$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa File: 06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa (raw, json) Hash identifier: juH35/XNT2H+k7xjBMrHHTwC5t4ZSUrDzkyfJYI/PYU= Subject key identifier: 6D:53:D6:36:11:1E:8C:90:47:AC:E6:AE:90:50:49:0A:2C:29:72:95 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584BA39CFC1863357D9400CA5F80 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 13706 IP address blocks: 199.101.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fc:18:63:35:7d:94:00:ca:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f08ecfdb-4884-4024-9890-d48c563c0888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:ff:e9:53:c6:ec:b2:57:a4:5d:c4:23:5b: bc:ae:cd:cf:85:42:2e:af:c2:65:1d:af:16:05:06: e7:ad:1b:82:45:86:13:96:ab:2c:ed:fc:60:c2:12: 82:44:ac:e5:d0:17:9c:d2:c5:85:bd:bd:fc:cb:1c: 3e:5e:d4:4e:70:af:f5:f7:0c:fe:83:1e:61:04:39: aa:f1:3a:ac:bf:78:1f:fc:61:a6:95:ef:64:35:8f: 48:6b:25:75:b0:ad:98:dd:bf:a3:db:ac:e3:8d:57: e3:84:1d:7f:bc:e3:d7:29:37:df:f7:55:d8:f9:aa: 65:2d:66:0c:94:c0:7c:69:0f:37:53:17:8b:bc:45: e0:72:65:87:f5:61:65:2b:d7:83:61:5e:bd:2e:44: 3b:85:c3:55:28:63:a2:f9:84:99:0e:34:3d:c7:16: e7:fa:73:dc:5f:dd:68:dc:a7:68:be:a4:d4:c8:ca: 73:2e:f5:1e:e0:b3:4a:96:82:ee:93:9c:b6:80:15: f4:3b:0c:dd:b7:61:77:21:10:5c:07:47:81:57:0a: 3e:e1:02:ad:97:b4:42:c2:1c:23:b7:a2:00:58:97: 7e:3c:0b:74:37:70:84:3f:f0:91:8c:f8:65:9b:f3: 3d:22:6c:d7:35:6f:67:d1:1f:27:21:aa:e9:9f:27: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:D6:36:11:1E:8C:90:47:AC:E6:AE:90:50:49:0A:2C:29:72:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:82:c9:92:53:9e:a9:a4:b9:bb:5b:72:b1:1a:19:5f:09:02: 69:15:64:da:22:83:89:38:a3:66:d5:b0:7c:bb:be:3e:c5:9e: d3:7d:db:17:1b:ad:b4:4d:47:e9:d0:a3:15:92:1e:fd:af:9d: af:bf:68:08:8e:0b:5c:1c:87:e6:f6:f7:f2:6b:e8:dd:f1:ff: 4a:94:b0:fe:99:58:7b:be:42:05:79:43:7e:20:35:08:5d:84: df:20:2d:fd:54:37:8b:5c:e1:b6:fc:62:8d:78:5a:55:7f:ed: 36:e0:4c:4d:fe:dc:75:7b:9a:02:68:db:ee:b9:1d:10:4a:a5: f0:a3:2c:37:94:ea:47:d8:ff:51:a9:a3:28:d6:34:c0:b0:d2: 85:b1:eb:44:a0:51:ca:a7:cd:81:17:a8:7c:ac:24:6b:bb:a9: 17:22:49:87:11:d3:48:5f:91:92:86:e6:2d:65:c4:9c:5e:fb: 76:9c:79:36:61:6b:68:20:e9:8a:6f:9a:66:db:a6:62:b6:d4: c9:f3:85:1a:fc:77:7b:f4:4a:c3:8f:36:b1:10:8a:cf:6a:fa: d5:0f:d3:b2:5b:50:9a:4e:a1:28:51:1f:36:a8:5b:c1:7a:86: 7e:e3:8d:0d:4b:af:68:0b:e4:8c:52:5e:99:64:98:86:36:ea: bf:2b:45:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPwYYzV9lADKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjA4ZWNmZGItNDg4NC00MDI0LTk4OTAtZDQ4YzU2M2MwODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIf/6VPG7LJXpF3EI1u8rs3PhUIur8JlHa8W BQbnrRuCRYYTlqss7fxgwhKCRKzl0Bec0sWFvb38yxw+XtROcK/19wz+gx5hBDmq 8Tqsv3gf/GGmle9kNY9IayV1sK2Y3b+j26zjjVfjhB1/vOPXKTff91XY+aplLWYM lMB8aQ83UxeLvEXgcmWH9WFlK9eDYV69LkQ7hcNVKGOi+YSZDjQ9xxbn+nPcX91o 3KdovqTUyMpzLvUe4LNKloLuk5y2gBX0Owzdt2F3IRBcB0eBVwo+4QKtl7RCwhwj t6IAWJd+PAt0N3CEP/CRjPhlm/M9ImzXNW9n0R8nIarpnyfugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1T1jYRHoyQR6zmrpBQSQosKXKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMDZjZDFiOGEtODU0OS0z ZGY0LTk2ZmItY2Q1MGY4ZjcyMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOCyZJTnqmkubtbcrEaGV8JAmkVZNoig4k4o2bVsHy7vj7FntN92xcb rbRNR+nQoxWSHv2vna+/aAiOC1wch+b29/Jr6N3x/0qUsP6ZWHu+QgV5Q34gNQhd hN8gLf1UN4tc4bb8Yo14WlV/7TbgTE3+3HV7mgJo2+65HRBKpfCjLDeU6kfY/1Gp oyjWNMCw0oWx60SgUcqnzYEXqHysJGu7qRciSYcR00hfkZKG5i1lxJxe+3aceTZh a2gg6YpvmmbbpmK21MnzhRr8d3v0SsOPNrEQis9q+tUP07JbUJpOoShRHzaoW8F6 hn7jjQ1Lr2gL5IxSXplkmIY26r8rRSQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:58 2025 by rpki-client