$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa File: 8345228f-8d57-3f90-97d1-76ce96dca4d7.roa (raw, json) Hash identifier: wADUaFFD75qE/0Y+keZlICol6lC27Je9PS4tXQ/uBUs= Subject key identifier: A6:03:2F:51:84:37:49:E1:8C:2E:AC:71:10:7F:24:50:CB:E4:3C:A9 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584BB88D2F675CE37050B0736A00 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30041 IP address blocks: 199.187.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2f:67:5c:e3:70:50:b0:73:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=3aed7a36-df2e-4367-9da2-c531b77747e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:ca:8f:23:ef:3c:6b:ec:d7:58:1a:fd:39: 9b:91:b1:a5:55:51:7b:ca:2a:07:8b:fd:73:8f:7f: 9f:2b:70:ec:12:82:57:b5:ab:b4:20:e6:75:40:a4: cd:50:b3:6a:6a:da:db:01:2d:1b:a9:77:bc:5c:b2: d6:da:eb:f7:02:e6:45:d7:21:50:96:e5:6f:8d:6d: 05:ee:4b:c3:5a:ca:10:ce:58:87:c9:a7:f6:4c:6c: 69:9b:b9:4b:c8:48:52:af:90:96:bc:c7:c6:70:4d: 8d:42:53:14:03:6d:96:84:42:84:b6:19:29:55:29: 8d:9f:c0:58:f0:9d:06:00:20:d0:40:12:72:19:ed: e4:16:45:a1:28:24:d3:cd:cf:77:e3:8c:d1:4e:e7: 54:0d:74:03:ba:8f:17:be:3c:68:17:21:51:aa:68: 8d:72:de:ab:b3:7c:ec:8d:af:fe:f8:12:90:2b:06: 31:f0:fc:4f:5f:0d:0f:17:03:13:ec:68:a8:50:39: 42:4a:79:b3:62:29:1f:af:bb:0f:ea:6b:f7:fe:d9: 41:00:2d:e5:2d:ec:84:89:11:a0:99:03:36:72:3a: 83:38:25:24:a7:bc:91:c2:be:4e:e6:57:0d:75:fa: 61:a9:94:15:2a:09:5e:61:fc:ad:37:63:da:30:a9: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:03:2F:51:84:37:49:E1:8C:2E:AC:71:10:7F:24:50:CB:E4:3C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 199.187.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f9:aa:de:65:0a:da:69:63:42:ef:22:b8:e2:17:56:d0:b1: 3f:bd:4f:c5:45:36:70:62:4e:5a:ec:92:d5:ba:2a:7d:61:6e: a8:b2:f8:39:7e:ab:4b:94:2f:0c:85:95:9d:56:31:61:07:7d: 57:7c:e8:e7:79:7e:dd:49:7f:6d:a9:81:29:72:c3:07:35:88: 28:9e:7e:95:32:e4:ac:1c:1b:91:31:67:61:93:8f:5f:c9:a9: 2f:9e:87:82:9d:fc:c5:72:dd:b7:5f:09:95:ff:1b:9c:42:3a: f2:e2:28:78:3c:a5:8f:ac:5a:fe:d2:11:75:58:c8:e2:93:bf: 7f:a5:55:5c:59:f1:d3:e8:b5:7f:97:67:2e:d6:5b:4b:27:2c: a3:73:c9:7d:1f:21:d3:b1:a6:98:47:d9:45:b1:40:99:1c:25: ea:05:d4:40:76:04:e2:37:2d:ef:6b:de:60:92:d0:7b:02:1d: 38:0d:4e:a9:df:eb:18:b4:2b:ae:19:f9:2e:e5:e6:7c:c2:d9: 4a:6e:15:13:c6:e5:05:67:92:ca:7d:cd:7f:84:fc:83:e7:43: f6:7d:f5:56:70:c8:f2:0f:84:f0:59:e8:c5:85:34:60:a2:b6: 58:1e:42:d5:d9:d0:89:36:40:f2:6b:81:6c:2e:a8:6a:ad:4f: fa:4a:39:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jS9nXONwULBzagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2FlZDdhMzYtZGYyZS00MzY3LTlkYTItYzUzMWI3Nzc0N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPfKjyPvPGvs11ga/TmbkbGlVVF7yioHi/1z j3+fK3DsEoJXtau0IOZ1QKTNULNqatrbAS0bqXe8XLLW2uv3AuZF1yFQluVvjW0F 7kvDWsoQzliHyaf2TGxpm7lLyEhSr5CWvMfGcE2NQlMUA22WhEKEthkpVSmNn8BY 8J0GACDQQBJyGe3kFkWhKCTTzc9344zRTudUDXQDuo8XvjxoFyFRqmiNct6rs3zs ja/++BKQKwYx8PxPXw0PFwMT7GioUDlCSnmzYikfr7sP6mv3/tlBAC3lLeyEiRGg mQM2cjqDOCUkp7yRwr5O5lcNdfphqZQVKgleYfytN2PaMKm3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYDL1GEN0nhjC6scRB/JFDL5DypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvODM0NTIyOGYtOGQ1Ny0z ZjkwLTk3ZDEtNzZjZTk2ZGNhNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx7t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz5qt5lCtppY0LvIrjiF1bQsT+9T8VFNnBiTlrsktW6Kn1hbqiy+Dl+ q0uULwyFlZ1WMWEHfVd86Od5ft1Jf22pgSlywwc1iCiefpUy5KwcG5ExZ2GTj1/J qS+eh4Kd/MVy3bdfCZX/G5xCOvLiKHg8pY+sWv7SEXVYyOKTv3+lVVxZ8dPotX+X Zy7WW0snLKNzyX0fIdOxpphH2UWxQJkcJeoF1EB2BOI3Le9r3mCS0HsCHTgNTqnf 6xi0K64Z+S7l5nzC2UpuFRPG5QVnksp9zX+E/IPnQ/Z99VZwyPIPhPBZ6MWFNGCi tlgeQtXZ0Ik2QPJrgWwuqGqtT/pKOSc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:53 2025 by rpki-client