$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa File: 904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json) Hash identifier: 5ltuFAE8IsxCAfwCtG3FIGr1xcKoXdV/kj9GJ/Wj7UE= Subject key identifier: FC:94:02:B5:00:18:E4:7F:AC:0C:1C:95:41:34:4A:D4:C0:4F:A4:0D Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584B92DCE674EABEE448F6A8D3C0 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13649 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e6:74:ea:be:e4:48:f6:a8:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=047d28c9-e2a9-4992-a20c-162fd3660bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:5f:82:05:7d:1e:33:3e:e6:45:16:c5:70: 33:6f:55:90:26:19:96:78:66:cb:50:89:02:b9:07: e9:0d:2b:45:95:1d:7f:58:a5:8e:0f:49:ae:82:15: 55:c6:c2:53:81:63:2d:7c:02:6a:92:66:48:8f:24: e4:f6:37:6c:fb:e6:ea:8d:cf:ca:f3:e6:69:d5:97: 35:1a:16:24:10:63:f2:68:bd:8a:df:25:24:6e:da: f4:20:9b:b5:f9:56:28:c2:ef:fd:06:02:ca:ab:c4: 8b:d3:29:0b:df:82:e8:cb:ca:62:0f:3a:45:b7:3d: 20:52:4f:73:ae:39:a6:be:6c:69:bb:58:d8:f3:85: 6d:a5:3b:bf:53:88:69:58:ac:00:93:42:f5:af:9e: 2d:28:0f:16:5c:a7:fa:3f:33:19:e1:83:f7:f5:1f: 04:27:aa:a9:4c:2b:70:49:36:c1:54:1b:6c:29:39: c1:61:3d:62:94:42:c9:68:7c:7b:cd:03:e4:3d:3f: 7b:a0:db:0d:0f:2b:ae:a8:50:3e:71:1e:80:6b:6a: 2b:26:48:91:7e:49:38:db:2c:54:8e:61:87:72:0c: 5f:9d:e3:fa:af:ac:00:79:28:4a:9b:bd:7d:7d:d5: e2:08:91:24:37:6b:5a:38:d3:cd:83:0a:65:8d:fd: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:02:B5:00:18:E4:7F:AC:0C:1C:95:41:34:4A:D4:C0:4F:A4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:42:01:ed:16:fe:45:a1:b5:85:2d:70:de:5f:48:a7:59:0c: da:25:9a:ee:a3:91:ee:6f:50:15:be:05:1b:6c:89:b9:67:09: 16:87:75:52:37:cc:8c:51:d6:e0:fc:fe:8c:3a:35:91:ea:bc: 1f:30:06:2a:41:ab:be:02:dc:4e:dc:5a:37:f5:63:c8:05:40: 0a:52:1e:a1:ba:74:59:4d:4e:7a:ec:44:3d:e1:8b:67:c1:5b: 7f:66:ce:6d:ff:92:cc:c0:80:d6:c1:c1:98:ee:00:70:e6:12: bd:1a:2b:3f:7c:b0:d4:b5:ae:5b:43:54:55:ee:e3:35:99:23: 52:26:7d:81:c2:a5:67:d3:87:df:f9:39:97:2a:67:fa:e7:ef: 84:df:b8:fb:75:3e:c6:d0:48:81:20:da:0c:92:6e:47:da:fc: 13:0a:47:1c:f9:84:48:f9:c7:54:f4:bd:95:f8:4d:ba:37:50: 32:c9:b4:08:a2:cb:d0:f8:3b:17:8e:c2:d9:39:95:fa:0f:f8: 48:c7:6e:bc:4a:99:68:ab:d6:4a:ef:63:7d:90:8e:c1:50:a1: 7c:e9:85:f2:ee:5e:c0:45:b1:56:81:78:6b:b4:b1:7b:8b:98: 0c:b4:0d:fc:7a:f3:07:9a:d1:99:d9:1c:4c:98:c2:17:49:77: b9:33:98:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OZ06r7kSPao08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDQ3ZDI4YzktZTJhOS00OTkyLWEyMGMtMTYyZmQzNjYwYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6hfggV9HjM+5kUWxXAzb1WQJhmWeGbLUIkC uQfpDStFlR1/WKWOD0mughVVxsJTgWMtfAJqkmZIjyTk9jds++bqjc/K8+Zp1Zc1 GhYkEGPyaL2K3yUkbtr0IJu1+VYowu/9BgLKq8SL0ykL34Loy8piDzpFtz0gUk9z rjmmvmxpu1jY84VtpTu/U4hpWKwAk0L1r54tKA8WXKf6PzMZ4YP39R8EJ6qpTCtw STbBVBtsKTnBYT1ilELJaHx7zQPkPT97oNsNDyuuqFA+cR6Aa2orJkiRfkk42yxU jmGHcgxfneP6r6wAeShKm719fdXiCJEkN2taONPNgwpljf1uVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyUArUAGOR/rAwclUE0StTAT6QNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvOTA0YjA4MGEtOGU1Ny0z OTE4LTk1YWItNzUwZjY3NjZkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJCAe0W/kWhtYUtcN5fSKdZDNolmu6jke5vUBW+BRtsiblnCRaHdVI3 zIxR1uD8/ow6NZHqvB8wBipBq74C3E7cWjf1Y8gFQApSHqG6dFlNTnrsRD3hi2fB W39mzm3/kszAgNbBwZjuAHDmEr0aKz98sNS1rltDVFXu4zWZI1ImfYHCpWfTh9/5 OZcqZ/rn74TfuPt1PsbQSIEg2gySbkfa/BMKRxz5hEj5x1T0vZX4Tbo3UDLJtAii y9D4OxeOwtk5lfoP+EjHbrxKmWir1krvY32QjsFQoXzphfLuXsBFsVaBeGu0sXuL mAy0Dfx68wea0ZnZHEyYwhdJd7kzmME= -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:08 2025 by rpki-client