$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa File: 59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa (raw, json) Hash identifier: JuMBr5LQPAaG9Y+jSGHug6bAOLxL4lWM55Pvr8qCjng= Subject key identifier: 10:9A:5D:6B:55:2F:B8:4D:E8:BA:50:68:A5:39:0E:FB:84:91:06:A3 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584B438B47000320A74D77D17C40 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa Signing time: Sun 21 Sep 2025 03:07:29 +0000 ROA not before: Sun 21 Sep 2025 03:07:29 +0000 ROA not after: Sat 20 Dec 2025 04:07:29 +0000 asID: 10794 IP address blocks: 199.43.48.0/23 maxlen: 23 199.43.48.0/24 maxlen: 24 199.43.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:8b:47:00:03:20:a7:4d:77:d1:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 21 03:07:29 2025 GMT Not After : Dec 20 04:07:29 2025 GMT Subject: CN=bf91a880-f335-45b0-b893-48152dc36e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:0f:c8:52:c7:41:d7:88:ac:ff:fc:c0:84: 1a:34:2b:36:f1:b5:88:83:a8:22:49:b1:0e:68:8f: 9a:d8:4a:cd:41:80:6c:1b:a3:9d:e3:6b:6c:bf:94: 66:e7:94:60:fc:34:b6:0a:f8:f5:18:2d:3b:a4:ed: c6:35:78:15:bb:28:39:1a:dc:9f:fd:cc:e8:bf:b1: 29:5b:64:a1:e0:66:cf:77:c7:f5:fb:5d:e4:c1:42: 1d:46:f2:54:00:30:3d:ab:dd:e4:d3:32:ef:f8:cf: 70:6a:2b:4e:e6:48:20:aa:17:99:08:3a:b7:73:c1: 03:8d:90:8d:16:ef:87:71:ba:e4:7a:01:17:e8:d5: 4a:6f:6b:d6:12:0d:d9:19:0f:c2:d3:16:e6:ed:32: 7a:c2:3c:d9:d6:e1:ba:82:3f:40:1d:ef:06:e3:2c: 98:7e:7f:cd:33:6f:e6:6f:9f:da:dd:e8:1a:7e:e5: ed:ea:85:02:ee:59:c5:a7:61:5a:96:9d:6c:89:6a: 9d:6e:42:02:f1:f7:59:0d:41:5b:d9:e5:5f:e7:1e: 37:f2:ce:63:db:3a:96:6a:49:94:de:f5:5b:a8:38: 15:37:b3:5f:59:4d:4d:8d:a6:68:03:76:80:73:8d: 42:bf:96:4e:33:ae:92:33:f8:be:15:7e:96:03:2a: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:5D:6B:55:2F:B8:4D:E8:BA:50:68:A5:39:0E:FB:84:91:06:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:89:f8:fe:de:a6:6f:a1:a8:28:bd:86:f6:04:51:b0:ca:d6: a6:a5:1b:bc:95:43:20:6b:a8:7c:0c:81:51:96:63:5d:c3:21: e1:bd:96:33:22:4c:04:95:43:39:78:96:24:db:3b:8b:3a:c0: dd:07:d1:ba:8e:9a:f3:ad:3e:a7:d8:db:44:b9:e4:e9:97:ba: 25:91:bc:9a:8a:6f:6e:22:66:bc:d2:57:34:96:d3:34:28:48: 03:19:40:07:d1:a9:f9:49:11:8e:26:16:3a:70:d5:f6:1e:51: fe:10:43:fb:27:27:4f:03:33:c7:30:d1:8b:e0:76:83:c3:d8: 2d:17:4a:56:b8:fa:69:c9:e1:0b:a7:36:7c:6d:6c:64:ae:f8: 30:e0:aa:bf:0b:bb:65:79:69:ff:fe:46:12:83:aa:8f:0c:ef: 49:58:df:f9:26:aa:ec:37:de:99:d5:23:31:98:82:a8:0c:f7: 4a:e2:3a:28:f3:41:0c:2e:4d:2b:29:75:df:c1:fb:6c:c6:1c: e3:a2:a9:bc:4e:e7:20:28:36:51:1e:b4:5a:ab:5a:45:af:01: ed:b5:cb:12:05:db:b9:f1:b9:1b:cb:ac:a5:1b:b2:5c:14:8e: cd:13:ec:bf:1b:c0:43:54:a8:f2:d8:fc:a6:7b:92:21:cb:6a: c1:f6:d5:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDi0cAAyCnTXfRfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDkyMTAzMDcyOVoXDTI1MTIyMDA0MDcyOVowLzEtMCsGA1UEAxMk YmY5MWE4ODAtZjMzNS00NWIwLWI4OTMtNDgxNTJkYzM2ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsncPyFLHQdeIrP/8wIQaNCs28bWIg6giSbEO aI+a2ErNQYBsG6Od42tsv5Rm55Rg/DS2Cvj1GC07pO3GNXgVuyg5Gtyf/czov7Ep W2Sh4GbPd8f1+13kwUIdRvJUADA9q93k0zLv+M9waitO5kggqheZCDq3c8EDjZCN Fu+HcbrkegEX6NVKb2vWEg3ZGQ/C0xbm7TJ6wjzZ1uG6gj9AHe8G4yyYfn/NM2/m b5/a3egafuXt6oUC7lnFp2Falp1siWqdbkIC8fdZDUFb2eVf5x438s5j2zqWakmU 3vVbqDgVN7NfWU1NjaZoA3aAc41Cv5ZOM66SM/i+FX6WAyoy/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCaXWtVL7hN6LpQaKU5DvuEkQajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvNTljNGE4YjktNzVmYi0z NmFiLWExOTgtMjM5YmIxZjdkNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCJ+P7epm+hqCi9hvYEUbDK1qalG7yVQyBrqHwMgVGWY13DIeG9ljMi TASVQzl4liTbO4s6wN0H0bqOmvOtPqfY20S55OmXuiWRvJqKb24iZrzSVzSW0zQo SAMZQAfRqflJEY4mFjpw1fYeUf4QQ/snJ08DM8cw0YvgdoPD2C0XSla4+mnJ4Qun NnxtbGSu+DDgqr8Lu2V5af/+RhKDqo8M70lY3/kmquw33pnVIzGYgqgM90riOijz QQwuTSspdd/B+2zGHOOiqbxO5yAoNlEetFqrWkWvAe21yxIF27nxuRvLrKUbslwU js0T7L8bwENUqPLY/KZ7kiHLasH21UU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:51 2025 by rpki-client