$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa File: d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa (raw, json) Hash identifier: CItWFAbWXnQD4s8NjWizdWczwSv6Hipj2kIP0G/SVDE= Subject key identifier: 7E:4E:AD:28:7D:27:8C:9C:CF:62:4A:40:44:19:92:1A:7E:11:F3:1F Certificate issuer: /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Certificate serial: 010D0C9F4328584BA932923FE3C5DB3D969192A8 Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 199.36.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:92:3f:e3:c5:db:3d:96:91:92:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=df506809-6e01-46d3-bf46-9db2df276550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:1e:38:1e:71:c6:ca:b8:9f:78:b3:5d:fb: 80:52:cc:60:f9:d6:65:6f:dc:5b:08:c6:f8:71:d6: 35:59:43:df:2e:01:bc:4c:6a:d6:d5:b9:07:b4:96: d8:db:1d:20:3b:ef:8f:c4:16:da:5e:38:3d:2e:19: 49:7f:00:63:ee:6a:c6:da:e2:84:8c:40:5c:0f:d2: c2:8a:61:ca:72:45:c7:17:34:b2:00:3b:da:07:15: 70:d8:ec:da:21:5e:31:5e:f3:d4:bd:78:f7:cd:c8: c2:6f:51:a2:a3:cf:15:fd:09:aa:15:5f:47:e2:a9: de:a8:7d:ae:f2:49:0c:10:b8:64:19:d4:28:b0:89: 4c:4b:60:e1:25:30:25:9d:c5:29:6a:01:05:c2:70: c5:b6:cc:ff:b3:36:d3:ca:19:b2:bb:92:49:3a:ff: 19:18:2a:db:f9:63:75:cd:20:95:d9:73:0b:1e:ef: c4:00:44:9d:1f:67:31:42:75:44:d4:e5:82:ec:ea: b1:8f:26:93:5b:b5:39:da:07:9b:f1:c2:c8:18:d0: ad:eb:9e:a7:e5:b6:d4:72:4c:9c:fb:3f:ec:f2:b5: c6:c1:93:dd:17:c3:a6:ae:60:f8:5c:53:60:73:ec: db:a4:1b:ff:77:6e:b7:30:39:f9:50:90:f2:de:5c: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:AD:28:7D:27:8C:9C:CF:62:4A:40:44:19:92:1A:7E:11:F3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl X509v3 Authority Key Identifier: keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer sbgp-ipAddrBlock: critical IPv4: 199.36.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:00:6f:14:f7:d0:97:00:9b:4c:51:1f:a3:cb:8c:8f:8d: 73:e2:3d:53:5c:6d:94:0d:a9:df:cf:27:7f:46:4a:b2:a2:9e: 32:65:c0:b7:63:1e:e9:a8:06:30:ab:62:69:88:c3:a1:c2:83: c3:6d:1a:e3:13:fe:b0:62:e6:72:27:3c:c0:fb:c1:57:45:1a: af:f9:15:00:07:45:77:5b:ad:b0:09:53:87:6a:6b:45:61:d5: 8c:1a:8c:cb:b7:c5:d1:2d:bb:ad:9e:39:e8:26:00:a2:2d:c9: 2e:cf:19:f9:f6:3f:20:01:b0:a4:b8:8e:84:67:f6:b0:d2:4b: 12:ca:c6:ed:36:b1:27:34:d2:ca:40:57:7c:85:18:44:26:32: 24:27:86:d1:23:96:d1:33:5f:65:86:55:00:9c:ac:45:9d:8d: a3:8e:e1:94:c7:04:77:c9:4c:31:b5:d9:b2:e1:ed:f8:31:b7: 2c:f6:69:1e:00:b2:a9:21:25:fc:bc:c6:b7:79:b8:fb:36:e3: 67:57:60:93:8e:8e:0a:2b:96:da:aa:da:ca:fc:24:ad:b1:ad: 7b:e8:0a:86:b7:3d:ef:59:10:9e:52:8a:f0:78:10:37:34:58: 53:11:a0:a1:1e:b8:5b:22:b7:a4:ba:fd:8a:6e:eb:20:07:97: 9f:c5:78:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpI/48XbPZaRkqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE1YzE4NGUtMGY0Ni00MmNiLWE3N2QtM2YzZDgzNzY1 N2E1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZGY1MDY4MDktNmUwMS00NmQzLWJmNDYtOWRiMmRmMjc2NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnYeOB5xxsq4n3izXfuAUsxg+dZlb9xbCMb4 cdY1WUPfLgG8TGrW1bkHtJbY2x0gO++PxBbaXjg9LhlJfwBj7mrG2uKEjEBcD9LC imHKckXHFzSyADvaBxVw2OzaIV4xXvPUvXj3zcjCb1Gio88V/QmqFV9H4qneqH2u 8kkMELhkGdQosIlMS2DhJTAlncUpagEFwnDFtsz/szbTyhmyu5JJOv8ZGCrb+WN1 zSCV2XMLHu/EAESdH2cxQnVE1OWC7OqxjyaTW7U52geb8cLIGNCt656n5bbUckyc +z/s8rXGwZPdF8OmrmD4XFNgc+zbpBv/d263MDn5UJDy3lxjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5OrSh9J4ycz2JKQEQZkhp+EfMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTVj MTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNkODM3NjU3YTUvZDMyZTVjNjctYjUxMy0z NDdjLWIwYmMtZWEyN2RiYjJiNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1YzE4NGUtMGY0Ni00MmNiLWE3 N2QtM2YzZDgzNzY1N2E1L2RhNWMxODRlLTBmNDYtNDJjYi1hNzdkLTNmM2Q4Mzc2 NTdhNS5jcmwwHwYDVR0jBBgwFoAU0oESifv6FC+XVnKdfx8Crg8pKY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTVjMTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNk ODM3NjU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAYAG8U99CXAJtMUR+jy4yPjXPiPVNcbZQNqd/PJ39GSrKinjJlwLdj HumoBjCrYmmIw6HCg8NtGuMT/rBi5nInPMD7wVdFGq/5FQAHRXdbrbAJU4dqa0Vh 1YwajMu3xdEtu62eOegmAKItyS7PGfn2PyABsKS4joRn9rDSSxLKxu02sSc00spA V3yFGEQmMiQnhtEjltEzX2WGVQCcrEWdjaOO4ZTHBHfJTDG12bLh7fgxtyz2aR4A sqkhJfy8xrd5uPs242dXYJOOjgorltqq2sr8JK2xrXvoCoa3Pe9ZEJ5SivB4EDc0 WFMRoKEeuFsit6S6/Ypu6yAHl5/FeOg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:41 2025 by rpki-client