$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json) Hash identifier: wOdd61OoQC/AdxDa8zorvcdJD83XJZn/GryUrSu7o44= Subject key identifier: 3B:4F:7D:30:19:A2:25:7C:4A:89:85:1C:86:36:53:1B:27:D8:20:8A Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78FB40E3726CA97169500 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 199.187.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:b4:0e:37:26:ca:97:16:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b678f7c6-f97a-485b-ab81-bfcb4723f879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:ca:db:ec:2f:0f:af:c3:6e:7c:6e:80:ac: 3a:c9:c8:18:81:c8:d6:ff:d6:98:cc:96:0f:e8:41: c0:0d:a1:27:92:23:50:c5:22:3f:97:2c:05:5d:6b: 06:b5:68:01:e0:15:0b:30:fe:0a:c8:05:c0:b2:8f: 61:f4:97:b5:58:86:b7:3d:3e:58:06:e1:21:aa:d3: 54:c9:e5:61:7f:09:dd:79:3d:bc:59:06:b3:f0:7e: 69:d8:f3:d8:5e:bd:7d:3f:ef:45:af:f8:00:3c:49: 02:e9:5b:07:62:74:c0:32:46:43:6d:b6:70:62:fd: 17:e6:12:e3:f8:8a:55:0e:c3:a8:df:62:f4:e4:60: ae:f7:ff:a1:e0:ac:95:0e:e8:b7:08:a4:f4:05:5a: 9f:21:03:78:01:9b:ed:f8:dc:7c:b4:bc:d1:9c:0a: 9f:5c:92:62:d4:5d:31:03:db:02:38:02:91:f4:9e: 99:fe:96:b3:4a:eb:f0:ac:ef:35:c7:8c:55:58:f6: fa:2d:59:24:44:c2:19:e5:54:8b:d5:2a:3a:2b:8a: e9:a3:3f:77:de:db:72:97:4c:a0:41:cc:b7:de:00: c0:48:94:17:75:27:e0:c7:e6:0c:cc:67:88:4a:3b: da:57:91:d1:2a:e2:a7:a7:06:89:7a:26:0b:e2:80: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:7D:30:19:A2:25:7C:4A:89:85:1C:86:36:53:1B:27:D8:20:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:8f:7a:c5:73:ec:27:9d:9c:15:31:89:14:1b:56:d4:0b: 99:9d:77:c0:63:67:ae:9e:1a:bf:74:cc:4b:7c:8d:41:2c:dc: 64:76:ee:4c:5e:47:ab:4e:0d:e4:69:65:ae:72:51:75:f1:91: a6:54:9d:c1:79:dc:1d:18:43:94:31:8a:d0:d2:6a:f1:98:41: 12:bb:e9:b3:3a:40:b7:0b:c4:2b:7a:ca:9a:1c:c4:5b:6a:63: 87:ff:23:7c:8c:d1:52:d0:d6:a4:4f:7e:62:20:51:79:93:cb: 23:64:ca:3f:9a:b7:e4:b0:c4:ef:a7:ca:d4:9b:50:4e:71:fd: 28:39:b9:6b:f4:f4:28:85:d1:76:e6:20:2d:1c:27:29:02:0c: 00:75:c2:8c:4f:67:10:f6:70:47:cc:2c:e8:f0:94:0d:93:a4: af:88:f5:f2:a2:d9:de:ca:80:7b:89:ba:f0:72:c9:39:b1:6b: ea:49:27:69:d5:4d:d2:17:1f:eb:57:c6:2c:46:9b:e1:ae:eb: e2:17:c2:33:50:b1:db:4a:e7:66:da:6b:2f:30:06:05:32:45: b0:b0:89:9f:4d:9f:5b:f5:c5:cf:3d:8a:da:6c:83:5f:6c:b5: d4:1a:e5:b3:e6:c2:96:4e:77:84:54:40:ce:66:c5:b1:8c:3a: 5a:cf:c9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4+0DjcmypcWlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjY3OGY3YzYtZjk3YS00ODViLWFiODEtYmZjYjQ3MjNmODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0bK2+wvD6/DbnxugKw6ycgYgcjW/9aYzJYP 6EHADaEnkiNQxSI/lywFXWsGtWgB4BULMP4KyAXAso9h9Je1WIa3PT5YBuEhqtNU yeVhfwndeT28WQaz8H5p2PPYXr19P+9Fr/gAPEkC6VsHYnTAMkZDbbZwYv0X5hLj +IpVDsOo32L05GCu9/+h4KyVDui3CKT0BVqfIQN4AZvt+Nx8tLzRnAqfXJJi1F0x A9sCOAKR9J6Z/pazSuvwrO81x4xVWPb6LVkkRMIZ5VSL1So6K4rpoz933ttyl0yg Qcy33gDASJQXdSfgx+YMzGeISjvaV5HRKuKnpwaJeiYL4oAKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtPfTAZoiV8SomFHIY2Uxsn2CCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Pj3rFc+wnnZwVMYkUG1bUC5mdd8BjZ66eGr90zEt8jUEs3GR27kxe R6tODeRpZa5yUXXxkaZUncF53B0YQ5QxitDSavGYQRK76bM6QLcLxCt6ypocxFtq Y4f/I3yM0VLQ1qRPfmIgUXmTyyNkyj+at+SwxO+nytSbUE5x/Sg5uWv09CiF0Xbm IC0cJykCDAB1woxPZxD2cEfMLOjwlA2TpK+I9fKi2d7KgHuJuvByyTmxa+pJJ2nV TdIXH+tXxixGm+Gu6+IXwjNQsdtK52baay8wBgUyRbCwiZ9Nn1v1xc89itpsg19s tdQa5bPmwpZOd4RUQM5mxbGMOlrPyWE= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:51 2025 by rpki-client