$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa File: 756951e5-3465-3d7c-ac71-7a43f0d596f6.roa (raw, json) Hash identifier: QQUwiT4TRBwoocrcgGeW/8WNKxed+NqNGEyNHnY1YBQ= Subject key identifier: 6B:00:D5:84:E8:43:38:4A:09:19:ED:26:BE:6A:28:5C:7F:19:0B:68 Certificate issuer: /CN=bd417297-965f-4fd0-82f0-a774a3ef359e Certificate serial: 010D0C9F4328584BBB5D5E6DC73865EFEA802B40 Authority key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa Signing time: Mon 03 Nov 2025 01:11:59 +0000 ROA not before: Mon 03 Nov 2025 01:11:59 +0000 ROA not after: Sun 01 Feb 2026 01:11:59 +0000 asID: 22685 IP address blocks: 199.88.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:5d:5e:6d:c7:38:65:ef:ea:80:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Validity Not Before: Nov 3 01:11:59 2025 GMT Not After : Feb 1 01:11:59 2026 GMT Subject: CN=2c764e2f-e7d3-4043-8a0f-b3c07d679991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:6f:5b:70:e9:09:43:14:d2:5e:30:01:25: e4:8b:c4:7f:ab:01:73:c6:88:a9:20:6f:7a:bc:cc: 23:37:45:b4:70:f4:9f:1f:78:76:70:be:74:7a:f5: 0b:da:8b:7b:69:dc:c3:d5:b7:47:ce:be:84:6c:d9: ee:13:eb:c7:fd:07:09:86:65:73:ec:aa:50:92:d7: f3:8e:13:cf:11:5b:57:e0:6c:45:69:fe:f4:97:b8: 96:3b:df:45:3e:7b:ae:4a:2f:ce:51:07:88:d5:0c: 0a:74:2d:86:40:f7:3b:d0:be:d6:63:fa:13:28:80: 07:b6:ea:a0:ce:e7:93:66:68:7b:4f:b1:83:6e:8b: 00:29:6d:86:01:13:10:5e:c3:be:1f:be:28:44:47: 31:d4:da:c1:5b:24:f8:de:f8:9f:2a:e6:b2:af:30: 81:d8:76:fa:9b:5d:88:91:89:df:e1:d0:a3:12:31: 21:d1:38:ea:b4:cb:7f:68:cd:ef:e8:c6:1e:73:62: 27:47:2c:7b:04:bb:12:4c:e3:68:05:3a:9f:a0:d3: 66:d6:ea:e6:2b:f0:25:f8:71:83:fe:17:40:35:c8: 55:b3:48:b2:89:a7:fc:8d:80:c6:6b:1e:5a:c5:f4: 83:f2:0b:5a:de:77:48:9d:43:9f:5d:9e:ab:9c:f6: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:D5:84:E8:43:38:4A:09:19:ED:26:BE:6A:28:5C:7F:19:0B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl X509v3 Authority Key Identifier: keyid:0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer sbgp-ipAddrBlock: critical IPv4: 199.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ab:4a:cb:1f:9d:8d:47:55:5e:3e:78:ca:93:2a:aa:83:c0: 8e:1a:72:0b:05:40:d2:67:45:5c:60:1a:ee:97:93:a7:e8:36: de:ea:71:2a:ba:02:20:93:27:c6:3b:6e:7a:55:88:b4:a2:19: 5d:4a:02:5b:e7:f9:eb:9a:a4:74:e7:4f:a7:ec:84:db:ce:fc: ed:1b:79:69:4f:d2:e9:ff:75:69:1e:2d:c7:ee:5d:67:8c:1c: 72:ed:ff:36:6f:80:19:b2:e7:57:9f:f4:5a:f2:96:42:6d:2a: d1:10:26:96:42:0a:61:ec:79:ee:30:15:94:13:70:45:e9:e7: e0:03:2d:fa:fa:f6:5e:d8:66:42:00:d1:25:f1:9c:2c:50:60: 6e:12:19:bd:26:9d:59:89:4a:cf:34:76:1b:62:1e:6b:43:97: 28:6e:8c:b1:01:d4:50:d1:1c:17:76:a0:85:4d:22:fa:88:56: ab:91:4a:e5:2c:d3:ec:72:81:c9:90:e8:d1:fd:52:0b:67:d8: 2c:65:90:32:8a:88:5a:a4:51:c6:cc:4d:e2:8b:20:29:7a:bc: d0:be:d1:da:13:c6:84:87:c4:7f:c3:0c:ef:7a:dd:60:f0:3b: 9f:79:d2:83:64:31:21:e3:b8:9f:2d:89:bb:76:fc:b8:42:fe: e7:e3:75:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7XV5txzhl7+qAK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYz NTllMB4XDTI1MTEwMzAxMTE1OVoXDTI2MDIwMTAxMTE1OVowLzEtMCsGA1UEAxMk MmM3NjRlMmYtZTdkMy00MDQzLThhMGYtYjNjMDdkNjc5OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwlvW3DpCUMU0l4wASXki8R/qwFzxoipIG96 vMwjN0W0cPSfH3h2cL50evUL2ot7adzD1bdHzr6EbNnuE+vH/QcJhmVz7KpQktfz jhPPEVtX4GxFaf70l7iWO99FPnuuSi/OUQeI1QwKdC2GQPc70L7WY/oTKIAHtuqg zueTZmh7T7GDbosAKW2GARMQXsO+H74oREcx1NrBWyT43vifKuayrzCB2Hb6m12I kYnf4dCjEjEh0TjqtMt/aM3v6MYec2InRyx7BLsSTONoBTqfoNNm1urmK/Al+HGD /hdANchVs0iyiaf8jYDGax5axfSD8gta3ndInUOfXZ6rnPYPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsA1YToQzhKCRntJr5qKFx/GQtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQx NzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvNzU2OTUxZTUtMzQ2NS0z ZDdjLWFjNzEtN2E0M2YwZDU5NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmQ0MTcyOTctOTY1Zi00ZmQwLTgy ZjAtYTc3NGEzZWYzNTllL2JkNDE3Mjk3LTk2NWYtNGZkMC04MmYwLWE3NzRhM2Vm MzU5ZS5jcmwwHwYDVR0jBBgwFoAUCoB/q4BfE61qX0Nq3dOrLISw87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0 YTNlZjM1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqrSssfnY1HVV4+eMqTKqqDwI4acgsFQNJnRVxgGu6Xk6foNt7qcSq6 AiCTJ8Y7bnpViLSiGV1KAlvn+euapHTnT6fshNvO/O0beWlP0un/dWkeLcfuXWeM HHLt/zZvgBmy51ef9FrylkJtKtEQJpZCCmHsee4wFZQTcEXp5+ADLfr69l7YZkIA 0SXxnCxQYG4SGb0mnVmJSs80dhtiHmtDlyhujLEB1FDRHBd2oIVNIvqIVquRSuUs 0+xygcmQ6NH9Ugtn2CxlkDKKiFqkUcbMTeKLICl6vNC+0doTxoSHxH/DDO963WDw O5950oNkMSHjuJ8tibt2/LhC/ufjdck= -----END CERTIFICATE-----Generated at Wed Nov 5 12:59:55 2025 by rpki-client