb:c0:e0:bc:12:96:6f:40:cf:de:71: 7d:a4:8a:c2:da:97:ba:b7:4e:15:76:20:81:08:2f:18:cc:1e: 3b:df:a5:99:1f:1f:b5:f0:f0:af:6b:d5:79:29:31:ff:1a:33: 31:1c:f5:e3:24:68:73:1b:53:0f:f2:d6:35:23:d3:89:39:e8: 23:8e:bc:1d:58:32:dd:39:6d:89:f0:4d:a6:79:e7:3a:6f:73: d5:84:2e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtqnQNN4K0dLW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MzRjNjAzYmQtMDRkMS00MWMwLWE3MDItZGQwY2NlN2JjYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK+WXRy2sk2zl83mW33q79lb9mIiffsq9gFm 6D4qSK7lc5DlFf49px23QX3VQHlrii+JOgVDUVi9+XAL3TLHo8MOxpmwRgmn0kAb qOIK9oVZWKs8WdYpjvFHxngrtK1RqrubExMy6ZW9NR2ZXwlGUGwrNS84lazprFPs Wzm2YJ56VTfVIquWfm0Jo+NWGj6SSdG9iFc00opfA6RDsqXZumonHoRH+b3GPAjQ J2NRu6h29dKTAiWkQcvgmAmDnk7vPnHfdeM0W3m0YTuBAnMqhioc2t/6LfHP8eoV iFK7WXo3gWZ3LK73IYusFOlVxJJoOOI5nCW1SxsX2sBqjoAuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmR01HFSy2AFVBBnojL5G9Vkn0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYzRjYzgxNmQtMDM3OC0z MzMxLWJmYWItMjlhZjFjNTFjYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINYjLi30kgSakKlpDqI5HmyAWeoUz/t5pNiTq8KNUfBX9vG1LEsyKLf 0s91BZf9AavxgbBbg5xCXmyx5jbFZvHsW7JBMle3/zTJMuvQYxlch950RjTjsGVq QXuLC7MwiunH75qC4VjFldKgtyhVfz8VZrCCeVA902e9lLb1jhhUAZ7UJNat1t2o hVavsTUkazJHFkgTyXKPUSvEZYreAnfPiVdIMgzj81PLwOC8EpZvQM/ecX2kisLa l7q3ThV2IIEILxjMHjvfpZkfH7Xw8K9r1XkpMf8aMzEc9eMkaHMbUw/y1jUj04k5 6COOvB1YMt05bYnwTaZ55zpvc9WELtk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:37 2025 by rpki-client