$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa File: ddf1701b-d672-3875-b1d1-39705ddd52d5.roa (raw, json) Hash identifier: yRWc3/mmSUEjsIXqfNQXXz37ZnjIMQEicY3TI+mUW1I= Subject key identifier: 99:04:BF:64:BC:C6:B6:CC:9A:E1:91:1C:49:C7:27:F4:DE:62:F3:FA Certificate issuer: /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Certificate serial: 010D0C9F4328584BBFA5A347BCF8006C7CE5D140 Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 3257 IP address blocks: 199.30.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a3:47:bc:f8:00:6c:7c:e5:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=2ade885b-87c0-4269-8c3f-a44374fab787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:44:78:1c:31:6a:ab:2f:c0:56:f4:81:38: 54:b6:c8:91:37:37:da:a3:63:c5:6e:b9:16:d1:99: 27:ff:b2:e0:24:d8:13:b1:69:ea:9b:aa:f0:1e:79: d2:46:63:62:4b:e3:df:c5:a5:61:1a:7d:c0:ba:e1: 64:3e:d7:52:14:56:fa:8c:06:11:8f:24:a0:ef:60: ec:09:ce:3f:a9:84:c8:ce:6f:69:4a:da:de:57:e0: 4f:74:73:fe:6e:9b:c2:ae:e5:f1:db:a3:4b:1b:ba: 54:30:1c:be:b6:7a:ce:e7:f5:0c:36:ce:fa:12:8f: 34:bc:f2:93:f0:13:11:41:2d:6e:c5:5a:7e:a2:e2: 0e:2a:d6:b4:40:1b:9b:47:74:1f:33:d8:ab:37:26: 75:3c:30:f0:76:19:01:82:e6:61:24:de:00:e4:df: 42:27:93:dd:2a:1b:49:e1:dd:7a:d4:92:54:ec:63: 6f:f7:6e:f8:8e:cb:21:99:c2:c7:6e:5c:d2:50:9f: 14:e6:95:e7:72:3d:55:d0:56:ee:33:38:3d:4f:35: f0:e0:93:23:97:9c:dc:7c:75:dd:d8:e2:ee:17:42: b9:4e:29:4b:ec:23:fe:d0:68:a0:f6:7f:77:dd:91: 48:ef:40:fb:f1:17:94:3f:ed:7c:65:45:16:9d:24: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:BF:64:BC:C6:B6:CC:9A:E1:91:1C:49:C7:27:F4:DE:62:F3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl X509v3 Authority Key Identifier: keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer sbgp-ipAddrBlock: critical IPv4: 199.30.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5f:40:5e:05:c4:da:5b:1e:8e:5d:09:51:f6:a1:de:5b:85: ae:fc:50:7d:af:3f:cb:8a:3d:76:af:a1:1f:43:53:ff:e7:a2: e4:a3:dc:75:e8:31:66:a4:ab:00:45:59:db:ea:16:07:91:04: 5d:ac:c7:2d:2f:5f:5f:fb:51:01:7a:84:f8:d2:d3:bc:7b:8b: c1:8b:4f:5d:7e:86:3c:1b:6a:a4:6f:55:80:c4:83:d0:f9:eb: f9:cb:43:e8:c4:bf:25:ce:c1:e8:f2:aa:81:9e:f5:c3:17:24: 96:f0:fd:d0:c9:af:e6:bb:2e:69:c8:53:55:59:40:20:27:f4: 21:6f:b6:39:f8:d7:f8:f7:b3:d3:4b:b9:99:56:1d:ce:01:97: 36:fa:a6:da:47:0d:1f:bb:ac:d8:0d:c8:9d:62:3b:75:42:3c: fc:cc:82:af:6e:29:47:5d:35:f8:1a:a9:48:3d:20:0d:dd:7c: d5:0f:1b:9e:14:53:f5:9f:b2:a4:d4:d8:dd:3f:a9:94:ff:be: 2d:00:ae:10:5a:02:3b:a2:db:8e:38:c3:a3:d1:54:30:1f:aa: 31:a1:78:a7:40:33:ff:01:39:26:8c:98:00:8e:3a:2a:78:23: fe:4f:d4:cb:6b:4d:b9:45:3c:7d:51:55:19:c4:f8:3e:3d:90: 1e:0c:52:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paNHvPgAbHzl0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MxMWU1ZGQtYzJiMy00OTNjLTg1MzQtNDMxZmE0ODc4 YWE5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MmFkZTg4NWItODdjMC00MjY5LThjM2YtYTQ0Mzc0ZmFiNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqFEeBwxaqsvwFb0gThUtsiRNzfao2PFbrkW 0Zkn/7LgJNgTsWnqm6rwHnnSRmNiS+PfxaVhGn3AuuFkPtdSFFb6jAYRjySg72Ds Cc4/qYTIzm9pStreV+BPdHP+bpvCruXx26NLG7pUMBy+tnrO5/UMNs76Eo80vPKT 8BMRQS1uxVp+ouIOKta0QBubR3QfM9irNyZ1PDDwdhkBguZhJN4A5N9CJ5PdKhtJ 4d161JJU7GNv9274jsshmcLHblzSUJ8U5pXncj1V0FbuMzg9TzXw4JMjl5zcfHXd 2OLuF0K5TilL7CP+0Gig9n933ZFI70D78ReUP+18ZUUWnSScywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkEv2S8xrbMmuGRHEnHJ/TeYvP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzEx ZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4NzhhYTkvZGRmMTcwMWItZDY3Mi0z ODc1LWIxZDEtMzk3MDVkZGQ1MmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2MxMWU1ZGQtYzJiMy00OTNjLTg1 MzQtNDMxZmE0ODc4YWE5L2NjMTFlNWRkLWMyYjMtNDkzYy04NTM0LTQzMWZhNDg3 OGFhOS5jcmwwHwYDVR0jBBgwFoAUlrCIXKtQH3qhd63tdv+RV4me9cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFm YTQ4NzhhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdfQF4FxNpbHo5dCVH2od5bha78UH2vP8uKPXavoR9DU//nouSj3HXo MWakqwBFWdvqFgeRBF2sxy0vX1/7UQF6hPjS07x7i8GLT11+hjwbaqRvVYDEg9D5 6/nLQ+jEvyXOwejyqoGe9cMXJJbw/dDJr+a7LmnIU1VZQCAn9CFvtjn41/j3s9NL uZlWHc4Blzb6ptpHDR+7rNgNyJ1iO3VCPPzMgq9uKUddNfgaqUg9IA3dfNUPG54U U/WfsqTU2N0/qZT/vi0ArhBaAjui2444w6PRVDAfqjGheKdAM/8BOSaMmACOOip4 I/5P1MtrTblFPH1RVRnE+D49kB4MUjM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:56 2025 by rpki-client