$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa File: bcf63ce9-7252-3eb7-86a9-be391198cc94.roa (raw, json) Hash identifier: AMJVUO+EZWU0EO3JVNiNy2hmUzgRs+CNndUoHxy4Jqc= Subject key identifier: 1E:CC:88:0F:2B:76:04:78:03:E9:EE:39:51:D5:9C:C6:85:A0:C5:7C Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584BA667A243E759CE19EFEDEF00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 198.135.124.0/23 maxlen: 23 199.19.248.0/21 maxlen: 21 199.116.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a2:43:e7:59:ce:19:ef:ed:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b4c15d4e-687c-47b5-8ea7-6289fdbf5728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:b7:80:c2:51:53:ea:39:81:55:8d:3f:ba: 6a:6b:39:1f:5a:f3:20:8f:66:0a:27:54:8d:2c:73: 51:2d:d1:c5:b1:1b:ec:11:1a:69:a9:b9:2b:fe:8b: df:a6:ce:84:69:c0:40:f7:2d:ab:bc:10:fd:37:5d: ad:8e:66:a3:3d:08:c4:37:2a:7c:cd:f2:48:e5:a3: 6c:ac:dd:7d:67:aa:ca:6b:64:8d:36:ff:6b:ef:c9: 88:f3:d9:7a:7a:24:26:22:b5:b9:cc:74:83:cd:1f: d9:4c:85:99:2f:3f:53:ea:f4:f8:aa:3a:d0:62:4c: ca:50:a6:b3:37:c8:2b:ce:9c:63:86:f9:87:d6:27: 7f:79:5d:98:26:59:62:e1:2c:a1:e5:bd:7c:38:14: 05:db:42:2e:65:65:7e:13:56:d2:6f:b3:5f:1c:85: 57:52:09:42:be:49:dd:b6:49:68:8a:73:40:b5:ad: f5:57:56:fa:a1:d3:31:08:56:51:7f:ef:22:e4:cd: 32:f8:06:ce:19:65:ca:34:22:f6:07:a3:37:2a:8a: 52:d1:86:59:5b:25:14:8d:ad:06:17:d4:ba:c1:0e: 76:0b:70:e5:a5:85:78:22:06:7a:e8:07:d7:f4:28: a2:fd:93:23:b9:4b:2f:80:63:2c:33:e0:32:75:51: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:88:0F:2B:76:04:78:03:E9:EE:39:51:D5:9C:C6:85:A0:C5:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 198.135.124.0/23 199.19.248.0/21 199.116.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:8a:1a:47:75:4a:d1:ec:85:6e:ec:85:6d:11:23:db:a9: e5:17:a1:d0:54:87:e4:e5:1b:08:fd:3e:2b:51:1f:40:d6:91: 53:3c:87:e2:a0:28:f1:07:b1:54:13:e3:42:a3:22:5d:89:c5: 2a:23:63:3f:4d:ff:28:79:f3:d9:c8:10:25:f9:fd:60:45:fd: 13:ca:ef:87:4c:13:8e:dd:c1:3d:69:e8:12:41:95:31:5e:d4: 87:50:cb:a4:e5:54:d1:8a:17:82:a9:b7:00:69:07:ff:d3:81: bc:e3:ea:17:e3:5f:bc:32:22:74:0b:5c:c9:1c:80:6d:a2:de: 7a:50:14:55:2f:18:29:57:19:fd:34:35:a2:6d:51:27:60:03: 90:ff:12:db:75:26:90:77:8a:c3:11:89:58:28:1f:14:e3:be: f0:ed:1f:2c:33:10:0f:22:5d:dc:e0:a7:dd:9a:1f:c2:7d:cb: f0:71:9c:44:bb:cf:f8:26:f8:df:61:97:96:03:5b:9e:48:1d: 5e:75:d7:f4:f2:8f:a7:e8:41:50:57:83:74:15:e4:a1:2e:0f: 52:a8:23:22:b3:a0:7b:e3:d6:e7:fa:47:d8:cb:f4:cd:e3:ec: c2:b6:64:5d:74:6c:2b:b4:e7:d0:eb:d4:0c:d5:93:10:7f:ca: e4:5c:84:5a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEumZ6JD51nOGe/t7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjRjMTVkNGUtNjg3Yy00N2I1LThlYTctNjI4OWZkYmY1NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQO3gMJRU+o5gVWNP7pqazkfWvMgj2YKJ1SN LHNRLdHFsRvsERppqbkr/ovfps6EacBA9y2rvBD9N12tjmajPQjENyp8zfJI5aNs rN19Z6rKa2SNNv9r78mI89l6eiQmIrW5zHSDzR/ZTIWZLz9T6vT4qjrQYkzKUKaz N8grzpxjhvmH1id/eV2YJlli4Syh5b18OBQF20IuZWV+E1bSb7NfHIVXUglCvknd tkloinNAta31V1b6odMxCFZRf+8i5M0y+AbOGWXKNCL2B6M3KopS0YZZWyUUja0G F9S6wQ52C3DlpYV4IgZ66AfX9Cii/ZMjuUsvgGMsM+AydVFDBwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFB7MiA8rdgR4A+nuOVHVnMaFoMV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYmNmNjNjZTktNzI1Mi0z ZWI3LTg2YTktYmUzOTExOThjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBxod8AwQD xxP4AwQDx3SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGHzihpHdUrR7IVu7IVtESPbqeUXodBUh+TlGwj9 PitRH0DWkVM8h+KgKPEHsVQT40KjIl2JxSojYz9N/yh589nIECX5/WBF/RPK74dM E47dwT1p6BJBlTFe1IdQy6TlVNGKF4KptwBpB//Tgbzj6hfjX7wyInQLXMkcgG2i 3npQFFUvGClXGf00NaJtUSdgA5D/Ett1JpB3isMRiVgoHxTjvvDtHywzEA8iXdzg p92aH8J9y/BxnES7z/gm+N9hl5YDW55IHV511/Tyj6foQVBXg3QV5KEuD1KoIyKz oHvj1uf6R9jL9M3j7MK2ZF10bCu059Dr1AzVkxB/yuRchFo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:05:15 2025 by rpki-client