$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa File: 42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa (raw, json) Hash identifier: gJ3LmJAewnL6KPuh1cpa+pl0FUEkY7YMpEw9Q+wi1Zg= Subject key identifier: 33:0D:5E:30:40:31:A7:42:DF:CB:55:B9:6D:70:6A:97:C7:4B:A5:8B Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584BBB75A1A0D15DC2163BB34040 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 10753 IP address blocks: 200.229.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a1:a0:d1:5d:c2:16:3b:b3:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=345be829-fa84-4f91-accf-d7a7939a4a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:f6:97:32:4e:c9:02:b7:c8:5f:49:1e:ea: 33:93:5c:86:c4:a8:3a:72:77:a6:a4:15:e4:a3:19: 4b:75:37:a3:85:17:49:5f:cb:a6:74:14:a9:21:8d: 78:34:00:6b:74:10:d2:b9:4a:2e:c7:6b:71:f9:df: ba:01:7d:8f:9d:27:88:a1:50:ea:e2:fe:6e:5c:35: 81:12:03:05:16:23:8e:53:bf:00:ee:b4:ad:70:d3: de:b2:a0:83:ea:d5:71:e8:0b:4d:66:75:f5:c3:5a: 82:31:f9:8a:8f:54:5b:12:ab:a0:19:0e:2c:22:73: 04:c6:e7:54:54:ee:b5:40:2d:3f:10:60:d5:5c:6d: 0d:61:ae:ac:72:c0:96:34:8e:3d:8d:49:c1:10:5c: d5:77:c2:11:0d:83:87:b1:38:8b:ce:87:e1:50:53: 27:76:62:89:7e:11:82:0b:c6:09:95:fa:e8:b9:3c: 51:e3:aa:55:e6:98:3d:a9:f8:18:d8:a1:27:33:63: d4:7f:db:5e:b9:87:66:97:a4:fc:46:02:95:c2:7d: 38:b2:12:62:2a:53:d6:f8:63:39:b5:13:be:da:1d: 47:01:30:66:6e:ce:1c:ac:48:be:c8:ce:47:14:60: 7a:92:32:3c:68:f0:c9:1b:d0:70:e2:40:0e:51:65: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:5E:30:40:31:A7:42:DF:CB:55:B9:6D:70:6A:97:C7:4B:A5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b5:eb:70:bd:fa:36:98:7b:3b:5a:b8:99:9a:10:e2:78:6c: 61:1a:65:74:4e:5e:ac:05:9d:3a:e3:f9:66:f3:8f:47:45:24: 49:ef:72:c6:45:ca:81:46:a5:d3:03:ee:83:a0:ff:f9:d1:d4: 05:1d:ae:49:c9:da:da:24:c5:cf:ad:72:2e:27:bc:59:b9:22: a2:a9:2c:53:79:89:4a:e7:b2:81:9f:25:b8:2d:a0:54:65:f4: 9b:38:50:db:b0:af:f3:a3:3d:bc:13:7b:54:4e:9d:4a:c8:e9: 33:c6:1a:3e:04:18:23:4f:f7:07:03:9e:7f:aa:ca:b0:8f:9b: dc:46:9e:f9:3d:f1:2e:64:86:17:59:40:51:be:2c:59:28:84: 98:7b:d7:5f:19:96:fe:8b:8d:9e:64:bb:e5:b4:6c:51:7e:0a: a7:92:db:47:06:81:2d:73:50:f1:20:1d:45:b0:ad:b8:f7:8b: e0:4f:85:a6:3e:36:3b:e4:4b:e0:18:44:b2:0c:d2:fd:17:78: f8:be:91:ff:0e:05:b9:e6:85:ac:6a:95:a3:34:38:e5:e5:f7: 23:c1:01:0b:cb:6f:cd:29:97:b9:31:16:c8:cb:e2:46:29:2e: da:5a:28:d5:c4:48:65:79:fe:96:d2:99:29:89:1d:5a:41:11: e6:16:c4:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daGg0V3CFjuzQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzQ1YmU4MjktZmE4NC00ZjkxLWFjY2YtZDdhNzkzOWE0YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVf2lzJOyQK3yF9JHuozk1yGxKg6cnempBXk oxlLdTejhRdJX8umdBSpIY14NABrdBDSuUoux2tx+d+6AX2PnSeIoVDq4v5uXDWB EgMFFiOOU78A7rStcNPesqCD6tVx6AtNZnX1w1qCMfmKj1RbEqugGQ4sInMExudU VO61QC0/EGDVXG0NYa6scsCWNI49jUnBEFzVd8IRDYOHsTiLzofhUFMndmKJfhGC C8YJlfrouTxR46pV5pg9qfgY2KEnM2PUf9teuYdml6T8RgKVwn04shJiKlPW+GM5 tRO+2h1HATBmbs4crEi+yM5HFGB6kjI8aPDJG9Bw4kAOUWXXYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMNXjBAMadC38tVuW1wapfHS6WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDJlY2I4ZjUtZWI4YS0z ZmFjLWFjMDItMGRlZTdiMTM0ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2163C9+jaYeztauJmaEOJ4bGEaZXROXqwFnTrj+Wbzj0dFJEnvcsZF yoFGpdMD7oOg//nR1AUdrknJ2tokxc+tci4nvFm5IqKpLFN5iUrnsoGfJbgtoFRl 9Js4UNuwr/OjPbwTe1ROnUrI6TPGGj4EGCNP9wcDnn+qyrCPm9xGnvk98S5khhdZ QFG+LFkohJh7118Zlv6LjZ5ku+W0bFF+CqeS20cGgS1zUPEgHUWwrbj3i+BPhaY+ NjvkS+AYRLIM0v0XePi+kf8OBbnmhaxqlaM0OOXl9yPBAQvLb80pl7kxFsjL4kYp LtpaKNXESGV5/pbSmSmJHVpBEeYWxJE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:48 2025 by rpki-client