$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: 3/XPp+pk9YSdRCR4l67XTxbrZXhTRaWBCOUENVhf89g= Subject key identifier: 07:92:98:1D:FB:2C:86:D2:91:59:1C:B6:86:37:33:F0:50:33:B5:AC Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F4328584BA39D020B316F73AA13F5C080 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:02:0b:31:6f:73:aa:13:f5:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a483b25b-a180-425c-999b-33b71c04e8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:4c:85:fd:ab:a5:d8:d3:5d:da:1f:50:38: 65:c1:e5:04:f0:3b:47:ad:b5:38:2e:f4:a5:7f:ea: 7f:fb:a6:21:26:78:be:45:ab:22:16:50:99:56:e5: 0c:e8:09:af:de:63:8e:89:3f:75:f7:d8:78:7e:59: 3d:fa:21:b4:89:1d:72:76:e8:b6:62:a8:e1:75:d0: b5:6e:c1:d1:5f:61:53:e4:7e:25:cd:f8:83:6a:46: 3d:fe:7f:13:db:ff:71:c6:e2:de:15:f5:ac:31:26: 0e:0d:fe:37:92:ed:e7:c6:bb:68:44:42:6e:44:1f: 41:04:35:08:6f:5c:6d:d8:82:8d:48:e7:ed:8b:bd: 9f:30:d9:f0:76:45:28:c3:cf:7e:e7:eb:2d:49:ce: 60:41:32:76:ab:18:e3:f8:13:eb:b3:7d:8e:20:84: 14:57:a0:45:43:60:73:42:ed:bd:ad:6c:e4:b6:68: da:2d:88:78:e6:d0:19:ba:a0:f2:5d:05:c4:0a:05: b9:12:6e:4a:da:f4:cd:56:7e:d5:8a:79:50:18:17: 03:68:6d:53:f0:85:b4:9c:44:44:e0:0b:7b:0e:99: f6:4d:f3:37:a3:62:7f:70:55:66:c4:e9:d8:ba:8c: d3:2f:88:d7:57:26:d6:64:77:24:66:87:3f:0f:c9: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:92:98:1D:FB:2C:86:D2:91:59:1C:B6:86:37:33:F0:50:33:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3d:fb:b7:73:bd:37:e5:d7:e1:0e:15:6b:7d:5e:53:80:df: d3:e3:4b:74:9b:0f:24:6b:52:55:e9:9a:e7:80:ab:ec:0b:a6: e1:ff:bb:01:73:2c:e1:46:3c:ca:0b:d9:5e:9e:67:06:e7:4e: 25:2d:a5:42:c7:06:11:c6:42:96:7e:76:28:db:28:13:fa:0b: 37:e9:2d:e9:ee:26:6b:22:e3:1e:22:b5:a8:52:51:00:af:c9: 59:cc:8c:41:d4:c2:b6:bd:aa:06:96:2a:62:7d:76:0c:88:52: c3:14:23:38:92:3b:a7:dc:ce:c3:b7:54:8c:59:49:64:e0:83: 1d:e4:42:c4:dc:5f:54:7b:56:a4:44:79:4c:7d:5d:f4:72:55: 18:bd:c3:54:a7:60:81:c7:f0:ad:94:50:51:57:3a:ff:c2:11: ff:35:2d:09:42:aa:20:de:80:f5:8a:d2:be:41:b1:11:72:f0: a7:d6:5c:b0:15:1a:02:70:f3:f0:32:2d:eb:c2:83:44:79:26: 0c:c9:c7:e5:75:32:10:cf:ff:d7:d9:12:d4:dc:f2:4b:2d:38: 0e:23:8a:26:08:d7:f0:51:62:31:05:02:9f:6c:24:12:38:18: 61:f1:cf:0d:11:e3:d9:39:db:5e:a2:20:ed:3c:02:ab:d1:8f: 64:55:06:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQILMW9zqhP1wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTQ4M2IyNWItYTE4MC00MjVjLTk5OWItMzNiNzFjMDRlOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszZMhf2rpdjTXdofUDhlweUE8DtHrbU4LvSl f+p/+6YhJni+RasiFlCZVuUM6Amv3mOOiT9199h4flk9+iG0iR1ydui2YqjhddC1 bsHRX2FT5H4lzfiDakY9/n8T2/9xxuLeFfWsMSYODf43ku3nxrtoREJuRB9BBDUI b1xt2IKNSOfti72fMNnwdkUow89+5+stSc5gQTJ2qxjj+BPrs32OIIQUV6BFQ2Bz Qu29rWzktmjaLYh45tAZuqDyXQXECgW5Em5K2vTNVn7VinlQGBcDaG1T8IW0nERE 4At7Dpn2TfM3o2J/cFVmxOnYuozTL4jXVybWZHckZoc/D8m0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeSmB37LIbSkVkctoY3M/BQM7WsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs9+7dzvTfl1+EOFWt9XlOA39PjS3SbDyRrUlXpmueAq+wLpuH/uwFz LOFGPMoL2V6eZwbnTiUtpULHBhHGQpZ+dijbKBP6CzfpLenuJmsi4x4itahSUQCv yVnMjEHUwra9qgaWKmJ9dgyIUsMUIziSO6fczsO3VIxZSWTggx3kQsTcX1R7VqRE eUx9XfRyVRi9w1SnYIHH8K2UUFFXOv/CEf81LQlCqiDegPWK0r5BsRFy8KfWXLAV GgJw8/AyLevCg0R5JgzJx+V1MhDP/9fZEtTc8kstOA4jiiYI1/BRYjEFAp9sJBI4 GGHxzw0R49k5216iIO08AqvRj2RVBhM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:35 2025 by rpki-client