$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa File: de1bc31c-8942-32b8-94cf-739ae5317afb.roa (raw, json) Hash identifier: Esns+LnI6/hccyhguM7vr1Q8A21NVte96OXj596QHEk= Subject key identifier: 55:3A:BB:B9:5C:85:AA:30:1F:CE:16:FD:5D:87:7A:64:93:1C:0F:E9 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA591A8ECF94C1C0171FE80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 199.187.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:91:a8:ec:f9:4c:1c:01:71:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e86fc76a-b01a-4d3a-af53-b5b7149efbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:36:2a:94:e3:83:f4:a6:90:65:71:a1:88: 5f:bd:ac:a8:50:3b:6d:c7:d1:fe:71:9d:69:8d:bd: 3a:5f:32:a4:52:36:3d:8e:9e:8c:47:69:11:2b:fe: 73:c5:a8:62:a4:10:73:b2:45:5a:50:38:e6:2d:46: 01:d5:15:ca:d7:cc:ff:a1:a8:86:e5:c0:c1:20:79: f5:a2:33:ec:7f:e9:53:d0:5a:de:85:0b:2a:54:06: 49:02:85:f7:0d:44:61:89:d8:c8:6d:c8:dd:ca:a1: f8:13:ee:3f:1a:7c:7b:a6:ea:e4:db:f7:0a:3b:13: fc:87:d2:c8:32:aa:a4:71:51:f1:68:a3:29:e2:38: a8:f5:20:89:e8:13:ab:e9:3d:6e:3b:0b:dc:ae:7f: 85:35:12:14:f8:36:69:56:4e:8b:28:52:0d:2b:02: 81:ba:0b:f4:5d:5e:b6:c2:1f:88:97:8d:ce:1a:94: 51:62:df:91:31:5f:12:84:47:2d:4f:5c:71:9a:bf: 2b:51:80:14:b1:4d:08:0c:85:d0:d5:71:89:c5:48: d9:ab:10:c0:52:7f:69:11:99:b1:ce:23:4c:3a:4f: 8d:55:fc:bd:25:67:a5:20:26:54:3d:1a:fb:a0:b2: 09:25:7f:7e:a9:1e:19:e7:46:17:94:d4:85:e7:2c: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:BB:B9:5C:85:AA:30:1F:CE:16:FD:5D:87:7A:64:93:1C:0F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ff:cf:6e:99:0e:7e:e4:76:e1:7c:f1:79:d0:ef:70:6a:f7: c9:4d:88:8f:33:44:00:fa:8a:01:da:19:94:d1:b3:5e:bc:cc: e1:ba:2e:36:22:0b:d0:86:e0:cb:6b:d8:e4:37:cf:20:84:30: 73:aa:a8:21:6b:97:6b:81:cb:97:04:06:b4:ef:37:bd:38:f2: 9d:cb:f3:01:3f:94:4c:3a:11:ae:cc:83:5d:8b:b8:00:eb:32: 2a:2f:de:56:18:00:c7:94:35:be:f8:be:5d:73:29:16:5c:5f: ef:f8:51:52:0d:39:6a:c0:0b:f6:79:59:0b:e4:d2:b8:ea:83: 90:53:30:15:d9:87:5e:c9:63:98:83:90:7a:a0:ba:85:9c:fa: e4:96:03:3a:e5:38:f5:2f:d5:f8:f3:7e:5b:75:55:26:8d:55: d0:ed:69:bb:15:98:32:9e:00:93:cd:93:80:d9:14:d8:c6:e3: 3e:95:ee:d3:a9:63:9f:63:18:92:e0:77:b7:dd:72:1f:3f:db: 26:02:c4:59:67:a2:aa:48:93:a5:e7:6f:73:03:1a:f0:8d:c7: a6:24:32:14:33:3a:6e:67:09:25:46:2d:f7:7d:3f:81:82:a4: d3:5c:af:d9:50:5d:d9:f6:11:03:47:0e:c5:00:79:a4:5f:9e: cb:ff:32:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZGo7PlMHAFx/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTg2ZmM3NmEtYjAxYS00ZDNhLWFmNTMtYjViNzE0OWVmYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MI2KpTjg/SmkGVxoYhfvayoUDttx9H+cZ1p jb06XzKkUjY9jp6MR2kRK/5zxahipBBzskVaUDjmLUYB1RXK18z/oaiG5cDBIHn1 ojPsf+lT0FrehQsqVAZJAoX3DURhidjIbcjdyqH4E+4/Gnx7purk2/cKOxP8h9LI MqqkcVHxaKMp4jio9SCJ6BOr6T1uOwvcrn+FNRIU+DZpVk6LKFINKwKBugv0XV62 wh+Il43OGpRRYt+RMV8ShEctT1xxmr8rUYAUsU0IDIXQ1XGJxUjZqxDAUn9pEZmx ziNMOk+NVfy9JWelICZUPRr7oLIJJX9+qR4Z50YXlNSF5ywDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU6u7lchaowH84W/V2HemSTHA/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvZGUxYmMzMWMtODk0Mi0z MmI4LTk0Y2YtNzM5YWU1MzE3YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7urMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT/z26ZDn7kduF88XnQ73Bq98lNiI8zRAD6igHaGZTRs168zOG6LjYi C9CG4Mtr2OQ3zyCEMHOqqCFrl2uBy5cEBrTvN7048p3L8wE/lEw6Ea7Mg12LuADr Miov3lYYAMeUNb74vl1zKRZcX+/4UVINOWrAC/Z5WQvk0rjqg5BTMBXZh17JY5iD kHqguoWc+uSWAzrlOPUv1fjzflt1VSaNVdDtabsVmDKeAJPNk4DZFNjG4z6V7tOp Y59jGJLgd7fdch8/2yYCxFlnoqpIk6Xnb3MDGvCNx6YkMhQzOm5nCSVGLfd9P4GC pNNcr9lQXdn2EQNHDsUAeaRfnsv/Mo0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:26 2025 by rpki-client