$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa File: 10029257-bda1-3754-b670-e0c603bafdfc.roa (raw, json) Hash identifier: LwckHQz/5Ow0TLuYnSAX1uK7z8bTQQWh5KcXK3TJ3Gw= Subject key identifier: 86:4B:FB:41:28:75:C3:9E:46:C8:68:33:DC:2E:6D:38:F9:A6:09:BE Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA591D702AE327FAD6CBA00 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 199.187.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:91:d7:02:ae:32:7f:ad:6c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=98fd8e8d-6045-4585-8979-b217970445b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:39:7e:0c:2d:2b:90:18:8b:bb:51:0d:ec: d8:36:5a:f2:00:0f:a3:06:94:45:6c:d9:a0:53:38: a8:fe:19:11:b2:2c:14:30:f1:dc:fe:8f:cc:b9:4f: 6c:82:f6:ec:f8:5d:92:ff:69:99:30:a2:2b:55:e8: 19:3d:20:26:88:20:c0:26:0f:37:b3:ae:a1:1c:68: 6d:1e:4c:38:86:d3:fc:63:fb:dc:77:88:ef:5f:47: 22:09:eb:47:e3:61:25:59:71:6a:76:95:ff:a9:e4: d3:b7:7a:8c:8c:a8:2f:88:ce:74:e3:60:43:7e:28: 3f:fa:32:f0:8f:51:d2:71:80:f3:e9:cd:1a:bc:3b: a2:ba:df:6e:0a:16:7b:24:7d:cc:c9:85:a7:07:0b: d9:dd:75:c3:41:ce:93:57:6c:ba:97:e7:e9:e1:52: df:9c:c2:43:02:7b:05:33:9f:c9:50:aa:17:92:da: 46:be:b0:8e:13:b1:3d:2f:a9:8c:a4:bf:f5:dc:eb: a4:a4:04:2a:47:21:01:38:29:9f:1e:a8:80:aa:a9: cc:5f:57:5c:3e:cc:ca:ad:a3:02:5a:ac:1e:e9:55: d2:ec:fd:8d:52:0c:4f:a2:df:0e:87:79:ae:30:1a: 02:9b:0d:b0:79:b5:e1:86:85:61:a9:91:72:b7:6e: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:FB:41:28:75:C3:9E:46:C8:68:33:DC:2E:6D:38:F9:A6:09:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c3:53:8d:36:5c:bc:93:1a:e5:09:b3:02:17:f6:c4:33:b9: fa:f0:e1:e9:1b:ed:56:0a:20:6f:76:98:8d:90:88:a2:80:00: 64:b7:4d:a9:92:e0:70:cb:c2:08:c8:78:9e:9c:cb:fc:3f:44: 92:60:e7:75:44:6a:bd:4a:10:b2:ec:43:74:e4:6e:4b:fc:5f: 61:57:21:8e:52:46:96:46:0a:5b:c3:be:fb:92:6d:7c:50:71: 1b:54:0a:90:54:ae:f1:15:7e:aa:8f:7f:bc:c2:b0:6b:50:15: a8:5b:21:6e:f0:5f:65:6d:57:64:d6:00:7a:17:02:2d:92:71: 1d:93:98:f3:3e:8c:f2:31:6e:c5:39:83:7f:d1:c1:19:92:14: 58:43:58:4c:68:02:0e:91:42:32:a8:18:4c:70:85:bc:41:4c: 19:9c:64:00:9f:bb:41:2a:0a:e0:23:74:50:00:0f:cc:31:75: d1:60:fe:17:ef:7b:05:ac:52:ab:ae:e8:21:45:6e:9e:d1:7e: 57:e3:a0:56:be:33:b4:15:bd:7a:5f:61:24:72:ab:00:ea:41: bb:59:fa:28:41:fb:56:03:c3:b8:bd:ec:8d:36:1d:a3:76:1e: 2b:06:c3:d7:88:c4:34:8d:0a:cd:73:13:0a:cf:63:94:ad:f4: ce:b0:b1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZHXAq4yf61sugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OThmZDhlOGQtNjA0NS00NTg1LTg5NzktYjIxNzk3MDQ0NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl85fgwtK5AYi7tRDezYNlryAA+jBpRFbNmg Uzio/hkRsiwUMPHc/o/MuU9sgvbs+F2S/2mZMKIrVegZPSAmiCDAJg83s66hHGht Hkw4htP8Y/vcd4jvX0ciCetH42ElWXFqdpX/qeTTt3qMjKgviM5042BDfig/+jLw j1HScYDz6c0avDuiut9uChZ7JH3MyYWnBwvZ3XXDQc6TV2y6l+fp4VLfnMJDAnsF M5/JUKoXktpGvrCOE7E9L6mMpL/13OukpAQqRyEBOCmfHqiAqqnMX1dcPszKraMC Wqwe6VXS7P2NUgxPot8Oh3muMBoCmw2webXhhoVhqZFyt24afwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZL+0EodcOeRshoM9wubTj5pgm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvMTAwMjkyNTctYmRhMS0z NzU0LWI2NzAtZTBjNjAzYmFmZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/DU402XLyTGuUJswIX9sQzufrw4ekb7VYKIG92mI2QiKKAAGS3TamS 4HDLwgjIeJ6cy/w/RJJg53VEar1KELLsQ3Tkbkv8X2FXIY5SRpZGClvDvvuSbXxQ cRtUCpBUrvEVfqqPf7zCsGtQFahbIW7wX2VtV2TWAHoXAi2ScR2TmPM+jPIxbsU5 g3/RwRmSFFhDWExoAg6RQjKoGExwhbxBTBmcZACfu0EqCuAjdFAAD8wxddFg/hfv ewWsUquu6CFFbp7RflfjoFa+M7QVvXpfYSRyqwDqQbtZ+ihB+1YDw7i97I02HaN2 HisGw9eIxDSNCs1zEwrPY5St9M6wsTU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:27 2025 by rpki-client