$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa File: 58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa (raw, json) Hash identifier: bU9Phwpad0G45WmtRyjcYMsT+NROSq271zWt+H9CSTM= Subject key identifier: A3:A2:F2:F2:1C:43:EE:B5:52:B0:64:1F:D5:FB:27:4F:9E:B2:AD:F9 Certificate issuer: /CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85 Certificate serial: 010D0C9F4328584B99D79F6C28A97802FBB7E7C0 Authority key identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 8075 IP address blocks: 199.248.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:6c:28:a9:78:02:fb:b7:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9538f200-bec2-4e0a-9ef2-abc1c6cd8214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e6:2c:a2:81:68:00:68:43:18:c7:34:39:2c: be:f2:11:11:78:5b:c8:8a:4f:97:f1:9a:5c:c7:02: 2c:34:32:5e:90:1d:68:15:52:37:65:d8:26:81:69: e0:eb:62:b6:42:7e:84:0b:77:de:44:1d:b1:c8:c9: 4b:7c:1c:e3:62:03:f9:0e:08:87:b5:87:70:20:ef: ae:7d:06:b6:ca:77:3e:eb:46:54:df:e1:8a:70:d6: b2:35:02:22:b2:d6:8c:f3:43:dd:a6:c2:9b:aa:ff: 6c:9f:55:e4:12:93:16:f5:f8:48:84:11:fb:f6:80: 59:b6:68:d1:e2:9b:c3:e3:54:03:60:d9:51:46:76: 5f:cb:5d:d0:e1:d0:c3:3e:b8:25:9d:35:99:a9:14: a3:1f:25:02:f7:b6:c9:b6:e1:08:9b:83:83:66:3f: 49:50:02:59:6e:4c:de:7c:9c:fa:7d:ca:99:cf:e8: 99:d2:26:c2:bf:4f:cd:13:91:35:23:ca:d2:fd:ed: 96:66:81:79:0b:eb:95:81:24:63:37:28:b3:32:63: f6:e7:7f:e1:13:06:b9:6e:49:0b:2c:92:11:d0:6d: a2:54:b6:9d:8e:2c:aa:9a:8a:fb:9d:1c:9b:a9:ce: 55:f3:a1:70:fc:3a:3b:5f:28:99:4c:3b:45:66:90: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:F2:F2:1C:43:EE:B5:52:B0:64:1F:D5:FB:27:4F:9E:B2:AD:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl X509v3 Authority Key Identifier: keyid:20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer sbgp-ipAddrBlock: critical IPv4: 199.248.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6e:f0:cb:3d:79:4d:7f:fb:5c:6e:b4:64:ca:16:f3:6a:eb: 61:24:59:9d:60:f2:c6:0a:c8:18:bc:1b:3f:bd:35:09:71:d9: 04:1f:49:c2:f1:cc:03:29:15:92:56:da:36:3a:ad:a0:bc:8f: ea:0d:37:63:26:b0:87:e1:26:87:50:a0:d0:ef:83:93:e7:5d: e8:22:53:ae:bb:9b:d4:d0:7c:e9:40:31:71:43:3e:39:06:c1: 7b:92:5a:96:37:aa:23:e5:56:da:56:89:3e:17:28:90:b8:f4: 92:a8:81:67:42:5f:32:f2:6a:6c:70:5c:6f:ad:dd:c0:6d:42: 31:cf:0e:0f:07:a9:92:30:95:5c:04:13:55:72:eb:39:1d:67: d9:25:7e:4d:51:8f:18:cf:93:2c:15:41:1b:31:1d:1f:5e:2c: c5:80:8b:2b:66:40:7d:95:9c:06:e6:b1:1c:0c:d2:21:5e:1d: 8f:5e:85:4e:1f:66:42:14:12:c6:c3:3c:ef:dd:69:c1:9b:54: be:b4:be:30:0d:be:ec:8d:74:c4:ca:cf:15:38:22:28:a2:0c: d3:4e:58:95:1f:2a:30:7b:d5:b4:f2:1c:55:a3:97:55:67:08: 3d:64:fd:63:21:da:73:5d:51:a4:26:fd:80:00:ee:d3:8c:f5: b1:e6:2d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ159sKKl4Avu358AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJiMWRiZjYtZmRlYS00MjFiLTg5OGUtNjZiYjkxMjJl Yzg1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTUzOGYyMDAtYmVjMi00ZTBhLTllZjItYWJjMWM2Y2Q4MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+YsooFoAGhDGMc0OSy+8hEReFvIik+X8Zpc xwIsNDJekB1oFVI3ZdgmgWng62K2Qn6EC3feRB2xyMlLfBzjYgP5DgiHtYdwIO+u fQa2ync+60ZU3+GKcNayNQIistaM80PdpsKbqv9sn1XkEpMW9fhIhBH79oBZtmjR 4pvD41QDYNlRRnZfy13Q4dDDPrglnTWZqRSjHyUC97bJtuEIm4ODZj9JUAJZbkze fJz6fcqZz+iZ0ibCv0/NE5E1I8rS/e2WZoF5C+uVgSRjNyizMmP253/hEwa5bkkL LJIR0G2iVLadjiyqmor7nRybqc5V86Fw/Do7XyiZTDtFZpDamQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOi8vIcQ+61UrBkH9X7J0+esq35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMmIx ZGJmNi1mZGVhLTQyMWItODk4ZS02NmJiOTEyMmVjODUvNTgxMTdmZTItOGM4NS0z ZjBhLWFhNmItMWQ1YjljMDY4Y2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzJiMWRiZjYtZmRlYS00MjFiLTg5 OGUtNjZiYjkxMjJlYzg1L2MyYjFkYmY2LWZkZWEtNDIxYi04OThlLTY2YmI5MTIy ZWM4NS5jcmwwHwYDVR0jBBgwFoAUIEHc1cUAKJwhCvrvovBsikfZY4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jMmIxZGJmNi1mZGVhLTQyMWItODk4ZS02NmJi OTEyMmVjODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/h8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1u8Ms9eU1/+1xutGTKFvNq62EkWZ1g8sYKyBi8Gz+9NQlx2QQfScLx zAMpFZJW2jY6raC8j+oNN2MmsIfhJodQoNDvg5PnXegiU667m9TQfOlAMXFDPjkG wXuSWpY3qiPlVtpWiT4XKJC49JKogWdCXzLyamxwXG+t3cBtQjHPDg8HqZIwlVwE E1Vy6zkdZ9klfk1RjxjPkywVQRsxHR9eLMWAiytmQH2VnAbmsRwM0iFeHY9ehU4f ZkIUEsbDPO/dacGbVL60vjANvuyNdMTKzxU4IiiiDNNOWJUfKjB71bTyHFWjl1Vn CD1k/WMh2nNdUaQm/YAA7tOM9bHmLZI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:53 2025 by rpki-client