$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/4467cd23-6f9e-399b-b97c-2a98c3b249e3.roa File: 4467cd23-6f9e-399b-b97c-2a98c3b249e3.roa (raw, json) Hash identifier: c5RfQDtKgdSeGzIsginE2zNKjMGOhGEeY/iOnN9w5D0= Subject key identifier: 9B:B1:46:79:FF:66:F1:55:37:FE:1E:EA:B5:E4:6C:67:41:4F:7F:CF Certificate issuer: /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Certificate serial: 010D0C9F4328584B047C2294C4E203146EA3D700 Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/4467cd23-6f9e-399b-b97c-2a98c3b249e3.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 401306 IP address blocks: 199.244.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:22:94:c4:e2:03:14:6e:a3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=f4b21f4e-1283-4549-89f2-c71d79e490a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:4a:5f:16:4c:13:77:f3:3b:e2:26:84:91: 70:35:20:c3:4b:58:8e:0a:fa:e0:5b:57:ef:a0:dc: 1f:c4:62:fe:fa:6e:20:96:ec:bc:98:27:4e:f7:04: 0a:12:39:d3:18:3c:37:6a:a8:b8:15:84:3c:9e:9d: 28:1c:d0:b8:14:d5:e3:8c:50:a8:62:75:24:86:35: c6:e6:34:e3:95:af:5d:cc:0c:5c:d2:a9:c4:57:8c: 9d:65:7e:ef:4c:d0:47:e3:d2:c1:c1:5c:a3:e2:31: 98:1f:b1:21:d4:e2:a8:30:05:33:64:c5:f7:62:26: b7:d2:ff:38:a7:c3:82:de:b8:42:d9:a5:48:97:a1: 83:00:bb:f8:76:a2:a2:37:bd:ca:25:fe:a0:d6:b1: 7c:48:40:26:59:ae:01:28:66:9d:18:b7:53:49:c4: 6f:cc:cd:0b:9c:96:1d:96:d5:d1:cc:74:78:06:44: 7b:9c:bc:9c:b2:9f:26:29:58:64:6a:c9:20:18:2e: e2:f4:bd:ff:8d:81:6f:0a:fd:01:cf:a3:45:74:b9: 20:e4:9c:50:ac:2d:9d:11:c1:98:49:ab:f8:3e:5b: f0:36:95:ac:a6:da:c6:bf:6e:35:e8:03:37:0d:9d: 60:7d:2e:de:1b:0d:c0:ad:28:46:11:38:50:02:fe: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:46:79:FF:66:F1:55:37:FE:1E:EA:B5:E4:6C:67:41:4F:7F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/4467cd23-6f9e-399b-b97c-2a98c3b249e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl X509v3 Authority Key Identifier: keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer sbgp-ipAddrBlock: critical IPv4: 199.244.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6f:92:49:5c:7b:c8:a5:ef:38:4a:c4:8b:f3:67:23:89:a5: e3:ee:79:31:93:90:33:bc:9b:f0:89:05:b7:77:2b:0f:74:a2: d4:73:45:10:ad:7f:31:28:58:8b:40:90:a7:90:b0:9e:a6:48: c8:58:26:c1:1b:df:b7:5a:8f:93:fb:74:d0:fa:ed:cb:ca:c5: fe:aa:9e:30:bf:ca:e7:25:35:29:dc:98:69:0e:aa:91:b5:a0: bf:75:25:26:63:fe:a8:9a:3c:ba:63:39:28:a7:7e:72:68:8c: 44:a4:05:8d:b2:52:e0:76:8f:cd:82:e2:35:d9:53:66:b6:5d: fa:d6:61:96:43:55:46:d3:55:69:fd:08:1e:63:d4:d6:4c:c6: 76:df:7a:ab:ec:16:51:17:e3:24:89:16:5f:2e:6e:ed:68:f5: 23:20:e5:b2:6b:e5:09:a4:93:3e:5f:b6:77:1f:a2:dd:8c:18: 50:5d:e4:ba:a6:c4:f4:da:9e:33:d8:2b:38:5f:27:eb:91:52: 80:fe:2a:03:ea:95:90:0a:3e:c2:4c:99:32:1b:ef:60:fd:61: 5b:7f:0f:96:b7:e2:4b:e4:23:e6:90:21:a1:14:32:56:45:fa: 6e:df:3c:98:f7:55:8a:bd:47:43:4f:ac:21:4e:d7:a2:6e:2a: cf:45:90:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfCKUxOIDFG6j1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIwN2NhMTQtMTRhYS00YjU2LWI5Y2UtNDZjOTc2OGE4 ZjkzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjRiMjFmNGUtMTI4My00NTQ5LTg5ZjItYzcxZDc5ZTQ5MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6VKXxZME3fzO+ImhJFwNSDDS1iOCvrgW1fv oNwfxGL++m4gluy8mCdO9wQKEjnTGDw3aqi4FYQ8np0oHNC4FNXjjFCoYnUkhjXG 5jTjla9dzAxc0qnEV4ydZX7vTNBH49LBwVyj4jGYH7Eh1OKoMAUzZMX3Yia30v84 p8OC3rhC2aVIl6GDALv4dqKiN73KJf6g1rF8SEAmWa4BKGadGLdTScRvzM0LnJYd ltXRzHR4BkR7nLycsp8mKVhkaskgGC7i9L3/jYFvCv0Bz6NFdLkg5JxQrC2dEcGY Sav4PlvwNpWsptrGv2416AM3DZ1gfS7eGw3ArShGEThQAv6ftQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuxRnn/ZvFVN/4e6rXkbGdBT3/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3 Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5NzY4YThmOTMvNDQ2N2NkMjMtNmY5ZS0z OTliLWI5N2MtMmE5OGMzYjI0OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmIwN2NhMTQtMTRhYS00YjU2LWI5 Y2UtNDZjOTc2OGE4ZjkzLzZiMDdjYTE0LTE0YWEtNGI1Ni1iOWNlLTQ2Yzk3Njhh OGY5My5jcmwwHwYDVR0jBBgwFoAUBduoRTwBP2FoDW5TMQOpgJV+XtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YjA3Y2ExNC0xNGFhLTRiNTYtYjljZS00NmM5 NzY4YThmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/QkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChvkklce8il7zhKxIvzZyOJpePueTGTkDO8m/CJBbd3Kw90otRzRRCt fzEoWItAkKeQsJ6mSMhYJsEb37daj5P7dND67cvKxf6qnjC/yuclNSncmGkOqpG1 oL91JSZj/qiaPLpjOSinfnJojESkBY2yUuB2j82C4jXZU2a2XfrWYZZDVUbTVWn9 CB5j1NZMxnbfeqvsFlEX4ySJFl8ubu1o9SMg5bJr5Qmkkz5ftncfot2MGFBd5Lqm xPTanjPYKzhfJ+uRUoD+KgPqlZAKPsJMmTIb72D9YVt/D5a34kvkI+aQIaEUMlZF +m7fPJj3VYq9R0NPrCFO16JuKs9FkP0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:28 2025 by rpki-client