$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa File: abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa (raw, json) Hash identifier: 42/oj7lF+JWEdGLkMRcdFqaqafp7GNWrBUaIoQvqIg8= Subject key identifier: 7C:82:E2:C3:60:73:AB:99:00:09:00:96:C6:E1:68:32:0A:A7:F2:14 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584B9E07ABA6E05D6066A830B200 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 134521 IP address blocks: 199.27.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ab:a6:e0:5d:60:66:a8:30:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=0df1ce6c-e61d-4779-9f8c-744eb252bfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:73:a2:18:8c:09:cf:3a:0b:e2:27:c2:ca: 13:e4:ae:0f:76:ef:b7:1e:36:1d:71:dc:a7:1c:a1: 6a:72:0c:81:23:8d:08:33:ed:00:d0:5d:ca:33:fb: 27:82:db:c1:e5:4f:1d:c9:51:8f:c8:74:44:da:ff: ee:e3:58:28:84:18:91:06:5e:27:e7:96:f9:dc:50: 40:43:c4:1f:2e:0f:5e:9e:f4:91:3a:72:82:4e:00: c9:05:b7:53:65:e2:d2:7a:a5:32:60:2b:86:2d:d9: 50:74:fb:9a:6b:5f:a3:f0:59:b3:e1:ea:41:a9:bc: b7:b8:4a:68:28:47:85:1f:9e:0c:cc:f5:18:d9:ff: 0c:2c:f1:85:15:a9:c2:ef:2d:5d:c1:82:57:75:b1: bb:4f:5a:bc:5a:25:37:ae:bf:56:db:d5:7c:bc:9b: 61:d6:5f:66:41:06:ec:12:ba:c2:db:c9:c5:b6:49: d3:14:9b:a4:b9:49:b0:38:49:f7:7f:a5:2c:7f:c3: 0e:3a:07:78:18:88:26:92:5e:93:23:00:62:8c:a7: 47:12:26:33:1e:ab:36:7b:b7:31:68:07:19:f0:b6: a9:22:2e:c2:a0:0c:5c:3c:63:63:bf:f0:b4:73:b5: 80:ba:54:ed:b1:5a:0c:2d:5b:a6:ec:87:5b:9b:2a: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:82:E2:C3:60:73:AB:99:00:09:00:96:C6:E1:68:32:0A:A7:F2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 199.27.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e4:dc:81:03:b7:4d:98:c3:7e:e5:97:91:c1:f2:10:6d:0d: 64:4b:af:f6:b9:6c:2c:44:8a:3c:8a:aa:d1:66:87:b0:67:b6: 1d:65:38:3a:2e:2e:43:d3:99:cb:e8:a2:5d:a1:cf:54:4a:b4: ff:a2:b0:cf:3b:60:c9:72:f1:c3:91:19:9b:95:5e:af:e7:51: 25:b1:6b:61:2a:57:a0:44:fe:8d:2d:6e:a3:5d:64:eb:26:bc: 3c:47:4a:3a:eb:07:9e:d1:e2:4a:bd:e7:e4:67:68:2d:46:c7: 0d:31:73:74:dd:83:01:d8:48:ef:ef:a6:32:eb:aa:6a:e3:0b: b0:7e:b1:d8:48:aa:03:3a:50:ec:94:4b:15:29:5c:8a:37:58: d1:3a:9d:18:e8:f7:a7:a1:84:33:f5:48:8d:5b:7c:f2:0a:9c: 56:d8:5b:99:2d:74:93:c9:e9:fa:ae:d0:3c:65:e4:cc:83:e3: fa:94:76:f0:95:d2:ee:e0:66:0d:84:4a:61:85:12:58:9f:de: 04:7d:76:eb:99:0b:73:f5:2f:36:78:86:69:14:af:67:e3:46: d7:fd:39:2f:0f:fe:90:9e:c5:54:62:fe:df:07:58:3a:f5:00: 4d:09:5c:43:39:57:12:0f:40:85:55:1e:f4:f6:8f:4b:1f:ed: ea:8d:c1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6um4F1gZqgwsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MGRmMWNlNmMtZTYxZC00Nzc5LTlmOGMtNzQ0ZWIyNTJiZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFlzohiMCc86C+InwsoT5K4Pdu+3HjYdcdyn HKFqcgyBI40IM+0A0F3KM/sngtvB5U8dyVGPyHRE2v/u41gohBiRBl4n55b53FBA Q8QfLg9envSROnKCTgDJBbdTZeLSeqUyYCuGLdlQdPuaa1+j8Fmz4epBqby3uEpo KEeFH54MzPUY2f8MLPGFFanC7y1dwYJXdbG7T1q8WiU3rr9W29V8vJth1l9mQQbs ErrC28nFtknTFJukuUmwOEn3f6Usf8MOOgd4GIgmkl6TIwBijKdHEiYzHqs2e7cx aAcZ8LapIi7CoAxcPGNjv/C0c7WAulTtsVoMLVum7IdbmyqPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyC4sNgc6uZAAkAlsbhaDIKp/IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvYWJlMDhmZGQtMjdjNy0z ZTViLWEwY2ItOTc5YjY5NjgxYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXk3IEDt02Yw37ll5HB8hBtDWRLr/a5bCxEijyKqtFmh7Bnth1lODou LkPTmcvool2hz1RKtP+isM87YMly8cORGZuVXq/nUSWxa2EqV6BE/o0tbqNdZOsm vDxHSjrrB57R4kq95+RnaC1Gxw0xc3TdgwHYSO/vpjLrqmrjC7B+sdhIqgM6UOyU SxUpXIo3WNE6nRjo96ehhDP1SI1bfPIKnFbYW5ktdJPJ6fqu0Dxl5MyD4/qUdvCV 0u7gZg2ESmGFElif3gR9duuZC3P1LzZ4hmkUr2fjRtf9OS8P/pCexVRi/t8HWDr1 AE0JXEM5VxIPQIVVHvT2j0sf7eqNwQk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:50 2025 by rpki-client