$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa File: 3ddaac33-6988-3df2-9f44-104187f88792.roa (raw, json) Hash identifier: DTPpEzKgf6urhDdrhoGk0gvocbK94ZDnzgDUBYCc/X4= Subject key identifier: 14:AF:1A:0A:C5:C8:47:5A:15:A2:03:AE:4F:E8:20:C5:3D:DE:7A:BE Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584BA51005337B9162B24EB56080 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa Signing time: Sun 26 Oct 2025 01:28:21 +0000 ROA not before: Sun 26 Oct 2025 01:28:21 +0000 ROA not after: Sat 24 Jan 2026 02:28:21 +0000 asID: 9304 IP address blocks: 199.101.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:10:05:33:7b:91:62:b2:4e:b5:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Oct 26 01:28:21 2025 GMT Not After : Jan 24 02:28:21 2026 GMT Subject: CN=3cdc8ece-86c8-466d-9a09-49840f6a5ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:cc:72:e1:70:86:62:49:c6:52:a1:6f:a6: 7e:81:c7:a3:ee:4c:f8:7e:78:c1:63:c3:18:b3:19: 7a:08:05:87:8c:82:44:39:47:6d:3b:2d:6e:fc:fb: 6c:1e:49:16:f2:50:99:92:37:17:33:0b:2f:1d:70: b3:7b:4e:a5:bb:e3:c5:3d:78:11:41:08:a8:0c:93: 29:6f:1c:ce:11:18:f5:f2:eb:d4:b5:f4:a2:72:22: e6:bb:dc:d4:40:ef:81:8b:bd:99:2a:b2:09:ca:2e: 01:6f:e0:1e:54:0b:62:b6:c0:cf:b9:e1:c0:b6:62: f3:e8:cb:2e:bf:e6:29:40:88:09:67:5b:4b:16:4d: 66:83:10:16:5d:87:56:22:00:98:d8:fe:c0:aa:42: f7:85:55:a3:a0:2a:31:cc:fd:0e:3a:8f:a6:94:28: 58:33:40:58:3d:7d:9b:a5:ee:9f:97:39:ad:8a:9d: 17:54:24:82:b8:54:46:6f:f8:97:e8:cf:ca:c9:d5: da:88:af:c9:5b:ac:26:51:48:b2:c1:1b:9b:76:2c: a9:1c:92:3a:36:fc:93:8d:e0:b1:56:13:7f:97:3e: b5:79:18:84:6d:21:64:8d:6b:e7:42:41:c4:c0:cc: 0e:ae:70:59:ba:50:cb:a6:9c:7e:75:67:50:e9:fc: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:1A:0A:C5:C8:47:5A:15:A2:03:AE:4F:E8:20:C5:3D:DE:7A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e6:c2:20:0e:0b:5b:dc:be:f6:52:db:e5:89:86:33:e2:e0: 3f:9f:aa:79:8d:02:ea:c1:2e:1d:b7:1a:ae:e0:55:09:d4:4f: 90:ab:fe:40:57:be:c7:10:89:8d:c4:0a:df:21:98:e1:f2:b2: e3:50:a1:3d:e8:23:9a:36:31:57:12:ae:3d:14:9f:90:d7:38: f0:eb:66:5c:71:62:22:3f:f4:c5:96:89:18:4a:bc:23:ea:de: cd:0c:94:f4:ff:88:cc:93:28:4a:5d:ff:2c:0a:cf:97:eb:d1: 50:5d:3a:63:2e:24:e2:b6:66:b3:98:ef:b7:15:8b:90:69:e2: da:11:b9:ac:10:1f:45:a4:46:5e:10:47:78:f8:30:ad:7a:c5: 8e:3c:82:f9:12:b0:03:c9:4f:e1:13:2f:bf:78:a7:53:d6:57: 21:3d:4d:a0:82:bd:bd:0b:3c:0c:e3:1c:f5:eb:5a:8c:b9:97: dd:81:6b:16:7a:8c:78:0a:b2:29:3d:c5:1c:ea:77:1f:2f:09: e2:0a:4c:45:f1:41:6b:d5:5a:86:9b:41:3a:9d:c2:16:6d:07: 19:8a:fa:70:fc:70:3c:2e:f2:49:28:30:78:6d:50:28:3c:5a: 14:e0:04:be:fd:e4:eb:57:48:76:99:9e:96:6e:78:d3:a0:63: 84:8d:8d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulEAUze5Fisk61YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MTAyNjAxMjgyMVoXDTI2MDEyNDAyMjgyMVowLzEtMCsGA1UEAxMk M2NkYzhlY2UtODZjOC00NjZkLTlhMDktNDk4NDBmNmE1ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16TMcuFwhmJJxlKhb6Z+gcej7kz4fnjBY8MY sxl6CAWHjIJEOUdtOy1u/PtsHkkW8lCZkjcXMwsvHXCze06lu+PFPXgRQQioDJMp bxzOERj18uvUtfSiciLmu9zUQO+Bi72ZKrIJyi4Bb+AeVAtitsDPueHAtmLz6Msu v+YpQIgJZ1tLFk1mgxAWXYdWIgCY2P7AqkL3hVWjoCoxzP0OOo+mlChYM0BYPX2b pe6flzmtip0XVCSCuFRGb/iX6M/KydXaiK/JW6wmUUiywRubdiypHJI6NvyTjeCx VhN/lz61eRiEbSFkjWvnQkHEwMwOrnBZulDLppx+dWdQ6fwyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSvGgrFyEdaFaIDrk/oIMU93nq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvM2RkYWFjMzMtNjk4OC0z ZGYyLTlmNDQtMTA0MTg3Zjg4NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvmwiAOC1vcvvZS2+WJhjPi4D+fqnmNAurBLh23Gq7gVQnUT5Cr/kBX vscQiY3ECt8hmOHysuNQoT3oI5o2MVcSrj0Un5DXOPDrZlxxYiI/9MWWiRhKvCPq 3s0MlPT/iMyTKEpd/ywKz5fr0VBdOmMuJOK2ZrOY77cVi5Bp4toRuawQH0WkRl4Q R3j4MK16xY48gvkSsAPJT+ETL794p1PWVyE9TaCCvb0LPAzjHPXrWoy5l92BaxZ6 jHgKsik9xRzqdx8vCeIKTEXxQWvVWoabQTqdwhZtBxmK+nD8cDwu8kkoMHhtUCg8 WhTgBL795OtXSHaZnpZueNOgY4SNjTQ= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:50 2025 by rpki-client