$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa File: 3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json) Hash identifier: +gmrIuTyEVrO3v8ham2B1Cdq8SUtySQJfjlmsGtxz1Y= Subject key identifier: 02:BC:11:C2:21:BD:1D:37:82:A6:C6:AA:A3:3C:B3:F5:55:04:F0:49 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584BA39CFCB485BCE2CB493550C0 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30097 IP address blocks: 199.87.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fc:b4:85:bc:e2:cb:49:35:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=343ee433-0f78-43be-bd7c-986277137dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:64:4c:79:92:a9:6b:8a:02:dd:50:11:6b: 6d:26:3b:4a:82:29:a5:8e:cc:4c:00:9b:95:3f:07: 75:c6:f4:c2:09:0b:89:6a:8d:e0:33:4d:ae:30:df: 32:a4:2d:62:2a:34:25:ba:3b:89:4b:fc:52:e3:bc: b1:ce:64:a3:b7:9a:7e:da:98:51:a1:7f:dd:eb:2e: de:dd:b1:2f:ce:8a:56:9d:e3:6b:96:e0:41:ea:3c: 55:d8:e9:cf:38:ac:8c:a8:36:78:34:78:0e:31:a4: 52:cd:e7:2b:99:aa:d3:9f:7b:ca:5f:ee:2f:d6:36: e6:d9:69:89:59:51:a2:a7:25:1b:8f:5a:3f:3c:e5: 60:53:c0:24:37:c8:ed:51:86:18:16:93:68:47:e0: c5:9d:2e:ba:f0:7e:99:f3:0e:27:29:f0:21:41:36: 20:e4:20:8c:39:b0:45:51:6b:c5:7c:6d:20:55:26: cc:f9:1d:84:28:63:b9:1d:33:33:13:0c:53:f9:51: 92:05:65:a8:61:62:5b:f9:93:37:a4:69:a5:74:fc: 5c:98:31:18:1c:69:70:d8:6c:7e:ac:80:d5:6a:63: 06:56:15:9f:dd:80:a9:9a:27:da:2e:23:bf:f1:26: ed:b6:b0:c4:7d:a1:f8:c3:ed:a2:68:ac:48:77:8e: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:11:C2:21:BD:1D:37:82:A6:C6:AA:A3:3C:B3:F5:55:04:F0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 199.87.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:24:2f:cb:08:be:f2:df:f0:21:2a:e3:1f:57:93:37:08:87: 13:03:eb:05:b2:33:99:a9:aa:40:2a:f5:7c:d8:66:54:f3:1c: 5a:67:ca:8e:54:90:9b:26:1d:04:35:25:47:66:03:50:43:87: 98:71:e5:22:ea:4d:49:73:dd:8e:47:87:bd:c2:21:b0:b2:9c: c4:e1:bf:54:26:85:0d:31:3d:3d:f4:54:ce:61:bc:1e:ff:b9: 6e:b5:c7:72:c0:5f:ab:67:62:f5:41:d8:bc:d4:c8:1b:f0:dc: 61:da:71:c3:bd:75:32:a7:a0:c2:c1:45:9b:47:21:d6:0c:2e: ec:be:5e:e8:a1:10:f0:a3:01:08:0a:2b:d7:cf:92:c1:13:22: 69:ad:aa:77:d6:12:05:49:27:b1:0c:16:2e:67:cf:70:52:b7: ee:2d:fd:30:b1:f0:d2:a6:c2:89:42:ee:1d:8f:3c:ed:bf:7b: f4:4c:f4:0f:03:4e:16:2e:d0:0c:be:41:bb:f8:4c:31:28:1e: 16:a9:06:36:94:e4:b4:bc:d7:24:65:a1:60:35:41:ac:bb:a8: 9d:37:db:4d:33:e7:06:a1:1c:a5:ab:01:a4:a3:12:98:b9:b0: 98:b0:42:08:a2:0d:c2:b4:29:e2:21:52:99:31:7a:b3:2f:a8: 90:fb:5f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPy0hbziy0k1UMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzQzZWU0MzMtMGY3OC00M2JlLWJkN2MtOTg2Mjc3MTM3ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5kTHmSqWuKAt1QEWttJjtKgimljsxMAJuV Pwd1xvTCCQuJao3gM02uMN8ypC1iKjQlujuJS/xS47yxzmSjt5p+2phRoX/d6y7e 3bEvzopWneNrluBB6jxV2OnPOKyMqDZ4NHgOMaRSzecrmarTn3vKX+4v1jbm2WmJ WVGipyUbj1o/POVgU8AkN8jtUYYYFpNoR+DFnS668H6Z8w4nKfAhQTYg5CCMObBF UWvFfG0gVSbM+R2EKGO5HTMzEwxT+VGSBWWoYWJb+ZM3pGmldPxcmDEYHGlw2Gx+ rIDVamMGVhWf3YCpmifaLiO/8SbttrDEfaH4w+2iaKxId44hyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK8EcIhvR03gqbGqqM8s/VVBPBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvM2ZhZTE1ZTEtOTAwYS0z NzNlLWIzODYtZDA1MjkwNWM5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1csMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgkL8sIvvLf8CEq4x9XkzcIhxMD6wWyM5mpqkAq9XzYZlTzHFpnyo5U kJsmHQQ1JUdmA1BDh5hx5SLqTUlz3Y5Hh73CIbCynMThv1QmhQ0xPT30VM5hvB7/ uW61x3LAX6tnYvVB2LzUyBvw3GHaccO9dTKnoMLBRZtHIdYMLuy+XuihEPCjAQgK K9fPksETImmtqnfWEgVJJ7EMFi5nz3BSt+4t/TCx8NKmwolC7h2PPO2/e/RM9A8D ThYu0Ay+Qbv4TDEoHhapBjaU5LS81yRloWA1Qay7qJ03200z5wahHKWrAaSjEpi5 sJiwQgiiDcK0KeIhUpkxerMvqJD7X9E= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:22 2025 by rpki-client