$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa File: a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa (raw, json) Hash identifier: mxFpclXeBPB0HEzVFVpqti78KNjf2KSb1+QvREXcMgg= Subject key identifier: 9E:63:80:4A:81:B9:8B:64:E5:5A:36:FD:02:70:2D:7B:8D:E5:14:78 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA598A9A8E630A67A5C0B80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 199.187.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:98:a9:a8:e6:30:a6:7a:5c:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e27fe752-f41a-4162-b0c0-7be8c9b9e460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:18:49:89:6a:90:5b:37:f3:43:3a:24:af:01: a1:f8:e2:a9:d0:2c:99:a8:b5:07:83:e1:72:b5:ed: 1d:60:2f:72:6f:72:9a:04:ee:a2:94:52:f3:d6:5b: d1:64:ef:3f:93:d4:e6:19:45:85:9d:32:0d:f6:81: 3b:33:a9:21:0e:92:1e:13:20:ce:89:30:dc:04:a4: af:d1:4f:69:fe:e2:51:d3:e0:7d:32:6f:4c:ea:50: 61:4f:5d:dd:4d:92:3d:9a:a7:bc:86:8a:07:9f:d0: 74:43:3d:6e:16:a8:56:bf:12:e3:40:24:5e:a8:3e: 03:68:2c:0f:8d:9f:39:f1:99:5e:5d:4c:a8:5d:c7: f8:3e:68:ae:4f:62:ed:be:35:4d:81:93:d8:d0:ee: 51:6c:9c:f0:4d:33:47:85:13:08:a6:68:87:62:31: 2f:9d:f3:44:72:1d:d6:cc:a1:c2:ff:30:2d:d2:d2: 40:54:e5:db:41:9c:0b:11:c2:19:57:f7:04:4b:e3: 08:5b:4f:7c:00:ff:e3:1d:f1:61:43:fc:43:e6:c8: 1e:cb:f3:71:96:7f:6e:c5:33:c3:7e:ab:af:8a:32: b1:75:26:18:ca:d6:a2:43:da:aa:04:06:31:df:b7: 65:ad:21:03:91:3f:66:75:19:04:4d:92:70:4a:0d: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:80:4A:81:B9:8B:64:E5:5A:36:FD:02:70:2D:7B:8D:E5:14:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:da:47:93:37:95:78:61:6e:9a:c6:80:3d:79:a7:52:26:9d: 6b:f2:e3:e9:13:95:72:f3:8a:6e:39:1e:66:fa:38:77:12:72: e5:00:c2:da:c5:db:ba:c5:6c:a9:8e:39:6d:8e:15:ae:13:e3: b3:91:0f:89:8f:82:9d:e0:af:08:30:5b:d7:b2:92:c7:a5:61: 48:c4:cd:0b:30:50:14:28:69:69:65:00:bc:69:c5:f3:9e:02: fd:e0:81:d1:06:6e:b6:93:83:28:93:d5:56:16:b5:03:d9:d3: e5:99:a7:20:bc:d4:10:fc:0a:27:04:33:46:b5:e7:f3:00:0d: 7e:11:8c:6a:e5:c5:41:d9:22:8e:1b:dd:f5:05:a1:a8:e6:fe: 23:c9:14:b0:8c:da:21:09:9c:ac:12:2d:3a:5b:06:ff:a7:92: 09:cc:8c:0c:1c:a4:c1:2a:ba:b6:dd:08:d8:ab:3a:3a:3e:47: e7:9c:a7:87:d3:d8:fb:a2:27:63:0f:f9:b8:ed:6a:13:b9:53: 93:65:4e:4e:e4:c9:d8:b8:4f:36:82:0d:d3:10:13:ac:8e:49: 8f:78:54:c1:72:97:fa:1c:95:b8:92:06:06:48:28:f4:3e:f6: 10:0d:21:94:58:e4:1e:b0:a4:d0:78:52:47:c5:eb:c1:b7:a6: f6:a4:1d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZipqOYwpnpcC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTI3ZmU3NTItZjQxYS00MTYyLWIwYzAtN2JlOGM5YjllNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBhJiWqQWzfzQzokrwGh+OKp0CyZqLUHg+Fy te0dYC9yb3KaBO6ilFLz1lvRZO8/k9TmGUWFnTIN9oE7M6khDpIeEyDOiTDcBKSv 0U9p/uJR0+B9Mm9M6lBhT13dTZI9mqe8hooHn9B0Qz1uFqhWvxLjQCReqD4DaCwP jZ858ZleXUyoXcf4PmiuT2LtvjVNgZPY0O5RbJzwTTNHhRMIpmiHYjEvnfNEch3W zKHC/zAt0tJAVOXbQZwLEcIZV/cES+MIW098AP/jHfFhQ/xD5sgey/Nxln9uxTPD fquvijKxdSYYytaiQ9qqBAYx37dlrSEDkT9mdRkETZJwSg3bWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5jgEqBuYtk5Vo2/QJwLXuN5RR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYTA4YmExYzktMzhhNy0z MWFkLWExNWUtMGM3MDQ0MTAyOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfaR5M3lXhhbprGgD15p1ImnWvy4+kTlXLzim45Hmb6OHcScuUAwtrF 27rFbKmOOW2OFa4T47ORD4mPgp3grwgwW9eykselYUjEzQswUBQoaWllALxpxfOe Av3ggdEGbraTgyiT1VYWtQPZ0+WZpyC81BD8CicEM0a15/MADX4RjGrlxUHZIo4b 3fUFoajm/iPJFLCM2iEJnKwSLTpbBv+nkgnMjAwcpMEqurbdCNirOjo+R+ecp4fT 2PuiJ2MP+bjtahO5U5NlTk7kydi4TzaCDdMQE6yOSY94VMFyl/oclbiSBgZIKPQ+ 9hANIZRY5B6wpNB4UkfF68G3pvakHe0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:32 2025 by rpki-client