$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa File: 4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa (raw, json) Hash identifier: r9CL2pyzSxaDCV1yRXU3k8++Z45zNPLMhjXYsnMtzWI= Subject key identifier: 14:62:C3:0D:A0:7C:D3:F2:6B:A0:9A:09:0C:9D:61:6F:0A:9A:C5:AA Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584BBA1033274456B0273DEFE640 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 13649 IP address blocks: 199.101.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:33:27:44:56:b0:27:3d:ef:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=c5566f5e-47f2-48e7-af44-bc7f5bb05cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:da:2e:51:3a:41:29:8a:a7:10:41:8c:88: e4:05:a7:55:ff:51:b4:7b:86:a9:df:eb:1a:e4:31: bc:14:22:31:89:06:06:7f:94:cd:88:ac:f2:78:c8: b9:d2:85:4f:67:f5:f1:b0:ca:b1:a0:bc:af:45:4c: 65:99:7a:cd:a2:91:92:1d:e7:43:9d:6c:bf:c5:df: f9:f7:76:69:5a:19:3a:06:5d:77:64:92:2e:65:ce: 99:3a:88:87:2d:56:eb:20:32:50:4e:52:7a:8f:1a: 5f:71:cc:9d:c8:bb:f6:4c:89:9f:11:61:e9:a0:f4: f4:4c:bf:f7:61:cd:e1:f6:e0:7e:34:89:52:39:88: 61:4a:5f:d6:6d:fa:57:7e:84:cf:a9:f4:aa:2b:c4: 91:8b:d4:31:94:a0:4c:f3:c2:fe:35:11:ec:ba:6b: 6e:bc:6e:4a:c0:0f:19:1a:64:1e:99:31:d6:03:67: 6e:0d:aa:eb:81:56:80:47:58:25:f6:56:cf:fa:80: c3:80:2a:bf:bf:3b:12:98:89:7f:89:e3:fe:50:2a: 5f:70:43:2b:df:2b:bf:01:2d:33:d4:b2:70:ec:8f: 0f:9a:0b:01:e1:50:6f:4b:05:5c:16:6f:fe:6d:24: 96:c6:f5:22:ec:bc:8f:56:d7:a0:c6:a9:35:56:66: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:C3:0D:A0:7C:D3:F2:6B:A0:9A:09:0C:9D:61:6F:0A:9A:C5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c5:a9:ae:aa:ec:7d:78:19:d4:64:54:fb:99:90:9d:ea:93: 89:3b:74:d1:75:84:94:33:be:e1:a2:f7:97:26:a2:e9:67:f5: ad:c4:25:08:a6:e1:f9:13:23:04:89:3f:23:5d:8a:00:b1:52: 14:51:e1:6b:6e:f8:0b:68:66:be:e9:4d:16:c8:a4:4c:cf:71: 1e:08:6d:38:ba:0c:db:40:d4:1d:be:fa:a1:0c:79:d6:69:eb: 99:36:62:59:13:23:1d:68:e8:bf:76:7a:40:5c:d4:0c:f4:c3: 96:0c:2f:b7:bd:e8:5f:fb:00:62:a8:d4:3c:1b:10:ef:d8:e4: 33:50:9d:bb:ce:9a:06:71:8a:e4:54:ca:4e:36:79:05:57:70: 28:80:a2:19:de:67:d1:aa:c1:14:6f:df:17:2c:53:55:5e:43: 68:85:bd:b3:a7:36:57:38:f4:7e:fd:bc:7a:4b:6d:9b:66:53: 69:a1:28:9a:94:89:79:77:48:f6:86:88:e6:95:72:74:55:c6: 76:2d:41:f5:73:aa:1f:d1:2f:a2:dd:b2:15:52:69:12:ed:3e: 07:c4:f9:08:01:a1:f4:10:da:f2:e7:4d:e7:77:12:1a:5c:0a: c2:cf:0b:32:32:62:5b:7f:00:4f:a0:d0:b6:8b:3b:89:07:9a: 90:bb:5f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDMnRFawJz3v5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YzU1NjZmNWUtNDdmMi00OGU3LWFmNDQtYmM3ZjViYjA1Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVTaLlE6QSmKpxBBjIjkBadV/1G0e4ap3+sa 5DG8FCIxiQYGf5TNiKzyeMi50oVPZ/XxsMqxoLyvRUxlmXrNopGSHedDnWy/xd/5 93ZpWhk6Bl13ZJIuZc6ZOoiHLVbrIDJQTlJ6jxpfccydyLv2TImfEWHpoPT0TL/3 Yc3h9uB+NIlSOYhhSl/WbfpXfoTPqfSqK8SRi9QxlKBM88L+NRHsumtuvG5KwA8Z GmQemTHWA2duDarrgVaAR1gl9lbP+oDDgCq/vzsSmIl/ieP+UCpfcEMr3yu/AS0z 1LJw7I8PmgsB4VBvSwVcFm/+bSSWxvUi7LyPVtegxqk1VmbvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRiww2gfNPya6CaCQydYW8KmsWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNGFkYWQwM2ItYWZiNy0z N2FhLWIzMmYtYzNmYzA5N2I4YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2VuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Fqa6q7H14GdRkVPuZkJ3qk4k7dNF1hJQzvuGi95cmouln9a3EJQim 4fkTIwSJPyNdigCxUhRR4Wtu+AtoZr7pTRbIpEzPcR4IbTi6DNtA1B2++qEMedZp 65k2YlkTIx1o6L92ekBc1Az0w5YML7e96F/7AGKo1DwbEO/Y5DNQnbvOmgZxiuRU yk42eQVXcCiAohneZ9GqwRRv3xcsU1VeQ2iFvbOnNlc49H79vHpLbZtmU2mhKJqU iXl3SPaGiOaVcnRVxnYtQfVzqh/RL6LdshVSaRLtPgfE+QgBofQQ2vLnTed3Ehpc CsLPCzIyYlt/AE+g0LaLO4kHmpC7X0Q= -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:10 2025 by rpki-client