$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa File: 86d52164-647e-3414-9ea6-46b394b0d1a1.roa (raw, json) Hash identifier: tvr5OgeYpFEI81gI8cxe62X+ZP0m0W0vXd9hgZu/6HY= Subject key identifier: BF:89:66:9F:6D:DF:65:35:4D:1A:A4:4A:A4:9C:AA:F1:46:13:2B:6D Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B970CDCF5ACEF452F8582E980 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 12259 IP address blocks: 199.201.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:f5:ac:ef:45:2f:85:82:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=1446bef1-c476-4f87-8852-01cf81ff3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:cc:9d:cc:98:13:51:54:5a:6f:90:bb:14: 9b:90:c2:f5:d0:0b:63:22:8f:bc:f9:8f:32:fa:92: 1e:c5:5f:c7:10:20:c0:e2:bf:0f:7f:73:95:05:1a: 3f:6e:f3:f1:4a:14:49:08:56:e8:39:f2:b5:3e:2b: d3:85:90:fd:e6:24:66:8d:5b:7d:2d:85:8e:92:8c: a5:7e:35:07:de:ad:85:cb:5a:99:c0:95:7f:d0:ad: 9e:a6:93:47:70:0d:ec:00:cd:86:8f:af:ed:4f:d3: 2f:ee:5c:36:d6:a8:f0:44:bb:28:22:38:ee:0e:79: c6:ce:3d:30:3f:77:43:80:02:fd:00:39:62:4d:b5: 22:e9:b5:f5:6e:03:4d:02:3f:78:82:cc:ef:7a:87: 37:30:97:b9:d7:ea:df:95:4d:0d:83:26:66:2d:58: 83:8e:f9:bb:2f:df:5d:03:70:f9:9a:1b:c6:80:81: 7a:e2:09:82:f3:b3:ae:82:1d:e3:96:6a:fd:27:b8: 6f:b8:a4:15:1d:73:bd:f2:04:c6:0e:09:03:d4:7c: 52:6c:e0:1e:3b:cc:fd:13:70:ba:34:61:c9:a2:94: 03:b4:96:63:f2:81:e8:53:40:9f:12:30:f3:05:67: 47:f9:5e:9d:37:4f:c4:f7:e0:db:ee:65:09:1d:d1: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:66:9F:6D:DF:65:35:4D:1A:A4:4A:A4:9C:AA:F1:46:13:2B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:14:7e:b4:c4:a4:51:7d:67:f2:4b:8d:75:b8:14:a0:59:c7: 01:fb:7f:ee:04:59:13:52:9d:2a:1a:77:ba:ab:08:68:42:8e: 71:9c:ba:89:3d:42:5d:57:48:4c:96:01:db:25:85:60:e5:f2: d0:12:d1:eb:43:b2:6e:61:b7:b1:0b:74:75:e9:0e:9b:b0:bd: 57:65:56:45:a5:c8:2b:43:b3:df:51:1e:75:7d:46:00:88:46: d3:6d:c0:46:65:29:0a:af:1d:1c:31:cc:a2:a6:09:fd:95:44: cb:6f:93:42:fc:6e:7a:45:19:dc:3f:21:bd:ff:4d:72:32:6e: ba:0c:5e:e2:97:64:69:ca:ff:56:78:f4:e7:03:8c:a1:09:54: e0:1c:1c:34:fe:f5:82:f6:82:4f:3a:49:88:a6:b4:a7:90:2c: d4:d8:3a:c3:19:70:53:f7:b6:e8:38:40:e1:a7:1b:74:56:0d: 95:a8:39:12:74:0a:31:d2:f7:a8:d5:d1:dd:c1:81:27:ae:88: 5d:56:59:c5:cd:ed:dc:bf:94:ba:d9:77:41:15:b7:67:d0:b4: fd:43:e6:d0:e8:97:a9:25:69:4a:99:4d:69:f0:45:9b:50:ac: 6b:cd:74:7d:84:91:6e:d9:f4:2f:00:7c:93:b1:fe:1f:2b:f7: 48:e3:d1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNz1rO9FL4WC6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MTQ0NmJlZjEtYzQ3Ni00Zjg3LTg4NTItMDFjZjgxZmYzMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCrMncyYE1FUWm+QuxSbkML10AtjIo+8+Y8y +pIexV/HECDA4r8Pf3OVBRo/bvPxShRJCFboOfK1PivThZD95iRmjVt9LYWOkoyl fjUH3q2Fy1qZwJV/0K2eppNHcA3sAM2Gj6/tT9Mv7lw21qjwRLsoIjjuDnnGzj0w P3dDgAL9ADliTbUi6bX1bgNNAj94gszveoc3MJe51+rflU0NgyZmLViDjvm7L99d A3D5mhvGgIF64gmC87Ough3jlmr9J7hvuKQVHXO98gTGDgkD1HxSbOAeO8z9E3C6 NGHJopQDtJZj8oHoU0CfEjDzBWdH+V6dN0/E9+Db7mUJHdHZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+JZp9t32U1TRqkSqScqvFGEyttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvODZkNTIxNjQtNjQ3ZS0z NDE0LTllYTYtNDZiMzk0YjBkMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8lvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIUfrTEpFF9Z/JLjXW4FKBZxwH7f+4EWRNSnSoad7qrCGhCjnGcuok9 Ql1XSEyWAdslhWDl8tAS0etDsm5ht7ELdHXpDpuwvVdlVkWlyCtDs99RHnV9RgCI RtNtwEZlKQqvHRwxzKKmCf2VRMtvk0L8bnpFGdw/Ib3/TXIybroMXuKXZGnK/1Z4 9OcDjKEJVOAcHDT+9YL2gk86SYimtKeQLNTYOsMZcFP3tug4QOGnG3RWDZWoORJ0 CjHS96jV0d3BgSeuiF1WWcXN7dy/lLrZd0EVt2fQtP1D5tDol6klaUqZTWnwRZtQ rGvNdH2EkW7Z9C8AfJOx/h8r90jj0fg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:45:23 2025 by rpki-client