$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa File: 920c6ec6-7efb-3c87-816c-5a28d6317241.roa (raw, json) Hash identifier: 2/jxOzA8EfqWqErRIwNZ4Cs9QJe9ScWHR4aKKU0d3Y8= Subject key identifier: 9D:BF:2E:57:2C:5F:C5:43:3D:A9:AF:0A:BB:CC:54:12:B1:45:E8:35 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B8D9B39BC4FC3734F6CFAC580 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa Signing time: Fri 17 Oct 2025 15:49:26 +0000 ROA not before: Fri 17 Oct 2025 15:49:26 +0000 ROA not after: Thu 15 Jan 2026 16:49:26 +0000 asID: 18526 IP address blocks: 200.229.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:9b:39:bc:4f:c3:73:4f:6c:fa:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 17 15:49:26 2025 GMT Not After : Jan 15 16:49:26 2026 GMT Subject: CN=450efb16-3b19-4985-8183-a7e7cc9c9ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:02:d0:9b:c8:e6:92:55:9b:19:20:73:1e: 35:44:bb:f8:95:df:42:67:7e:3c:f0:e0:1e:b4:39: 93:93:34:5a:74:68:7a:03:78:60:e7:6e:bc:6e:64: 39:a1:d1:f7:bf:a3:bc:f3:ad:66:0a:cc:17:42:c0: 6e:69:8d:d7:68:1d:b6:0b:78:33:31:0f:2a:d5:40: 10:60:05:1b:71:aa:b6:f8:12:4e:f5:7e:c0:14:db: 40:db:1a:a6:e9:9c:4d:01:13:dc:47:13:18:cd:df: 1a:70:94:e9:eb:0f:e3:82:21:8c:ac:d8:56:5c:3a: a3:41:09:35:fa:77:91:43:61:6a:13:90:75:ff:ad: d4:fd:9e:46:2c:11:4f:e6:78:7f:53:16:74:41:a3: ae:b7:eb:03:f8:79:0d:8a:b2:2a:d1:82:6d:fe:85: 54:b2:8d:65:1f:9e:3d:88:5a:f6:0c:c4:58:d4:23: dd:f8:78:c4:03:4f:7c:e9:d5:ec:85:6b:8a:55:d0: 96:ae:3b:10:38:e0:30:03:11:ef:f4:f9:c2:ed:16: ad:d9:ca:62:d2:ff:ff:e7:cb:a3:72:7f:46:0f:7d: 7c:63:b6:77:f2:b4:29:2d:16:e5:57:ed:3f:77:54: b7:c8:35:5c:64:ac:48:c7:8b:99:73:c7:73:91:5c: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BF:2E:57:2C:5F:C5:43:3D:A9:AF:0A:BB:CC:54:12:B1:45:E8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/920c6ec6-7efb-3c87-816c-5a28d6317241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ed:86:22:e9:d0:17:e7:cf:0a:73:6d:5f:25:12:d9:78:e3: 93:17:9d:c4:21:fe:58:e3:5b:39:b6:d3:a3:9c:8b:4f:7b:e6: e6:f6:8b:ad:39:1c:c6:a5:41:a8:4e:41:03:3a:a3:3b:be:bb: ce:8d:ec:13:68:8e:bc:14:9d:c3:cb:dc:5b:6a:2d:05:a6:49: 11:ef:8d:fe:9e:04:65:3b:44:1e:bf:b0:b7:79:ee:6c:5b:a7: 45:20:b5:96:d3:da:dc:70:27:09:64:47:07:29:cf:69:61:88: 41:6f:36:fc:35:3a:1d:06:67:d5:81:aa:e0:e2:92:59:1d:ef: 67:5d:68:92:74:55:40:cc:dd:da:82:d4:34:28:0a:22:b4:15: 2d:c3:d8:6f:48:0b:c3:da:60:bb:8e:fb:da:19:75:a8:21:03: 1c:5e:57:7c:40:45:eb:32:14:44:94:c7:81:44:30:59:49:ac: 2d:b2:97:29:eb:97:14:95:0b:5d:e9:ed:8d:a8:71:5b:0e:06: 87:6c:83:58:1f:72:07:55:35:8b:26:2f:65:83:fa:0d:e8:ac: b6:69:31:d0:2e:96:af:33:8d:87:4a:66:9c:86:64:57:7b:43: 05:ce:66:fb:5a:d5:42:a9:a1:d8:54:d3:8b:52:c0:55:12:6b: c2:db:28:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNmzm8T8NzT2z6xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTAxNzE1NDkyNloXDTI2MDExNTE2NDkyNlowLzEtMCsGA1UEAxMk NDUwZWZiMTYtM2IxOS00OTg1LTgxODMtYTdlN2NjOWM5Y2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv54C0JvI5pJVmxkgcx41RLv4ld9CZ3488OAe tDmTkzRadGh6A3hg5268bmQ5odH3v6O8861mCswXQsBuaY3XaB22C3gzMQ8q1UAQ YAUbcaq2+BJO9X7AFNtA2xqm6ZxNARPcRxMYzd8acJTp6w/jgiGMrNhWXDqjQQk1 +neRQ2FqE5B1/63U/Z5GLBFP5nh/UxZ0QaOut+sD+HkNirIq0YJt/oVUso1lH549 iFr2DMRY1CPd+HjEA0986dXshWuKVdCWrjsQOOAwAxHv9PnC7Rat2cpi0v//58uj cn9GD318Y7Z38rQpLRblV+0/d1S3yDVcZKxIx4uZc8dzkVzXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2/LlcsX8VDPamvCrvMVBKxReg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOTIwYzZlYzYtN2VmYi0z Yzg3LTgxNmMtNWEyOGQ2MzE3MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnthiLp0BfnzwpzbV8lEtl445MXncQh/ljjWzm206Oci0975ub2i605 HMalQahOQQM6ozu+u86N7BNojrwUncPL3FtqLQWmSRHvjf6eBGU7RB6/sLd57mxb p0UgtZbT2txwJwlkRwcpz2lhiEFvNvw1Oh0GZ9WBquDiklkd72ddaJJ0VUDM3dqC 1DQoCiK0FS3D2G9IC8PaYLuO+9oZdaghAxxeV3xAResyFESUx4FEMFlJrC2ylynr lxSVC13p7Y2ocVsOBodsg1gfcgdVNYsmL2WD+g3orLZpMdAulq8zjYdKZpyGZFd7 QwXOZvta1UKpodhU04tSwFUSa8LbKGI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:59 2025 by rpki-client