$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa File: 95288216-711e-31bc-8bb7-23252f7aee62.roa (raw, json) Hash identifier: Pd6J1/Itg94KtyyIsCiLh4XYKo9CMwwP/dwabpOB4yI= Subject key identifier: 85:82:60:87:D3:26:D4:09:09:61:04:11:7D:4F:27:D8:78:83:26:16 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA591EB11EEDD8E0FA89F00 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 199.187.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:91:eb:11:ee:dd:8e:0f:a8:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=6d655ec1-8b25-44b9-8526-814192f09e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:0b:d9:5b:0a:0e:e8:d4:b1:fb:e0:13:38: 3c:e8:79:00:de:2e:dc:0f:dc:1a:88:83:b8:59:93: 35:a8:2b:fb:9d:dc:41:dc:63:6c:56:03:63:cb:e4: 7b:1f:c8:e0:b3:33:32:be:5e:63:71:55:c4:69:36: 74:53:c9:be:fa:ca:2f:e7:86:bc:c6:14:87:44:48: c5:9a:75:75:7a:62:03:48:5a:ef:91:17:7f:ed:a1: 6f:e6:82:89:8b:aa:a1:7e:65:60:49:de:e9:4f:db: 72:00:e9:ac:5a:e1:32:12:2c:19:5b:89:67:a3:02: 26:00:c3:95:a3:e9:67:3c:65:fc:94:fe:ef:b7:9e: f3:66:32:6c:60:ee:37:85:14:84:b1:24:f8:45:04: f2:25:37:a1:cc:92:78:3d:c7:99:3e:30:11:76:a1: 96:71:85:33:53:9f:d6:74:3b:7d:38:76:8f:30:84: 71:e2:96:21:5f:b1:81:f2:56:b2:88:1d:a3:58:39: f1:d5:25:30:37:51:8d:f5:84:a2:d4:04:c6:7a:34: 78:54:48:cb:dc:aa:f8:7d:b9:78:ed:c8:2f:d2:3c: 36:9c:8f:79:c9:60:5b:a8:6b:fa:57:4c:1f:b9:61: ac:59:ad:e3:a4:d5:1a:a7:43:fb:cb:22:cc:68:67: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:60:87:D3:26:D4:09:09:61:04:11:7D:4F:27:D8:78:83:26:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a4:af:87:c2:b9:b4:98:07:16:9e:2b:01:96:ac:23:bd:ac: 4f:9b:42:cb:4b:24:68:1c:7c:37:6a:e3:9e:39:a2:04:d3:06: 50:eb:d0:80:27:4e:47:d2:f4:1b:1a:19:10:e0:fd:83:c1:aa: e9:82:9c:e5:bf:1d:cd:5d:87:20:7a:26:0b:e3:5b:20:8c:0a: 3d:60:17:c8:1b:b1:ff:3f:0b:1a:62:3a:b5:0f:81:1a:38:a5: 14:33:72:20:08:dc:7a:0a:44:d4:45:4e:60:77:6f:c5:f8:7b: 67:79:40:01:31:fe:c7:a9:b1:ef:0f:f3:a8:85:cc:49:27:02: 16:89:4f:dd:e8:05:e4:b3:10:af:f8:b8:a4:2d:18:d1:63:7d: a0:8a:db:a0:d1:d6:44:85:07:16:b3:13:91:ed:8b:de:c3:06: 05:46:0f:78:a9:bf:a4:f5:9c:4e:aa:38:7d:ae:cc:a9:b5:29: 66:93:4d:71:f9:84:7f:c0:62:2f:d4:8c:6e:e2:42:e2:e7:57: 12:e5:12:bf:f0:ed:15:cc:43:b9:a7:ae:87:75:79:c0:98:b6: bd:7a:35:c8:6b:72:3a:2a:1d:d9:76:69:cb:1e:35:ee:31:e3: 0c:53:87:34:84:e7:ec:52:97:47:a0:b6:f1:f1:f0:ee:61:7d: f6:1b:22:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZHrEe7djg+onwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NmQ2NTVlYzEtOGIyNS00NGI5LTg1MjYtODE0MTkyZjA5ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUAL2VsKDujUsfvgEzg86HkA3i7cD9waiIO4 WZM1qCv7ndxB3GNsVgNjy+R7H8jgszMyvl5jcVXEaTZ0U8m++sov54a8xhSHREjF mnV1emIDSFrvkRd/7aFv5oKJi6qhfmVgSd7pT9tyAOmsWuEyEiwZW4lnowImAMOV o+lnPGX8lP7vt57zZjJsYO43hRSEsST4RQTyJTehzJJ4PceZPjARdqGWcYUzU5/W dDt9OHaPMIRx4pYhX7GB8layiB2jWDnx1SUwN1GN9YSi1ATGejR4VEjL3Kr4fbl4 7cgv0jw2nI95yWBbqGv6V0wfuWGsWa3jpNUap0P7yyLMaGdcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWCYIfTJtQJCWEEEX1PJ9h4gyYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvOTUyODgyMTYtNzExZS0z MWJjLThiYjctMjMyNTJmN2FlZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOkr4fCubSYBxaeKwGWrCO9rE+bQstLJGgcfDdq4545ogTTBlDr0IAn TkfS9BsaGRDg/YPBqumCnOW/Hc1dhyB6JgvjWyCMCj1gF8gbsf8/CxpiOrUPgRo4 pRQzciAI3HoKRNRFTmB3b8X4e2d5QAEx/sepse8P86iFzEknAhaJT93oBeSzEK/4 uKQtGNFjfaCK26DR1kSFBxazE5Hti97DBgVGD3ipv6T1nE6qOH2uzKm1KWaTTXH5 hH/AYi/UjG7iQuLnVxLlEr/w7RXMQ7mnrod1ecCYtr16NchrcjoqHdl2acseNe4x 4wxThzSE5+xSl0egtvHx8O5hffYbIpA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:28 2025 by rpki-client