$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa File: cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa (raw, json) Hash identifier: NmqWJvdIKEDC9V9gmt54hYlFJw+jRObrkGlMkqnBdZ8= Subject key identifier: CF:0A:63:E8:A7:01:1E:4C:06:19:EF:AB:B5:9F:39:65:D5:FC:2F:6C Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA598973DBF56DBBD08BE80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 199.187.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:98:97:3d:bf:56:db:bd:08:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=d8562e7b-513f-46ee-94a7-d06e1184199b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:7c:d6:67:ee:18:5e:e1:47:48:06:b2:13: f5:60:57:d0:d1:d1:ee:26:53:e5:53:7d:54:df:38: 10:f6:f6:af:2b:91:c8:e8:de:d1:8d:67:06:56:66: 26:2e:dd:7d:e5:bd:72:a9:99:d4:68:0d:97:2a:73: a5:0b:0d:b3:43:11:bb:44:15:80:8e:23:91:5e:d7: f1:87:ad:21:b6:40:80:87:30:6e:95:0e:36:22:8c: 01:a3:54:6d:93:97:c6:7d:db:0f:0c:ab:02:ca:d1: 7a:39:c3:3a:6f:de:03:5f:47:5c:99:ba:01:0c:4a: 44:7e:e6:a9:33:42:6b:c8:db:6d:75:e2:dc:05:4c: 07:42:24:48:3e:67:91:ed:b5:fb:88:32:c0:07:fe: 30:89:0e:6f:f1:80:c7:08:90:ff:44:74:ae:d1:3c: d9:0b:96:64:49:72:9b:9e:2c:2f:4a:44:19:34:58: af:49:15:89:a9:6d:ad:91:5d:0f:fe:5a:30:57:91: 59:22:cb:48:c0:30:ec:46:1a:e3:41:f8:d8:55:04: d9:dc:57:a6:ea:55:0b:cd:3a:e6:96:35:a9:bb:8d: ff:67:5b:eb:94:52:3e:de:69:8a:02:99:f6:21:62: 62:da:58:e0:42:64:14:f3:c7:bc:e1:0c:bd:f9:07: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:63:E8:A7:01:1E:4C:06:19:EF:AB:B5:9F:39:65:D5:FC:2F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:29:e0:c1:bd:5a:14:90:44:10:e0:28:c8:9a:38:89:e6:a0: 8f:57:0c:25:80:66:5c:f0:a2:ea:2e:a5:bd:5c:03:e7:89:a8: 0b:cf:d4:16:66:f8:71:41:30:29:56:88:4b:07:db:7b:59:a1: de:6d:32:04:03:f6:72:ab:82:96:7a:ec:fc:42:92:c5:c5:d6: 95:ab:2f:a1:ec:78:22:bd:aa:15:17:23:a2:97:6f:8d:46:4d: 9f:d9:9d:1a:03:02:41:6d:ee:17:b6:04:e7:5a:a2:54:36:07: da:9b:3a:7c:cb:8c:cd:0b:5b:59:5a:8d:cb:d5:56:8a:4c:5e: 2a:ed:66:4a:89:d5:7d:f6:df:13:21:c4:44:4b:09:c5:cc:cf: 7d:1c:9a:a4:16:86:f3:c3:3d:5e:b3:45:36:bb:9c:fb:2e:4d: e1:24:09:96:c7:2b:e9:36:38:31:9c:e3:8a:a4:40:5d:4c:d4: 29:e5:d5:24:f9:25:34:44:34:7e:36:df:3f:1c:30:ec:38:c5: 46:8a:dd:70:51:2d:b4:66:2f:0f:33:7a:c3:a1:8b:ed:d8:12: 2a:8a:c4:cf:3a:93:0d:36:ab:dd:0c:f3:cd:19:5c:e4:c1:2d: 44:62:5d:ac:31:72:38:3e:ad:31:38:3b:cf:a9:db:25:70:7e: 30:e6:d0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZiXPb9W270IvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZDg1NjJlN2ItNTEzZi00NmVlLTk0YTctZDA2ZTExODQxOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdJ81mfuGF7hR0gGshP1YFfQ0dHuJlPlU31U 3zgQ9vavK5HI6N7RjWcGVmYmLt195b1yqZnUaA2XKnOlCw2zQxG7RBWAjiORXtfx h60htkCAhzBulQ42IowBo1Rtk5fGfdsPDKsCytF6OcM6b94DX0dcmboBDEpEfuap M0JryNttdeLcBUwHQiRIPmeR7bX7iDLAB/4wiQ5v8YDHCJD/RHSu0TzZC5ZkSXKb niwvSkQZNFivSRWJqW2tkV0P/lowV5FZIstIwDDsRhrjQfjYVQTZ3Fem6lULzTrm ljWpu43/Z1vrlFI+3mmKApn2IWJi2ljgQmQU88e84Qy9+QcAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8KY+inAR5MBhnvq7WfOWXV/C9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvY2ZlOGY5NzItYjZlNS0z M2M1LWI3YjUtY2RmNDE3N2NkNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwp4MG9WhSQRBDgKMiaOInmoI9XDCWAZlzwououpb1cA+eJqAvP1BZm +HFBMClWiEsH23tZod5tMgQD9nKrgpZ67PxCksXF1pWrL6HseCK9qhUXI6KXb41G TZ/ZnRoDAkFt7he2BOdaolQ2B9qbOnzLjM0LW1lajcvVVopMXirtZkqJ1X323xMh xERLCcXMz30cmqQWhvPDPV6zRTa7nPsuTeEkCZbHK+k2ODGc44qkQF1M1Cnl1ST5 JTRENH423z8cMOw4xUaK3XBRLbRmLw8zesOhi+3YEiqKxM86kw02q90M880ZXOTB LURiXawxcjg+rTE4O8+p2yVwfjDm0Fk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:24 2025 by rpki-client