$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa File: fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa (raw, json) Hash identifier: jVfBrLvkIuoClzRzNj8tXQ3ixJlVkJYw43oLrW8wwRc= Subject key identifier: B5:3C:8E:46:BF:67:DA:C5:20:20:5C:3C:6F:C8:CC:68:8C:72:A5:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD738311782889C04BDDC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 199.223.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:73:83:11:78:28:89:c0:4b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7a415d88-da83-45c3-b28d-3303dbba0690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:c4:78:16:48:86:81:17:3b:1b:3d:6b:01: b8:20:56:3b:1b:99:89:94:80:83:9e:2f:8c:d1:50: f9:fc:d9:bb:2e:ea:c5:88:96:78:1d:66:34:3e:ce: ba:d6:d0:d0:d6:b3:f1:16:96:f4:3c:fb:3d:a5:09: be:79:5b:b4:61:cd:3d:47:3d:2c:f8:ed:f3:66:4a: 76:65:ed:82:91:b8:b2:b0:41:bd:d4:6b:8b:61:7d: 08:c3:82:92:3b:3d:29:95:87:35:95:8a:96:7d:9a: 33:35:8a:31:51:26:85:1c:eb:ee:9c:45:ba:95:c5: 0e:02:47:24:e2:97:32:12:d8:11:dd:cd:df:ef:9b: 34:b6:e7:c5:37:64:cd:28:91:12:fb:c6:4c:ea:93: 01:cb:74:f9:11:d3:33:fb:93:54:7e:30:a2:bc:26: 83:2e:d4:ce:4c:f2:f2:b7:05:af:30:41:83:d1:1b: cf:f2:36:95:27:07:68:27:fb:8f:9e:60:01:80:a4: e0:d6:e2:51:85:48:59:a6:fb:f2:a2:f9:b9:47:63: 0f:93:04:e6:aa:36:17:58:d6:2d:3a:65:60:80:08: ee:8b:11:ae:50:5d:f1:1a:cd:0e:cc:6c:47:97:1f: 66:f4:68:6b:e6:da:16:d7:1e:2a:34:b7:3d:f8:ac: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3C:8E:46:BF:67:DA:C5:20:20:5C:3C:6F:C8:CC:68:8C:72:A5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a4:6b:ca:a1:43:f1:d0:41:fb:f4:60:ed:fe:f4:e8:f2:3a: 10:df:96:23:00:0e:c0:86:bd:0f:84:d9:a5:ac:f7:4f:b2:f5: 1b:f6:1d:2f:09:0e:5c:ef:07:e2:1f:c0:47:aa:7f:be:f7:bd: 2a:a6:71:72:40:6d:12:09:29:02:9d:9e:80:fa:54:08:ae:20: 15:c5:d3:57:43:fd:77:74:c0:bb:52:e4:25:bf:fc:12:b7:d0: 56:e3:74:c1:4b:d5:f6:6a:29:c1:17:3f:8c:9b:71:07:9f:f0: 5c:83:6f:da:af:57:05:5a:f4:c4:2a:fe:29:e1:3f:1c:ce:5f: a3:55:30:63:99:5b:42:42:92:9d:2b:a1:f1:20:59:a5:8e:f6: db:25:e2:c3:3f:39:c5:9e:40:16:12:ea:0c:4d:d2:d5:04:64: 47:31:f1:3b:25:da:99:a3:56:ff:f7:f3:b5:b0:76:c0:0a:09: 38:a5:9e:55:46:9d:59:c5:3f:13:51:10:1e:e4:38:29:2f:bf: 8c:60:23:40:ae:be:b3:e0:b5:50:2c:ea:7e:07:69:6a:46:77: ba:d1:ca:7e:34:2a:d1:fc:e0:35:32:17:0c:19:de:3a:97:85: 1f:29:01:2a:56:bf:c6:b8:b8:25:79:55:29:1a:d0:5e:83:81: 99:81:d9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXODEXgoicBL3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2E0MTVkODgtZGE4My00NWMzLWIyOGQtMzMwM2RiYmEwNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8vEeBZIhoEXOxs9awG4IFY7G5mJlICDni+M 0VD5/Nm7LurFiJZ4HWY0Ps661tDQ1rPxFpb0PPs9pQm+eVu0Yc09Rz0s+O3zZkp2 Ze2CkbiysEG91GuLYX0Iw4KSOz0plYc1lYqWfZozNYoxUSaFHOvunEW6lcUOAkck 4pcyEtgR3c3f75s0tufFN2TNKJES+8ZM6pMBy3T5EdMz+5NUfjCivCaDLtTOTPLy twWvMEGD0RvP8jaVJwdoJ/uPnmABgKTg1uJRhUhZpvvyovm5R2MPkwTmqjYXWNYt OmVggAjuixGuUF3xGs0OzGxHlx9m9Ghr5toW1x4qNLc9+KxpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU8jka/Z9rFICBcPG/IzGiMcqUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmNhMTQwNDYtZTFiNy0z MmRkLWFjMzItZWU0NDE0Yjg3YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESka8qhQ/HQQfv0YO3+9OjyOhDfliMADsCGvQ+E2aWs90+y9Rv2HS8J DlzvB+IfwEeqf773vSqmcXJAbRIJKQKdnoD6VAiuIBXF01dD/Xd0wLtS5CW//BK3 0FbjdMFL1fZqKcEXP4ybcQef8FyDb9qvVwVa9MQq/inhPxzOX6NVMGOZW0JCkp0r ofEgWaWO9tsl4sM/OcWeQBYS6gxN0tUEZEcx8Tsl2pmjVv/387WwdsAKCTilnlVG nVnFPxNREB7kOCkvv4xgI0CuvrPgtVAs6n4HaWpGd7rRyn40KtH84DUyFwwZ3jqX hR8pASpWv8a4uCV5VSka0F6DgZmB2SI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:31 2025 by rpki-client