$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: 0FtdGvot1TJrcCJrPT6+jOj5LMCqCXZvt3YR50AfOaI= Subject key identifier: B4:84:DC:F3:90:17:C8:81:AE:54:4E:8E:84:E8:56:4F:8D:2F:A7:DA Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584BA0D2444713CB4373418BEA80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:44:47:13:cb:43:73:41:8b:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ff0f18d8-e083-45a8-ad33-2c72d1a7c089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fb:32:00:14:c4:d9:67:4d:50:02:12:1a:7b: 48:8c:c6:32:16:c8:d3:f7:bc:df:e2:54:63:0f:1f: ab:3c:2f:71:f5:a8:2c:7a:63:71:2a:a6:2d:70:e1: 0a:82:72:25:9d:5c:93:3a:f4:c9:45:55:60:7b:6b: db:6b:b8:f4:7c:8b:08:ae:39:13:a9:0b:ef:ed:50: f7:85:0b:1f:53:34:f0:36:54:76:b7:8a:b4:e3:55: bf:04:46:bf:45:3a:6f:9d:0f:84:65:96:c3:85:05: ed:91:31:fb:3b:fb:21:08:a5:98:af:6e:d4:4c:be: 2e:12:a7:42:3e:70:d7:01:ca:dc:0f:64:a0:e7:2e: c9:b7:b0:6d:a1:98:d3:4a:00:e3:1a:eb:70:dd:af: 32:38:cf:37:d1:ae:4d:34:db:64:0d:d8:68:28:f2: 6d:d1:96:fb:4b:c1:36:03:4a:e6:a4:5e:4a:7e:06: 56:0f:b1:54:88:5f:c1:ff:cb:c6:94:2b:6c:0d:51: 24:9d:1f:89:b4:d7:61:dc:0e:2d:e4:00:51:c2:8f: 11:22:13:01:2b:11:19:3f:d5:c4:8e:27:1a:dd:bf: 83:f4:85:11:37:97:39:05:51:da:9d:c6:e4:7c:a4: 83:e2:02:11:62:65:52:46:ec:77:74:16:7d:e8:3f: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:DC:F3:90:17:C8:81:AE:54:4E:8E:84:E8:56:4F:8D:2F:A7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:17:c2:92:b0:79:f3:99:ca:37:ce:ee:5c:44:88:6e:f8:5a: a8:72:3b:41:81:49:7b:e4:c9:d8:2f:ef:31:86:75:0c:cd:85: 36:69:a3:1d:0d:bc:9d:0e:41:ea:0d:07:52:9a:b2:85:ae:e1: 27:23:89:e5:70:8f:22:e7:c3:c0:d6:92:2c:8e:7e:6a:49:66: ee:d1:44:33:36:26:1b:96:a8:69:ce:a9:8b:72:3f:93:f1:b6: b3:64:b3:d0:06:24:3f:07:00:56:63:b3:89:f1:8e:29:7c:7e: 3d:9a:20:88:05:03:90:c7:e7:06:3c:c3:36:0f:30:a3:7d:97: 91:87:a3:42:59:86:96:b9:31:ea:34:aa:69:cc:87:00:5d:17: 20:7a:d0:49:37:b1:a8:6b:12:33:27:88:8f:3e:80:0c:10:94: 37:e5:99:9f:2a:64:84:74:c8:58:9a:ce:03:93:ed:6f:ea:ba: a2:7d:ca:e7:04:1d:c3:18:ec:dc:4f:b2:0a:34:7e:cd:e4:3e: f4:8a:0e:28:98:93:62:b2:c2:dc:b7:92:a5:e1:75:bc:04:51: 16:df:71:8e:26:65:ff:5b:62:17:f2:46:bf:82:d4:d4:3f:c5: 5b:8d:c5:e3:ed:2e:c2:87:96:43:f4:cd:e7:d0:cf:4a:36:ef: b7:05:79:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kRHE8tDc0GL6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZmYwZjE4ZDgtZTA4My00NWE4LWFkMzMtMmM3MmQxYTdjMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPsyABTE2WdNUAISGntIjMYyFsjT97zf4lRj Dx+rPC9x9agsemNxKqYtcOEKgnIlnVyTOvTJRVVge2vba7j0fIsIrjkTqQvv7VD3 hQsfUzTwNlR2t4q041W/BEa/RTpvnQ+EZZbDhQXtkTH7O/shCKWYr27UTL4uEqdC PnDXAcrcD2Sg5y7Jt7BtoZjTSgDjGutw3a8yOM830a5NNNtkDdhoKPJt0Zb7S8E2 A0rmpF5KfgZWD7FUiF/B/8vGlCtsDVEknR+JtNdh3A4t5ABRwo8RIhMBKxEZP9XE jica3b+D9IURN5c5BVHancbkfKSD4gIRYmVSRux3dBZ96D9JVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSE3POQF8iBrlROjoToVk+NL6faMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkXwpKwefOZyjfO7lxEiG74WqhyO0GBSXvkydgv7zGGdQzNhTZpox0N vJ0OQeoNB1KasoWu4ScjieVwjyLnw8DWkiyOfmpJZu7RRDM2JhuWqGnOqYtyP5Px trNks9AGJD8HAFZjs4nxjil8fj2aIIgFA5DH5wY8wzYPMKN9l5GHo0JZhpa5Meo0 qmnMhwBdFyB60Ek3sahrEjMniI8+gAwQlDflmZ8qZIR0yFiazgOT7W/quqJ9yucE HcMY7NxPsgo0fs3kPvSKDiiYk2Kywty3kqXhdbwEURbfcY4mZf9bYhfyRr+C1NQ/ xVuNxePtLsKHlkP0zefQz0o277cFeQw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:07:01 2025 by rpki-client