$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa File: 70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa (raw, json) Hash identifier: srmjuqje2TNW3F4rWguPJG7fYcg+ZcFL9WBQTXjOGrY= Subject key identifier: 74:FB:9C:83:74:FF:CE:C0:79:F3:B2:86:D3:80:52:DA:7D:1C:17:DE Certificate issuer: /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c Certificate serial: 010D0C9F4328584BA39D0D9031B0B01B2F60D0C0 Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 11269 IP address blocks: 199.193.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0d:90:31:b0:b0:1b:2f:60:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3453a9c5-5d03-413c-bb9f-a2f6032b41c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:6c:52:c9:30:2b:c3:65:56:7d:98:a5:de: b1:ba:f8:9f:65:23:cc:1e:ef:42:3f:9a:d4:76:ba: e1:04:fc:98:d1:9f:99:c3:fe:c7:eb:a9:d2:2f:a9: 65:02:12:96:19:4e:85:d0:af:9f:d5:10:c9:37:1e: 3f:b9:7d:ce:f6:05:d3:07:6b:c4:c7:08:ad:79:a2: 69:98:1a:36:19:57:2b:f5:88:34:34:35:0f:76:6d: 7a:54:85:29:5c:70:88:52:6a:6b:be:c1:e0:c9:82: ea:74:92:63:26:91:1e:26:58:98:6c:a3:cc:01:4f: ed:80:6c:ad:76:8f:61:52:73:f7:24:4a:82:f9:6f: 71:61:d4:0c:f5:fa:98:dc:be:25:06:02:89:ee:71: c2:bb:46:0e:ad:01:22:3b:5e:5b:1f:02:72:1d:8d: e6:42:89:11:00:f4:53:fc:ff:d8:f3:a0:9a:e5:cd: 31:89:af:5a:b5:6a:e4:0e:14:ca:90:22:70:19:17: 36:85:79:73:ae:9b:cc:4a:51:38:7f:7d:41:d2:90: c9:ee:42:94:93:bb:b3:cc:94:12:15:26:d1:57:5b: b4:49:f9:13:b6:28:3c:e6:7b:58:35:ee:85:fc:dc: 3e:89:55:7f:52:c6:1c:cd:c2:b9:6f:bb:e9:bd:10: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:9C:83:74:FF:CE:C0:79:F3:B2:86:D3:80:52:DA:7D:1C:17:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl X509v3 Authority Key Identifier: keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer sbgp-ipAddrBlock: critical IPv4: 199.193.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:48:02:af:66:aa:10:07:e3:b1:11:aa:5d:33:bb:87:6f:0e: fe:f6:66:2f:b1:2a:5b:cd:d8:22:7e:21:07:a7:da:56:ef:76: d5:5c:14:b3:c1:29:28:fe:73:1b:03:3c:ae:5d:65:f9:90:64: 0e:c2:bb:cc:60:a0:f8:fc:ee:68:fa:84:80:cb:24:60:b1:24: 2e:b9:b4:3d:4c:07:87:10:2e:19:c6:f3:80:c5:71:1d:41:ab: 28:88:7d:7f:4f:06:01:8d:d0:12:64:db:e2:da:c0:a9:ba:9c: ab:97:0d:68:be:ca:a8:37:13:61:17:8d:8b:48:e1:8d:fb:4f: 3e:2f:4a:f9:f4:e1:aa:2c:44:c0:78:1f:7d:33:2c:4b:c1:2f: 06:63:cd:03:11:40:3e:57:8f:50:46:8d:6d:f1:d1:34:6b:ae: 97:b4:66:74:b6:97:4d:87:ab:1c:96:ed:c5:4f:7a:dd:ce:2d: c5:2f:81:af:a6:11:d8:30:10:0d:52:45:1a:e6:b2:33:9f:4e: 3b:85:e6:c0:84:4b:c4:81:74:9a:bb:86:6b:de:b2:84:b2:b4: e1:e4:64:51:51:46:0d:ff:88:98:ae:0d:ea:c5:a7:e3:25:55: 1d:25:08:b3:32:27:9f:7f:0b:59:11:97:70:b1:b3:42:33:8c: 26:83:a8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQ2QMbCwGy9g0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3 MTRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzQ1M2E5YzUtNWQwMy00MTNjLWJiOWYtYTJmNjAzMmI0MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYhsUskwK8NlVn2Ypd6xuvifZSPMHu9CP5rU drrhBPyY0Z+Zw/7H66nSL6llAhKWGU6F0K+f1RDJNx4/uX3O9gXTB2vExwiteaJp mBo2GVcr9Yg0NDUPdm16VIUpXHCIUmprvsHgyYLqdJJjJpEeJliYbKPMAU/tgGyt do9hUnP3JEqC+W9xYdQM9fqY3L4lBgKJ7nHCu0YOrQEiO15bHwJyHY3mQokRAPRT /P/Y86Ca5c0xia9atWrkDhTKkCJwGRc2hXlzrpvMSlE4f31B0pDJ7kKUk7uzzJQS FSbRV1u0SfkTtig85ntYNe6F/Nw+iVV/UsYczcK5b7vpvRAfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT7nIN0/87AefOyhtOAUtp9HBfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvNzBjY2M0NjgtZmY2Yi0z NDI0LThmZWEtN2I0OGNlNTI2M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1 YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5 NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0 NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8HkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtIAq9mqhAH47ERql0zu4dvDv72Zi+xKlvN2CJ+IQen2lbvdtVcFLPB KSj+cxsDPK5dZfmQZA7Cu8xgoPj87mj6hIDLJGCxJC65tD1MB4cQLhnG84DFcR1B qyiIfX9PBgGN0BJk2+LawKm6nKuXDWi+yqg3E2EXjYtI4Y37Tz4vSvn04aosRMB4 H30zLEvBLwZjzQMRQD5Xj1BGjW3x0TRrrpe0ZnS2l02HqxyW7cVPet3OLcUvga+m EdgwEA1SRRrmsjOfTjuF5sCES8SBdJq7hmvesoSytOHkZFFRRg3/iJiuDerFp+Ml VR0lCLMyJ59/C1kRl3Cxs0IzjCaDqA4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:10 2025 by rpki-client