$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa File: 6fa35cde-5df1-345d-be26-fa0c513a4da8.roa (raw, json) Hash identifier: Ml4PFGuBZnzJC4ajbo2rSlcG0hVCiB0AocrC2rLL32I= Subject key identifier: 47:2E:A1:4D:E9:3D:6F:6D:A6:10:E0:5C:E7:7A:B4:FB:13:FC:1D:BD Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B569F4CBFABC1C837176B3300 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa Signing time: Sat 27 Sep 2025 23:08:11 +0000 ROA not before: Sat 27 Sep 2025 23:08:11 +0000 ROA not after: Sat 27 Dec 2025 00:08:11 +0000 asID: 397325 IP address blocks: 199.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:9f:4c:bf:ab:c1:c8:37:17:6b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 23:08:11 2025 GMT Not After : Dec 27 00:08:11 2025 GMT Subject: CN=83b57342-6ca8-4069-9f70-98b67f154eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:6f:91:dd:c2:08:41:ad:0d:e8:4d:33:f1: b1:d8:02:16:c5:a4:71:0a:55:8c:c0:a6:97:90:47: 71:82:1a:c1:6b:14:bd:e3:7f:5b:c1:81:fd:62:cb: 80:03:71:74:ed:2b:c0:87:10:3d:16:9b:96:57:4c: 7b:3a:25:5e:63:60:72:cf:fd:e3:83:f0:75:9f:ef: 90:55:4e:60:45:0c:46:04:7d:99:f6:fd:71:19:be: f8:a1:3b:57:c4:fc:5b:68:3b:44:1a:a9:d4:5b:8f: 79:ce:85:5f:2f:79:0b:d5:c7:fe:84:49:30:2d:13: 31:9f:a9:c8:2e:9f:84:ea:96:06:0f:51:93:6b:99: 4d:ca:64:a8:27:10:85:1c:c3:4d:b5:64:54:e5:f4: 28:02:3e:16:96:42:03:78:13:16:fb:31:cb:74:cd: 4d:8a:5a:e1:09:f0:d3:21:77:dc:7d:f1:f4:4b:e5: 4f:96:f2:c8:34:79:eb:c1:4f:93:2c:e8:0b:f2:c5: ce:db:c9:6c:02:ba:1b:66:75:40:9a:7b:56:0a:9a: 51:ca:cb:56:70:d7:21:d3:28:b3:5e:b1:70:38:6f: 6e:98:f4:a7:aa:15:6c:4c:d5:0c:3d:6f:ed:47:a2: 7e:24:dc:ca:e1:1d:5e:7a:cc:d0:31:05:ec:4c:ea: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2E:A1:4D:E9:3D:6F:6D:A6:10:E0:5C:E7:7A:B4:FB:13:FC:1D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5e:ea:4e:6c:cb:33:bd:77:25:14:f9:67:0e:13:21:f9:84: 4b:f9:56:e6:95:0a:e7:65:b9:6b:ae:cf:04:43:c3:ab:9f:d9: 96:e9:38:38:00:cf:1a:11:13:22:7a:04:18:8a:de:0b:1e:e1: 8d:89:26:b3:cd:b7:ec:41:39:c4:bb:d1:26:f0:16:45:2a:4a: 0a:64:fb:6e:20:5a:94:0d:d8:eb:72:5b:90:11:45:de:8d:9f: 84:6f:ce:db:c1:cd:fa:1a:1e:28:25:9c:41:57:ee:b0:e4:21: 93:20:c4:50:a9:6b:6d:fc:1c:b8:60:b1:ed:dc:97:83:b8:80: ea:7e:95:28:ca:01:b2:1f:84:e4:96:d9:f9:e3:ea:90:1f:ce: a0:06:09:53:fa:db:0f:b1:ff:3d:be:73:6b:3f:a8:33:39:cb: c8:15:28:89:dc:10:68:5f:93:bb:df:96:09:a5:d3:24:55:0f: b5:11:55:4a:2d:ed:a0:b1:80:5e:89:99:53:83:73:b0:00:df: 8b:54:f3:77:d1:9c:bf:19:d5:26:af:95:f5:19:f3:7c:4b:3e: 4a:87:62:18:ec:ae:08:ac:2c:ad:1a:44:67:0b:ac:40:8b:38: 63:27:a0:43:26:2b:12:f2:11:1a:42:90:29:26:a9:b8:3b:74: 4b:9f:ba:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWn0y/q8HINxdrMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIzMDgxMVoXDTI1MTIyNzAwMDgxMVowLzEtMCsGA1UEAxMk ODNiNTczNDItNmNhOC00MDY5LTlmNzAtOThiNjdmMTU0ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu61vkd3CCEGtDehNM/Gx2AIWxaRxClWMwKaX kEdxghrBaxS9439bwYH9YsuAA3F07SvAhxA9FpuWV0x7OiVeY2Byz/3jg/B1n++Q VU5gRQxGBH2Z9v1xGb74oTtXxPxbaDtEGqnUW495zoVfL3kL1cf+hEkwLRMxn6nI Lp+E6pYGD1GTa5lNymSoJxCFHMNNtWRU5fQoAj4WlkIDeBMW+zHLdM1NilrhCfDT IXfcffH0S+VPlvLINHnrwU+TLOgL8sXO28lsArobZnVAmntWCppRystWcNch0yiz XrFwOG9umPSnqhVsTNUMPW/tR6J+JNzK4R1eeszQMQXsTOpIAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcuoU3pPW9tphDgXOd6tPsT/B29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNmZhMzVjZGUtNWRmMS0z NDVkLWJlMjYtZmEwYzUxM2E0ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVe6k5syzO9dyUU+WcOEyH5hEv5VuaVCudluWuuzwRDw6uf2ZbpODgA zxoREyJ6BBiK3gse4Y2JJrPNt+xBOcS70SbwFkUqSgpk+24gWpQN2OtyW5ARRd6N n4RvztvBzfoaHiglnEFX7rDkIZMgxFCpa238HLhgse3cl4O4gOp+lSjKAbIfhOSW 2fnj6pAfzqAGCVP62w+x/z2+c2s/qDM5y8gVKIncEGhfk7vflgml0yRVD7URVUot 7aCxgF6JmVODc7AA34tU83fRnL8Z1SavlfUZ83xLPkqHYhjsrgisLK0aRGcLrECL OGMnoEMmKxLyERpCkCkmqbg7dEufuiY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:48:41 2025 by rpki-client