$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa File: aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa (raw, json) Hash identifier: jtBtqlsUcZBoUuW/uCQZAz8cQTZr66aCPuvtnPN7EZc= Subject key identifier: 03:A2:C7:22:50:96:BA:31:DE:CA:39:6A:8D:07:65:7F:28:5A:80:58 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B970CDCE457653173769D9F00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 22612 IP address blocks: 199.201.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:e4:57:65:31:73:76:9d:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=c0912563-ea67-476f-b520-88bca8182958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:51:e3:9e:3e:94:69:6e:c5:8a:84:06:68: fd:fc:e7:e6:f1:93:b2:42:12:72:bb:e2:5c:88:8f: 98:a0:e8:e0:39:49:5c:d8:d1:31:9e:c6:9a:77:53: 3e:ec:80:45:1d:0e:25:55:17:f2:ec:97:f8:c5:37: 8a:7e:23:da:7e:ba:c4:5f:fe:74:65:fc:44:bc:ad: ca:08:11:15:66:a7:16:4f:41:0e:4d:a3:2d:73:c9: 51:2e:7a:a0:21:2c:36:09:f1:23:78:fa:d0:bd:ba: 66:93:e8:31:52:5f:11:9b:dc:cd:cc:c5:37:ea:38: f4:d5:1c:5c:7a:d1:91:c1:11:34:cc:10:01:a7:44: 99:fc:3e:a5:5e:f1:8e:e4:8c:89:77:d0:42:a6:ca: 03:71:4b:16:a5:29:23:02:17:ca:2d:c0:4d:67:b9: 44:f7:bf:09:1f:c4:00:39:34:dc:21:4c:be:41:2e: 6e:d0:ff:ef:86:be:7d:3d:d4:c5:8b:aa:4b:a8:cf: f2:6b:d0:84:36:79:20:88:44:60:aa:0f:05:86:99: b4:3d:f1:86:2b:5f:23:20:7a:fa:e2:6a:ac:a6:79: 04:57:86:38:43:38:1d:a4:c9:20:12:f2:e1:52:cb: 08:24:97:38:f6:44:7b:71:f2:2b:38:a6:b1:ca:62: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A2:C7:22:50:96:BA:31:DE:CA:39:6A:8D:07:65:7F:28:5A:80:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:89:c7:e3:7f:6b:80:cd:c9:8e:7c:73:fc:93:1d:f1:2d:cd: ed:ca:51:a8:9f:fd:64:88:79:e6:e5:d6:d7:1f:2e:88:e5:2c: 04:83:66:0f:09:f2:d1:f7:42:2b:a1:d4:61:b4:4a:76:79:ab: 1c:c1:3f:ea:a1:80:f0:c2:5e:14:ff:3b:8e:3f:ec:a0:bd:d0: 50:88:23:b3:66:dd:2d:99:56:5b:80:fe:07:0f:39:79:d4:0f: 37:af:71:2f:e4:f3:ec:c6:e3:63:99:fa:97:84:af:f0:50:bb: 06:92:f8:76:19:63:bf:11:42:0b:e3:40:bb:87:bf:71:f5:78: 0d:b1:d8:35:65:91:e2:76:ec:17:c5:83:9d:11:94:c1:cb:6c: 9d:b8:80:b4:b8:07:09:f0:59:6e:c4:25:78:1b:f2:ef:07:73: 07:54:83:a0:08:61:21:03:52:58:9d:17:9f:ba:49:92:20:14: 0e:1b:6f:46:5b:55:ff:11:70:39:b5:4c:2d:0a:4a:4d:1a:91: 91:1f:d1:09:f2:3a:31:50:db:9f:f5:9a:91:d4:2b:f6:63:4d: d0:9a:91:26:c7:61:eb:96:e7:d2:ce:17:51:ef:5f:f2:7f:f1: 24:ce:7a:72:f1:1a:b0:5c:19:8a:bd:f6:e6:7e:68:67:f5:e4: f2:13:25:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNzkV2Uxc3adnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YzA5MTI1NjMtZWE2Ny00NzZmLWI1MjAtODhiY2E4MTgyOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVR454+lGluxYqEBmj9/Ofm8ZOyQhJyu+Jc iI+YoOjgOUlc2NExnsaad1M+7IBFHQ4lVRfy7Jf4xTeKfiPafrrEX/50ZfxEvK3K CBEVZqcWT0EOTaMtc8lRLnqgISw2CfEjePrQvbpmk+gxUl8Rm9zNzMU36jj01Rxc etGRwRE0zBABp0SZ/D6lXvGO5IyJd9BCpsoDcUsWpSkjAhfKLcBNZ7lE978JH8QA OTTcIUy+QS5u0P/vhr59PdTFi6pLqM/ya9CENnkgiERgqg8Fhpm0PfGGK18jIHr6 4mqspnkEV4Y4QzgdpMkgEvLhUssIJJc49kR7cfIrOKaxymKf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOixyJQlrox3so5ao0HZX8oWoBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWExOGIxZWMtNjFlNy0z YzNlLWFhMGYtZDMyNjM4NTdkNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8luMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Jx+N/a4DNyY58c/yTHfEtze3KUaif/WSIeebl1tcfLojlLASDZg8J 8tH3Qiuh1GG0SnZ5qxzBP+qhgPDCXhT/O44/7KC90FCII7Nm3S2ZVluA/gcPOXnU DzevcS/k8+zG42OZ+peEr/BQuwaS+HYZY78RQgvjQLuHv3H1eA2x2DVlkeJ27BfF g50RlMHLbJ24gLS4BwnwWW7EJXgb8u8HcwdUg6AIYSEDUlidF5+6SZIgFA4bb0Zb Vf8RcDm1TC0KSk0akZEf0QnyOjFQ25/1mpHUK/ZjTdCakSbHYeuW59LOF1HvX/J/ 8STOenLxGrBcGYq99uZ+aGf15PITJaI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:46:48 2025 by rpki-client