$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa File: 18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa (raw, json) Hash identifier: k1TfPhNsFE2kvdfxtxnCZMPm9Qk5QBGZVNCHouUx5Qw= Subject key identifier: 89:7F:95:68:8A:0B:50:78:0F:62:DD:24:13:FD:7A:40:E1:8E:1A:85 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584BA7CCE91BFB14BF35F4FAF1A0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 22709 IP address blocks: 199.101.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e9:1b:fb:14:bf:35:f4:fa:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=3473c0ad-126e-465d-afd5-72c0b0cbe848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:26:c4:b8:5f:0a:1a:28:18:71:82:43:b2: 8e:79:f2:1a:9b:30:42:6e:ba:98:eb:26:82:ce:29: 25:08:d4:1c:f7:1f:2d:a5:b8:9a:b0:25:3f:9a:89: 2b:a0:36:ac:2c:5d:99:cb:26:30:6e:98:db:7b:ec: 0d:54:0c:8b:1e:f2:de:22:70:76:f7:da:78:9f:aa: ca:6e:0f:77:a5:31:df:07:3c:3e:5d:a7:fa:21:58: ff:f2:fa:8c:9b:d4:8c:e5:62:ec:92:d2:0f:18:3a: 3c:32:8d:fc:c3:4d:b1:58:80:7b:26:29:5c:db:87: 31:62:e0:a3:6b:39:1e:01:0d:ab:2c:cc:c5:35:a4: ba:3a:8e:b9:9b:b1:e2:59:e4:67:12:dc:0d:95:42: 28:ca:81:d4:cc:b6:f9:5f:88:a6:0f:ef:45:38:92: 5b:8b:18:f5:9d:21:c6:7a:bb:61:ac:40:bd:4f:91: e2:54:36:6b:ff:81:44:31:7c:20:e7:5a:02:44:d0: b6:a9:39:41:49:75:31:78:47:90:5a:e4:97:1b:89: 40:e6:32:82:59:51:f6:d5:5f:b8:dd:aa:61:a3:c2: 87:cd:ff:ef:4b:56:4a:85:34:63:36:bb:ca:f7:d6: 2f:be:0d:bd:f5:23:3b:86:8e:37:ca:8a:39:49:50: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7F:95:68:8A:0B:50:78:0F:62:DD:24:13:FD:7A:40:E1:8E:1A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 199.101.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bb:38:18:e4:2c:f1:77:c3:78:c3:6a:f4:91:1c:91:29:db: ef:61:34:a9:d7:1e:a1:32:e5:4c:34:70:5d:89:31:a4:0e:d2: cf:f5:be:85:f9:33:7c:1a:68:9f:26:51:d3:1a:15:c3:30:d3: dd:23:fc:2d:1f:ac:72:7c:3f:cb:76:40:99:8b:00:6b:58:95: b7:c1:96:83:8f:5c:c7:b0:e8:5a:87:10:16:f7:89:c8:90:ce: 6d:e3:05:6a:0e:97:46:cb:04:a6:19:64:a5:6a:58:c9:98:f4: 48:7c:c3:f6:51:2d:72:0a:dc:34:e6:40:84:65:9a:06:c4:34: d0:78:c3:e9:e9:29:3c:8a:95:1b:dc:92:e8:ff:0e:b8:e9:71: 65:e0:68:f4:ee:f3:7d:fd:58:b4:08:f6:28:55:08:32:9c:e8: 12:d1:9f:e4:59:61:f1:e0:aa:d2:c2:2d:ff:d0:9d:88:22:49: d4:42:f1:b8:33:d3:80:cf:c4:b2:ae:a3:e4:77:38:4b:e7:a9: ea:8b:84:6a:97:2f:95:27:58:ba:86:37:f6:d9:4e:5a:ff:59: 16:0c:53:06:b4:fa:55:39:34:cb:92:4e:76:72:03:e7:d0:a6: b3:16:86:f6:18:0f:85:fd:c1:10:44:c4:ad:ae:80:5c:b8:ea: 67:24:b7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOkb+xS/NfT68aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MzQ3M2MwYWQtMTI2ZS00NjVkLWFmZDUtNzJjMGIwY2JlODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p4mxLhfChooGHGCQ7KOefIamzBCbrqY6yaC ziklCNQc9x8tpbiasCU/mokroDasLF2ZyyYwbpjbe+wNVAyLHvLeInB299p4n6rK bg93pTHfBzw+Xaf6IVj/8vqMm9SM5WLsktIPGDo8Mo38w02xWIB7Jilc24cxYuCj azkeAQ2rLMzFNaS6Oo65m7HiWeRnEtwNlUIoyoHUzLb5X4imD+9FOJJbixj1nSHG erthrEC9T5HiVDZr/4FEMXwg51oCRNC2qTlBSXUxeEeQWuSXG4lA5jKCWVH21V+4 3apho8KHzf/vS1ZKhTRjNrvK99Yvvg299SM7ho43yoo5SVCHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl/lWiKC1B4D2LdJBP9ekDhjhqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMThlNzQ5ZDEtZjBlMy0z ZjI3LTk1OTgtZGUyZWI3YzUzZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS7OBjkLPF3w3jDavSRHJEp2+9hNKnXHqEy5Uw0cF2JMaQO0s/1voX5 M3waaJ8mUdMaFcMw090j/C0frHJ8P8t2QJmLAGtYlbfBloOPXMew6FqHEBb3iciQ zm3jBWoOl0bLBKYZZKVqWMmY9Eh8w/ZRLXIK3DTmQIRlmgbENNB4w+npKTyKlRvc kuj/DrjpcWXgaPTu8339WLQI9ihVCDKc6BLRn+RZYfHgqtLCLf/QnYgiSdRC8bgz 04DPxLKuo+R3OEvnqeqLhGqXL5UnWLqGN/bZTlr/WRYMUwa0+lU5NMuSTnZyA+fQ prMWhvYYD4X9wRBExK2ugFy46mckt0o= -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:20 2025 by rpki-client