$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: 7cnaqAKKpUiRUouXfOf0K9KPvCLC9p4pK3v7VUdwJjc= Subject key identifier: B9:01:CA:4F:02:90:8D:6F:31:80:A8:66:C3:3E:C9:0B:E9:70:41:A1 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584B9E079D1BB277833100BFEAC0 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9d:1b:b2:77:83:31:00:bf:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4d8069cb-57e2-4f03-9abe-5bf01331aa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:34:d1:2d:d7:47:e3:fd:63:67:ba:af:f1: 8a:ba:a7:9a:14:5a:79:e5:da:f2:66:c5:72:b5:5f: 73:23:e0:d4:a1:63:28:51:21:3b:b4:ff:8f:a2:d9: 48:bb:47:45:ad:8b:9f:8d:43:78:d8:e1:4b:53:f3: bc:74:98:83:81:9a:82:e5:fc:8f:5d:5c:4d:b6:16: b6:4c:a1:c3:c1:54:7d:16:45:ee:44:42:19:47:d9: 3c:fd:9b:35:6f:ab:6b:17:78:0a:49:ab:2b:7a:f2: 12:4e:f6:50:62:3f:a5:99:42:7a:22:89:8d:3f:0d: cf:8c:3a:d2:d5:2e:30:55:cd:23:a2:73:67:ff:ea: cc:43:36:ed:9e:16:b7:40:f5:39:c6:34:e8:c7:58: c7:0d:96:27:1b:48:d3:6c:16:a0:b4:c3:00:80:30: 66:7b:79:28:66:9b:9c:94:49:09:41:d0:46:a5:77: 8a:72:23:02:eb:bd:23:7a:5d:29:6a:48:2d:79:0f: 8f:10:1f:ef:18:72:15:ad:65:79:ed:eb:68:0c:0a: 04:57:b7:93:71:b2:fd:04:ae:20:95:eb:d9:ea:a4: d4:6a:3e:79:22:01:a5:4c:05:64:4e:b0:25:4e:79: 42:b5:54:5c:ab:74:9a:b0:6b:7d:ac:05:31:da:e3: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:CA:4F:02:90:8D:6F:31:80:A8:66:C3:3E:C9:0B:E9:70:41:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:89:ac:3c:0f:0d:41:fb:ba:1e:52:f7:f6:25:0f:00:b6:e9: ac:27:fd:af:6b:60:59:23:96:92:41:da:9c:64:3e:17:aa:8a: 25:c6:56:49:1f:cd:06:26:e5:c7:d8:48:a9:f5:f9:aa:88:ff: 65:a1:81:60:a4:5e:1d:42:a2:79:88:77:1a:8b:17:ca:a0:eb: 2e:d6:55:00:35:29:75:a1:55:0f:ff:d2:92:69:58:38:a3:6b: 31:6a:2e:94:69:34:01:ad:87:13:e2:44:7b:f8:34:dd:65:84: f2:b1:7a:f1:fa:a6:81:a3:a3:64:17:8a:f3:c3:65:8e:aa:f7: b9:09:b1:23:af:00:78:9b:47:9b:de:28:84:01:11:f8:ed:57: 10:75:29:6f:ee:1e:54:1b:d0:28:93:fc:11:70:82:b1:cf:f5: 72:dc:cf:71:da:a2:af:8c:60:bb:0f:96:b8:c2:8b:7f:e2:77: 3b:4c:1a:16:85:4c:20:f4:ab:32:a2:5b:71:b2:89:b1:13:67: f6:07:7e:d4:64:da:76:02:2d:c1:ec:20:b5:3e:b7:bc:cd:9f: 39:81:94:24:72:ee:f9:5c:5a:7e:bf:ed:cf:cb:db:18:21:f8: 97:76:cb:e6:d5:16:70:1a:6e:7f:67:99:bd:57:c4:10:ec:a2: 58:74:0d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB50bsneDMQC/6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGQ4MDY5Y2ItNTdlMi00ZjAzLTlhYmUtNWJmMDEzMzFhYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfE00S3XR+P9Y2e6r/GKuqeaFFp55dryZsVy tV9zI+DUoWMoUSE7tP+PotlIu0dFrYufjUN42OFLU/O8dJiDgZqC5fyPXVxNtha2 TKHDwVR9FkXuREIZR9k8/Zs1b6trF3gKSasrevISTvZQYj+lmUJ6IomNPw3PjDrS 1S4wVc0jonNn/+rMQzbtnha3QPU5xjTox1jHDZYnG0jTbBagtMMAgDBme3koZpuc lEkJQdBGpXeKciMC670jel0pakgteQ+PEB/vGHIVrWV57etoDAoEV7eTcbL9BK4g levZ6qTUaj55IgGlTAVkTrAlTnlCtVRcq3SasGt9rAUx2uNkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkByk8CkI1vMYCoZsM+yQvpcEGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCJrDwPDUH7uh5S9/YlDwC26awn/a9rYFkjlpJB2pxkPheqiiXGVkkf zQYm5cfYSKn1+aqI/2WhgWCkXh1ConmIdxqLF8qg6y7WVQA1KXWhVQ//0pJpWDij azFqLpRpNAGthxPiRHv4NN1lhPKxevH6poGjo2QXivPDZY6q97kJsSOvAHibR5ve KIQBEfjtVxB1KW/uHlQb0CiT/BFwgrHP9XLcz3Haoq+MYLsPlrjCi3/idztMGhaF TCD0qzKiW3GyibETZ/YHftRk2nYCLcHsILU+t7zNnzmBlCRy7vlcWn6/7c/L2xgh +Jd2y+bVFnAabn9nmb1XxBDsolh0DYQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:33 2025 by rpki-client