$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa File: 32984439-d873-3743-b2f1-99e76f4c192a.roa (raw, json) Hash identifier: kOpk2XGuxafm1aqcNuMz9D8KlLebyRvMdLQ3oZF6wGI= Subject key identifier: 7A:4C:7E:F8:14:36:36:B1:36:70:2A:ED:CD:7E:46:0F:90:69:02:13 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584B28C6EEFACFD21AAD3D0998E0 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 13445 IP address blocks: 199.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ee:fa:cf:d2:1a:ad:3d:09:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=23fd398f-0d5a-4770-b3a2-1528361741db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:42:5a:f2:84:a8:4f:3d:76:3f:75:41:95: 8a:b6:3b:21:d0:9e:9b:f6:d4:07:2c:a8:3b:7b:d7: 57:ed:e1:c8:ae:e1:e8:7b:88:f6:89:f3:ef:27:24: b6:fb:07:71:f0:35:ee:f8:16:f8:8b:ca:b4:cb:fa: 56:14:83:1e:1c:c5:6c:62:0e:23:c7:3f:88:a3:0e: 65:75:da:34:e4:5c:01:06:44:c5:4b:05:b5:90:e6: e0:b2:45:f3:ed:78:08:b0:a2:14:5f:f3:f1:a8:b0: 76:c9:99:80:ed:3f:3f:b6:ff:ab:2d:04:29:54:4a: 4d:b3:10:60:68:12:ee:81:d1:5a:41:e0:bf:3e:6d: 4a:ab:3a:9b:43:ef:f2:55:c3:17:ed:ed:30:b0:d7: 03:14:a3:ac:dd:d2:c2:bb:86:b2:15:43:cb:95:94: 58:39:92:ac:6e:3d:c5:4c:2b:92:47:2b:d0:2c:4d: 1c:ea:a2:24:53:de:03:be:f1:72:7c:cd:33:66:de: 4b:1a:ad:c4:7c:68:ab:6c:32:b2:3f:4f:54:65:4f: 12:bd:d3:e6:3b:e5:2a:40:b1:fd:b2:2f:cf:f6:3c: b3:b6:36:2b:18:7a:4b:e1:92:c8:c9:be:83:c3:f0: 33:1e:bd:81:ff:b4:e5:c6:bd:72:28:63:d8:55:79: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4C:7E:F8:14:36:36:B1:36:70:2A:ED:CD:7E:46:0F:90:69:02:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:58:c7:c0:24:78:ee:b9:9b:ca:cf:1c:ab:14:c7:04:cf:4d: b1:e9:48:d7:36:0d:74:84:b5:51:96:ce:bc:af:ff:44:5c:80: 19:02:6a:19:7e:25:8b:e9:fb:f2:ec:23:f2:d2:d4:b2:0b:95: d6:2a:0b:f8:3e:89:36:48:ec:6d:ad:9c:25:cd:90:77:46:f7: eb:93:d8:3c:cd:a0:97:46:a7:eb:a9:22:d5:c8:18:b7:46:01: 98:08:fa:6b:90:3b:40:58:9a:f2:89:83:b2:00:43:cb:ce:44: cc:a9:50:a9:e2:77:33:99:73:f8:eb:95:8c:6f:ac:43:2f:6a: 80:40:3a:65:d1:d0:0d:57:28:f1:f4:81:6f:5d:38:e2:6f:02: f9:d2:86:bf:cc:d0:d0:4b:b8:a4:42:f9:ad:d2:a2:5d:e3:d3: 3f:a5:40:08:30:57:2d:64:b0:84:35:59:6c:8e:3e:c1:fc:f6: 3c:56:be:1e:8c:58:6b:b8:9d:be:ff:28:19:d9:2e:16:ce:ac: bc:42:fe:c4:8f:4f:4e:4f:c2:48:b7:ee:d7:dd:9a:c7:6d:0f: b8:57:cc:5b:6e:4f:23:72:d6:07:ae:bb:41:85:84:39:3c:9b: 15:b4:21:f0:ab:2f:d6:1c:10:f1:6e:4b:e9:61:55:07:99:1e: aa:22:d9:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxu76z9IarT0JmOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MjNmZDM5OGYtMGQ1YS00NzcwLWIzYTItMTUyODM2MTc0MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWRCWvKEqE89dj91QZWKtjsh0J6b9tQHLKg7 e9dX7eHIruHoe4j2ifPvJyS2+wdx8DXu+Bb4i8q0y/pWFIMeHMVsYg4jxz+Iow5l ddo05FwBBkTFSwW1kObgskXz7XgIsKIUX/PxqLB2yZmA7T8/tv+rLQQpVEpNsxBg aBLugdFaQeC/Pm1KqzqbQ+/yVcMX7e0wsNcDFKOs3dLCu4ayFUPLlZRYOZKsbj3F TCuSRyvQLE0c6qIkU94DvvFyfM0zZt5LGq3EfGirbDKyP09UZU8SvdPmO+UqQLH9 si/P9jyztjYrGHpL4ZLIyb6Dw/AzHr2B/7Tlxr1yKGPYVXnqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpMfvgUNjaxNnAq7c1+Rg+QaQITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvMzI5ODQ0MzktZDg3My0z NzQzLWIyZjEtOTllNzZmNGMxOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Yx8AkeO65m8rPHKsUxwTPTbHpSNc2DXSEtVGWzryv/0RcgBkCahl+ JYvp+/LsI/LS1LILldYqC/g+iTZI7G2tnCXNkHdG9+uT2DzNoJdGp+upItXIGLdG AZgI+muQO0BYmvKJg7IAQ8vORMypUKnidzOZc/jrlYxvrEMvaoBAOmXR0A1XKPH0 gW9dOOJvAvnShr/M0NBLuKRC+a3Sol3j0z+lQAgwVy1ksIQ1WWyOPsH89jxWvh6M WGu4nb7/KBnZLhbOrLxC/sSPT05Pwki37tfdmsdtD7hXzFtuTyNy1geuu0GFhDk8 mxW0IfCrL9YcEPFuS+lhVQeZHqoi2UY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:18 2025 by rpki-client