$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa File: 252b5b3a-aba2-3e83-bc54-72f26f51952f.roa (raw, json) Hash identifier: m9b2G320ACZDXRfta4QeHHAhIH/Q9QwLXVTr8uOY0bg= Subject key identifier: BA:0A:5B:11:EF:35:46:C6:A1:30:7D:83:66:4F:7D:D5:D4:97:E1:AC Certificate issuer: /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Certificate serial: 010D0C9F4328584BA9324F0D67D575788A581900 Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 199.36.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4f:0d:67:d5:75:78:8a:58:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3a8e9766-69f1-4135-8241-5d7bc4d0f33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:d9:49:a5:7e:05:8f:e1:fc:ea:b4:1c:08: db:ed:12:e7:09:85:57:dd:87:1b:d5:ed:5c:05:e2: 89:64:0a:ed:be:0a:e9:0e:3f:e8:31:b3:a7:62:de: b3:13:5b:21:9f:cb:25:22:f0:78:be:f0:4c:c7:2d: 5f:08:ba:a9:19:1b:14:d7:f0:72:68:1f:e0:eb:2e: f6:4f:13:ef:9a:21:dd:27:d9:33:a6:37:e3:cf:d2: 3a:9c:b1:cb:ee:b3:25:a0:82:d8:8e:50:db:b7:c9: a7:2d:58:1d:34:ee:88:5b:5c:a5:b3:55:8f:8f:13: 93:d0:ee:30:0e:e3:94:e4:db:e8:5d:ff:87:44:d1: 9d:a5:26:e9:0a:62:73:28:c8:13:c1:1b:62:96:3a: a0:49:d2:21:9f:36:9a:ad:7e:be:93:d6:f7:a8:a0: 27:1d:80:9d:be:44:6e:c7:76:bb:de:c1:d3:4b:2f: 9a:cf:ae:43:56:85:6a:f8:83:8b:8a:35:a8:4e:7f: 60:f8:03:fd:31:aa:80:ae:36:38:0a:75:ac:9a:19: 78:1b:e8:97:4f:d3:78:b1:03:d6:94:c4:1b:07:87: 30:91:6b:c1:64:3b:18:8b:23:d2:de:fc:93:37:72: 67:00:cc:aa:dc:2b:12:5b:0d:95:1d:34:88:37:7f: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0A:5B:11:EF:35:46:C6:A1:30:7D:83:66:4F:7D:D5:D4:97:E1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl X509v3 Authority Key Identifier: keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer sbgp-ipAddrBlock: critical IPv4: 199.36.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d3:95:f0:7e:dc:7b:e0:78:4d:3c:2c:e5:03:09:d8:15:95: cb:41:46:c5:ae:3c:3a:9e:fb:27:fb:ae:5d:5d:d9:83:a5:48: d4:af:ff:48:87:cf:d6:d6:73:a7:f3:c0:b3:70:b5:25:26:dd: 08:9a:3c:c1:85:41:a0:9b:50:5c:dc:1e:65:b8:6d:c5:5a:05: d6:fb:4c:39:3b:55:83:69:85:82:91:9a:df:7d:8d:74:93:67: 8e:70:c9:a1:3d:b0:df:ae:0b:ee:78:59:e7:7f:a7:03:dd:d5: 36:ac:9e:8d:ea:2e:94:2d:a6:53:13:e2:e9:e3:7c:b8:24:cb: ab:d6:ad:ab:64:ab:ee:ba:df:54:38:ee:10:e1:82:cc:e4:18: 55:0d:59:5e:bb:60:b5:a3:2c:2c:c5:0c:40:e1:f2:d3:76:31: 49:3f:11:9e:da:45:1e:16:52:73:1d:45:bc:b1:ce:d7:93:fa: 1a:ed:c6:a9:2d:27:29:4c:ba:b1:ff:e9:31:1d:1b:c3:b1:5b: 49:22:b7:48:11:75:2f:fa:6c:63:17:41:26:fd:f0:62:7a:da: c7:b8:53:52:87:65:c0:57:da:c8:8c:a4:b1:0e:8b:09:f7:2a: b5:90:43:95:4d:6b:88:80:66:a2:01:0e:8c:c9:f0:78:61:ab: 7f:d7:c3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMk8NZ9V1eIpYGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE1YzE4NGUtMGY0Ni00MmNiLWE3N2QtM2YzZDgzNzY1 N2E1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2E4ZTk3NjYtNjlmMS00MTM1LTgyNDEtNWQ3YmM0ZDBmMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3ZSaV+BY/h/Oq0HAjb7RLnCYVX3Ycb1e1c BeKJZArtvgrpDj/oMbOnYt6zE1shn8slIvB4vvBMxy1fCLqpGRsU1/ByaB/g6y72 TxPvmiHdJ9kzpjfjz9I6nLHL7rMloILYjlDbt8mnLVgdNO6IW1yls1WPjxOT0O4w DuOU5NvoXf+HRNGdpSbpCmJzKMgTwRtiljqgSdIhnzaarX6+k9b3qKAnHYCdvkRu x3a73sHTSy+az65DVoVq+IOLijWoTn9g+AP9MaqArjY4CnWsmhl4G+iXT9N4sQPW lMQbB4cwkWvBZDsYiyPS3vyTN3JnAMyq3CsSWw2VHTSIN3/bdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoKWxHvNUbGoTB9g2ZPfdXUl+GsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTVj MTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNkODM3NjU3YTUvMjUyYjViM2EtYWJhMi0z ZTgzLWJjNTQtNzJmMjZmNTE5NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1YzE4NGUtMGY0Ni00MmNiLWE3 N2QtM2YzZDgzNzY1N2E1L2RhNWMxODRlLTBmNDYtNDJjYi1hNzdkLTNmM2Q4Mzc2 NTdhNS5jcmwwHwYDVR0jBBgwFoAU0oESifv6FC+XVnKdfx8Crg8pKY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTVjMTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNk ODM3NjU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/TlfB+3HvgeE08LOUDCdgVlctBRsWuPDqe+yf7rl1d2YOlSNSv/0iH z9bWc6fzwLNwtSUm3QiaPMGFQaCbUFzcHmW4bcVaBdb7TDk7VYNphYKRmt99jXST Z45wyaE9sN+uC+54Wed/pwPd1Tasno3qLpQtplMT4unjfLgky6vWratkq+6631Q4 7hDhgszkGFUNWV67YLWjLCzFDEDh8tN2MUk/EZ7aRR4WUnMdRbyxzteT+hrtxqkt JylMurH/6TEdG8OxW0kit0gRdS/6bGMXQSb98GJ62se4U1KHZcBX2siMpLEOiwn3 KrWQQ5VNa4iAZqIBDozJ8Hhhq3/Xw3s= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:30 2025 by rpki-client