$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: 2bkaMIz0iHCyqQ49dapf4ECGRdA0xu49vBysckehI9g= Subject key identifier: F2:6C:BB:FF:DC:54:47:1D:A1:21:1E:76:7A:72:FB:43:A3:53:6D:97 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584AECC13191FD76E1C3D7A82D00 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:31:91:fd:76:e1:c3:d7:a8:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4f4e0a97-41b0-40f5-81cd-4bf379159eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:c1:bc:a5:86:a0:2c:7c:e3:e7:69:01:70: 49:03:48:a4:34:6f:6b:9a:f8:b2:9b:f7:83:b2:7a: 52:c7:8e:11:88:2b:86:73:8d:a1:13:17:76:c2:64: 41:c3:e8:09:16:fb:5e:cd:f6:94:e4:97:08:74:20: 71:7e:08:8e:e8:1e:4f:d0:b8:ad:60:59:eb:d6:e7: 6e:fb:1b:5c:9d:8a:70:7c:df:7a:7a:84:73:9e:2e: 31:4d:14:57:75:92:d8:a1:a3:7d:cd:8b:44:47:af: 6e:6b:40:ea:0f:ed:67:c3:30:08:58:da:d6:7e:41: 21:8f:ea:cd:ac:19:79:eb:b3:58:f3:fe:a8:14:1a: 99:ae:a0:e6:5d:7a:a5:0e:b9:a4:68:17:50:14:57: 89:5d:88:2c:f0:a7:0c:0e:43:e9:28:a6:e8:06:40: f7:e1:d5:76:c0:65:3e:e0:59:01:a7:83:24:14:34: 5c:14:df:f5:57:2f:7a:f2:6c:f9:9a:9f:44:d9:89: 28:ca:ef:9d:db:be:cd:05:eb:ec:af:3d:b8:98:f2: 3a:7e:21:c1:84:8d:97:7d:23:08:6e:3c:19:d8:20: 99:be:ac:1c:8d:89:ca:d6:f1:99:43:44:15:55:fe: a6:45:ae:94:19:3d:52:54:8f:5e:da:89:3b:e6:3c: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6C:BB:FF:DC:54:47:1D:A1:21:1E:76:7A:72:FB:43:A3:53:6D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:81:ec:43:1d:f2:8c:9d:e5:d1:55:ea:ca:20:4e:c3:97:21: 3c:6f:f5:03:cb:d3:e0:03:a0:6e:12:5d:3c:3a:37:6c:fc:44: ac:f8:95:a9:f8:61:83:f3:3e:0b:24:88:ed:95:41:74:1f:a6: 8d:56:59:de:0c:de:69:83:43:78:d1:4d:05:19:28:ea:7c:06: c0:ad:b5:96:72:58:20:43:dc:8f:24:f8:60:7f:0d:5c:50:88: 35:19:a2:a4:41:78:18:0e:57:ff:9a:5b:00:d4:f1:24:af:f5: f6:75:94:94:14:84:36:6f:6a:f4:2a:42:e7:0e:11:7c:77:e2: 5d:04:16:f7:7a:61:21:6a:8c:4f:0b:e7:d5:63:fa:30:aa:65: db:56:7b:57:58:93:1e:41:ea:38:47:ef:28:24:4f:6c:f0:d2: d5:fa:13:24:64:a8:77:bb:3f:6e:ef:15:19:30:08:56:5e:b9: 24:9e:be:ef:be:63:cb:4e:74:1b:68:02:bb:0d:07:34:e4:d9: ba:7d:51:61:f1:c7:bd:ec:7e:4a:52:66:3c:5e:38:24:c1:d9: 98:75:6b:58:e4:21:64:ea:6d:6b:b6:1e:dd:bc:e1:1d:4f:40: 32:ee:22:60:d9:a5:fa:c9:98:13:b2:f8:0c:ca:77:a8:bc:47: f0:2e:ef:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTGR/Xbhw9eoLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGY0ZTBhOTctNDFiMC00MGY1LTgxY2QtNGJmMzc5MTU5ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjDBvKWGoCx84+dpAXBJA0ikNG9rmviym/eD snpSx44RiCuGc42hExd2wmRBw+gJFvtezfaU5JcIdCBxfgiO6B5P0LitYFnr1udu +xtcnYpwfN96eoRzni4xTRRXdZLYoaN9zYtER69ua0DqD+1nwzAIWNrWfkEhj+rN rBl567NY8/6oFBqZrqDmXXqlDrmkaBdQFFeJXYgs8KcMDkPpKKboBkD34dV2wGU+ 4FkBp4MkFDRcFN/1Vy968mz5mp9E2Ykoyu+d277NBevsrz24mPI6fiHBhI2XfSMI bjwZ2CCZvqwcjYnK1vGZQ0QVVf6mRa6UGT1SVI9e2ok75jyzTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJsu//cVEcdoSEednpy+0OjU22XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2B7EMd8oyd5dFV6sogTsOXITxv9QPL0+ADoG4SXTw6N2z8RKz4lan4 YYPzPgskiO2VQXQfpo1WWd4M3mmDQ3jRTQUZKOp8BsCttZZyWCBD3I8k+GB/DVxQ iDUZoqRBeBgOV/+aWwDU8SSv9fZ1lJQUhDZvavQqQucOEXx34l0EFvd6YSFqjE8L 59Vj+jCqZdtWe1dYkx5B6jhH7ygkT2zw0tX6EyRkqHe7P27vFRkwCFZeuSSevu++ Y8tOdBtoArsNBzTk2bp9UWHxx73sfkpSZjxeOCTB2Zh1a1jkIWTqbWu2Ht284R1P QDLuImDZpfrJmBOy+AzKd6i8R/Au714= -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:51 2025 by rpki-client