$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa File: c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (raw, json) Hash identifier: GnikLqw8RJx1dhpE1Dg96n6zxyCe718+UFnUkemO0Vg= Subject key identifier: 5F:EC:3F:31:2C:02:55:66:2C:F8:B5:2F:09:8A:6B:16:4E:CE:C4:FD Certificate issuer: /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Certificate serial: 010D0C9F4328584BB727BAEF193B8D2A66B903C0 Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 394149 IP address blocks: 199.185.184.0/23 maxlen: 23 2620:121:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:ba:ef:19:3b:8d:2a:66:b9:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=b2d9933d-7213-4c89-af3a-8833eaeb4897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:af:0d:31:e5:20:5d:ef:d5:cb:05:77:6f: ae:8a:d4:44:04:0b:ba:57:2b:0d:eb:45:8f:98:66: f6:32:47:54:e6:e1:c1:90:fd:f2:ad:b0:f8:8b:c2: 43:4a:1c:de:60:9a:4a:60:24:5f:44:04:47:6e:8b: bf:ca:ab:f3:df:9e:9a:a8:d7:1c:9b:3c:6a:0a:df: cf:e3:c4:88:64:06:eb:f1:35:bd:1a:df:40:c2:15: 7f:b3:6a:64:4a:03:e2:c0:34:bd:bf:69:d4:94:0b: 4e:56:b6:40:f2:e8:7c:94:29:8d:c8:f9:b3:21:41: 6d:4f:75:bc:6d:29:43:40:78:f7:5d:ed:8e:74:b3: f2:bb:7e:18:0a:a7:01:8c:05:e9:46:02:a3:b2:f6: 43:e1:1d:96:95:5e:fe:f4:a3:87:28:2d:f4:91:33: f1:7f:e8:10:14:7f:f3:c1:46:8a:45:82:f0:38:76: ba:83:8a:4c:b2:45:e4:bc:ed:56:9d:d3:0b:4a:9f: 30:f1:02:dc:4a:6a:23:a3:ae:cc:ff:52:2c:be:d6: 37:52:f2:19:eb:5b:da:d2:f6:c0:f6:cb:b2:d5:70: 1c:db:ce:31:c3:08:8d:72:38:ca:a4:a7:5a:4e:a1: 4e:ea:af:a9:9f:27:80:ee:0c:d5:bb:b2:6e:b3:25: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:3F:31:2C:02:55:66:2C:F8:B5:2F:09:8A:6B:16:4E:CE:C4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl X509v3 Authority Key Identifier: keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer sbgp-ipAddrBlock: critical IPv4: 199.185.184.0/23 IPv6: 2620:121:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:21:77:75:7b:ba:a3:fa:2d:c6:fb:13:ea:11:c2:c1:a8: 6d:ef:71:0c:3e:31:24:b8:21:f6:d8:93:db:86:35:9e:96:91: 16:6b:aa:f8:67:d5:8f:01:ad:28:74:bb:48:9f:20:dc:05:a3: b6:11:8e:3e:82:ce:bf:bd:e4:cf:63:f1:17:31:a9:8d:1f:39: 3a:b8:cb:80:58:94:22:5c:11:00:ad:d3:82:59:2a:0b:3f:ae: 6b:41:16:36:d5:5e:19:8e:fd:72:d6:a5:9e:fd:fb:ab:22:de: 70:b8:f1:28:b8:6d:71:f6:bc:32:58:20:9e:82:52:72:6e:c3: 30:ae:b1:f5:0b:11:cd:ee:8e:f6:cc:3e:2d:18:e4:6a:f1:99: cb:9e:46:dd:d8:a9:b2:e0:f6:c6:bb:78:af:60:62:73:5e:b6: 81:6a:3b:e0:c4:b5:51:25:e9:1b:a3:4e:77:66:d2:87:d3:44: 37:9c:14:85:c2:bc:ca:6e:6a:e2:37:09:c5:20:48:aa:c2:9b: 21:d6:7d:7f:89:a1:fc:26:04:f3:6c:82:79:36:3e:e1:cb:f5: fa:5c:15:a9:1d:b4:8e:5d:01:40:99:40:18:e4:2f:7e:de:3a: eb:f2:71:8c:a4:f6:83:65:ae:95:98:63:e9:58:d7:b9:5f:b8: b6:f0:3d:56 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEu3J7rvGTuNKma5A8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI5YzExYWItYzQ3Ny00YzNjLThhNWQtYWE0YWM0MjMz MTMyMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YjJkOTkzM2QtNzIxMy00Yzg5LWFmM2EtODgzM2VhZWI0ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ivDTHlIF3v1csFd2+uitREBAu6VysN60WP mGb2MkdU5uHBkP3yrbD4i8JDShzeYJpKYCRfRARHbou/yqvz356aqNccmzxqCt/P 48SIZAbr8TW9Gt9AwhV/s2pkSgPiwDS9v2nUlAtOVrZA8uh8lCmNyPmzIUFtT3W8 bSlDQHj3Xe2OdLPyu34YCqcBjAXpRgKjsvZD4R2WlV7+9KOHKC30kTPxf+gQFH/z wUaKRYLwOHa6g4pMskXkvO1WndMLSp8w8QLcSmojo67M/1IsvtY3UvIZ61va0vbA 9suy1XAc284xwwiNcjjKpKdaTqFO6q+pnyeA7gzVu7JusyXmkwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFF/sPzEsAlVmLPi1LwmKaxZOzsT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMjlj MTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQyMzMxMzIvYzg0NGIwNjUtMmExYS0z MWMyLTg4ZjYtMjJmNzVjY2M4YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDI5YzExYWItYzQ3Ny00YzNjLThh NWQtYWE0YWM0MjMzMTMyL2QyOWMxMWFiLWM0NzctNGMzYy04YTVkLWFhNGFjNDIz MzEzMi5jcmwwHwYDVR0jBBgwFoAUzjMCG3zt83bDoIIxPPzVbPDoibwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRh YzQyMzMxMzIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBx7m4MA8E AgACMAkDBwQmIAEhkAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFoghd3V7uqP6Lcb7E+oRwsGobe9xDD4x JLgh9tiT24Y1npaRFmuq+GfVjwGtKHS7SJ8g3AWjthGOPoLOv73kz2PxFzGpjR85 OrjLgFiUIlwRAK3TglkqCz+ua0EWNtVeGY79ctalnv37qyLecLjxKLhtcfa8Mlgg noJScm7DMK6x9QsRze6O9sw+LRjkavGZy55G3dipsuD2xrt4r2Bic162gWo74MS1 USXpG6NOd2bSh9NEN5wUhcK8ym5q4jcJxSBIqsKbIdZ9f4mh/CYE82yCeTY+4cv1 +lwVqR20jl0BQJlAGOQvft466/JxjKT2g2WulZhj6VjXuV+4tvA9Vg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:47 2025 by rpki-client