$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa File: 60e73e07-f4ae-3c71-9e25-99a3e612e843.roa (raw, json) Hash identifier: jwpVrLXDF6DqCTdLrOHYusOjEoxkSnhQr7Qrfq7Mvug= Subject key identifier: FB:52:75:69:EE:E3:6C:A7:95:99:7E:5C:5D:B6:0D:82:24:23:B8:C4 Certificate issuer: /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Certificate serial: 010D0C9F4328584B0746C222B258D25C7CE90E40 Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 199.233.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c2:22:b2:58:d2:5c:7c:e9:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=f27bb0ba-4018-412b-b3a5-7d1fc3afa072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:56:c5:2d:b7:3d:c7:63:8d:a1:a8:23:fe: f0:e1:e6:72:35:20:d4:b0:86:63:6c:c5:8b:af:71: 70:dd:d9:e9:49:91:82:16:3b:42:13:4b:78:18:a5: 1d:9a:23:34:e8:a6:64:77:7d:ae:6a:7e:48:cb:51: bc:a8:cb:79:a6:fa:0a:71:77:17:62:12:0f:c5:9e: 38:11:a2:e1:e1:21:3d:71:63:cd:f3:82:2a:c8:09: b7:14:6f:ae:42:55:3b:64:a6:b3:64:ce:4a:50:d1: 44:0e:e3:cc:a3:f4:37:7f:48:04:67:e5:8f:f4:02: 11:9c:e6:67:5c:a9:e1:94:6d:99:bc:ca:4c:67:c0: f2:36:12:84:70:b2:52:0a:35:a6:ea:93:09:bf:f8: 26:b1:f6:d3:36:ec:15:df:39:61:3a:c3:8e:99:9f: f9:41:d1:b8:51:72:68:df:6b:61:96:a1:ad:1d:e4: 2e:1e:e4:77:32:9e:fd:43:30:e1:d7:ca:62:bd:df: 65:c2:87:5a:0e:69:cc:b7:48:00:f5:6e:39:13:62: 2a:1c:10:79:1d:b4:59:64:b3:9d:65:c2:5e:21:40: c1:65:03:74:c5:ea:41:a7:a8:2a:c7:0d:36:21:06: a5:8e:5d:eb:ba:36:ff:ef:97:a3:87:62:9d:4c:e8: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:75:69:EE:E3:6C:A7:95:99:7E:5C:5D:B6:0D:82:24:23:B8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl X509v3 Authority Key Identifier: keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer sbgp-ipAddrBlock: critical IPv4: 199.233.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6e:b6:95:97:a2:df:49:3b:6f:ab:0b:67:25:81:30:8c:5e: bc:f9:a1:62:94:4f:66:0e:57:f0:20:c7:e5:1a:f8:cd:f2:69: 23:fa:d8:98:e9:c1:fa:d3:ad:3c:70:c8:43:ae:72:16:f8:2b: 48:6b:73:6d:2e:51:b9:1e:bf:1e:54:24:18:21:64:db:14:de: e0:2a:47:be:af:d8:2f:74:a6:8c:64:9b:d3:44:d9:92:db:1d: 65:65:4e:70:87:da:63:4e:38:8f:71:f2:46:ed:7f:78:c4:52: ad:2e:84:53:b7:af:8a:0f:eb:b2:5c:a7:c6:0d:29:1f:02:7b: da:72:1b:93:5e:6f:83:15:1a:a5:1c:aa:70:c3:72:df:e6:83: 9e:35:0d:84:89:4e:12:0a:1e:0b:c7:b1:85:0d:26:e6:ff:e2: 20:f4:e7:c6:d2:bb:51:55:ca:7a:5d:0a:07:cb:07:93:d0:84: 19:92:88:53:ad:56:d0:85:d0:3a:74:10:3f:d5:b3:dc:e0:ac: 65:99:07:db:41:71:94:ed:d4:6e:85:e5:97:07:e8:8e:a0:88: ad:d8:ab:4f:86:dc:ce:1d:04:0f:a4:70:4a:4f:34:ca:45:09: e3:f8:9d:40:71:24:1d:b6:ed:dd:9d:bd:b1:39:2f:d1:41:ae: dd:00:2d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsIisljSXHzpDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMw YjFmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZjI3YmIwYmEtNDAxOC00MTJiLWIzYTUtN2QxZmMzYWZhMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5WxS23PcdjjaGoI/7w4eZyNSDUsIZjbMWL r3Fw3dnpSZGCFjtCE0t4GKUdmiM06KZkd32uan5Iy1G8qMt5pvoKcXcXYhIPxZ44 EaLh4SE9cWPN84IqyAm3FG+uQlU7ZKazZM5KUNFEDuPMo/Q3f0gEZ+WP9AIRnOZn XKnhlG2ZvMpMZ8DyNhKEcLJSCjWm6pMJv/gmsfbTNuwV3zlhOsOOmZ/5QdG4UXJo 32thlqGtHeQuHuR3Mp79QzDh18pivd9lwodaDmnMt0gA9W45E2IqHBB5HbRZZLOd ZcJeIUDBZQN0xepBp6gqxw02IQaljl3rujb/75ejh2KdTOgHtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtSdWnu42ynlZl+XF22DYIkI7jEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkw Y2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvNjBlNzNlMDctZjRhZS0z YzcxLTllMjUtOTlhM2U2MTJlODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM5MGNhOWUtNjQxMi00YmQ2LTg2 MjEtZWVhZjQ0OTMwYjFmL2JjOTBjYTllLTY0MTItNGJkNi04NjIxLWVlYWY0NDkz MGIxZi5jcmwwHwYDVR0jBBgwFoAUZ1ggbyYWDhdeFkLwk/8nyE63iWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFm NDQ5MzBiMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+lmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARutpWXot9JO2+rC2clgTCMXrz5oWKUT2YOV/Agx+Ua+M3yaSP62Jjp wfrTrTxwyEOuchb4K0hrc20uUbkevx5UJBghZNsU3uAqR76v2C90poxkm9NE2ZLb HWVlTnCH2mNOOI9x8kbtf3jEUq0uhFO3r4oP67Jcp8YNKR8Ce9pyG5Neb4MVGqUc qnDDct/mg541DYSJThIKHgvHsYUNJub/4iD058bSu1FVynpdCgfLB5PQhBmSiFOt VtCF0Dp0ED/Vs9zgrGWZB9tBcZTt1G6F5ZcH6I6giK3Yq0+G3M4dBA+kcEpPNMpF CeP4nUBxJB227d2dvbE5L9FBrt0ALe4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:33 2025 by rpki-client