$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa File: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (raw, json) Hash identifier: CU0ZnnwGj8gncJrAIAKUgjbzQan2iTzZVYhhbOT4T90= Subject key identifier: 61:D6:0A:01:DD:4A:E2:75:E4:9B:64:D5:B7:F9:50:DC:90:63:98:A6 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584B8EAD0BF0935272C0B1DE7B00 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 393468 IP address blocks: 199.185.120.0/23 maxlen: 23 199.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0b:f0:93:52:72:c0:b1:de:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c3b90e72-e79b-4c01-8a14-064c6a692028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:c9:6b:12:53:db:74:9a:36:1a:a2:b9:01: b2:85:1b:d7:ef:5e:92:02:11:fc:5e:02:2f:91:ed: 49:73:dd:57:6e:0e:f0:df:6b:ab:b1:df:31:4e:f6: 9e:c0:cd:ec:4d:c5:ed:54:96:9a:72:8c:a3:1d:10: 71:e4:c2:81:84:58:18:f0:7f:b9:66:a2:37:c6:4c: c4:79:5f:c3:92:e0:59:e7:38:f5:99:9b:e1:e9:ef: ff:02:e1:35:9f:dc:b5:cb:02:85:9d:0e:43:6b:e0: 1e:cb:80:85:e2:3b:f2:0e:2b:9e:25:56:67:e5:d2: fe:64:a1:1b:8d:8a:9c:4f:e8:a5:0a:e2:da:9b:c5: a7:65:71:fe:02:41:94:ea:5b:04:78:76:71:4f:4a: 53:9a:d2:7d:3b:2d:6d:d7:d1:bb:c8:34:81:42:d7: 3b:a6:87:e5:e4:e9:b7:25:f1:ba:43:80:57:4c:ef: db:83:7e:36:2a:39:83:f8:34:39:52:df:81:bf:c8: fa:a3:5a:c7:01:f3:60:e0:10:02:6f:d7:fd:2a:3f: 2a:31:10:43:64:3d:8f:da:f3:0d:5d:df:67:95:98: 90:26:b0:9d:cf:3d:69:5f:0c:7c:27:f2:77:7d:5d: b6:a2:82:7f:dc:4d:5e:41:35:83:3d:1f:46:5a:a0: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:0A:01:DD:4A:E2:75:E4:9B:64:D5:B7:F9:50:DC:90:63:98:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a2:4f:63:ae:f5:83:43:d6:da:77:a7:bf:87:4b:0b:89:47: 14:21:6a:0a:e9:9e:a8:0d:c9:f6:2f:26:5a:c8:cc:81:2a:43: d4:a1:a4:3d:49:97:a4:1f:c1:da:9c:6e:16:de:11:4d:da:9d: ed:8a:e3:c1:ba:4d:37:b8:4e:e4:34:fd:45:d9:21:05:a7:38: d3:35:1b:77:44:df:fe:56:ee:09:3d:d9:11:a0:b8:68:5c:bd: 89:45:b7:15:d9:e3:4b:a0:2c:52:cf:12:ae:1e:60:60:cb:a2: f3:d0:bd:13:94:75:d8:57:80:bb:45:48:e5:71:55:88:b6:86: 80:32:4a:17:c5:94:9d:d9:dc:95:c5:31:78:29:a0:f8:5d:b3: 72:ed:f3:34:ca:ed:ba:50:e8:8f:22:05:d4:d4:c9:4e:fe:3d: b8:3b:1b:34:5e:7f:e8:3b:61:86:5b:fc:6a:4e:18:e0:28:62: c7:98:53:00:dc:15:7a:90:08:8c:ac:4d:26:4b:da:64:36:c3: 02:3d:20:95:40:29:71:6a:44:fc:68:b9:39:84:ba:d9:e4:da: ee:f8:7a:24:5b:9c:76:20:3e:c1:2c:11:b7:86:0a:63:09:f9: 68:66:f8:45:20:42:c8:aa:34:fc:41:58:ed:65:00:90:e5:29: b0:95:53:4a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuOrQvwk1JywLHeewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzNiOTBlNzItZTc5Yi00YzAxLThhMTQtMDY0YzZhNjkyMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LjJaxJT23SaNhqiuQGyhRvX716SAhH8XgIv ke1Jc91Xbg7w32ursd8xTvaewM3sTcXtVJaacoyjHRBx5MKBhFgY8H+5ZqI3xkzE eV/DkuBZ5zj1mZvh6e//AuE1n9y1ywKFnQ5Da+Aey4CF4jvyDiueJVZn5dL+ZKEb jYqcT+ilCuLam8WnZXH+AkGU6lsEeHZxT0pTmtJ9Oy1t19G7yDSBQtc7pofl5Om3 JfG6Q4BXTO/bg342KjmD+DQ5Ut+Bv8j6o1rHAfNg4BACb9f9Kj8qMRBDZD2P2vMN Xd9nlZiQJrCdzz1pXwx8J/J3fV22ooJ/3E1eQTWDPR9GWqAcSwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGHWCgHdSuJ15Jtk1bf5UNyQY5imMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMzU0NGE0NzEtMjdjYS0z ZDhiLTlmOGEtNmZhMmY2MTM0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHuXgD BADHuXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAM6JPY671g0PW2nenv4dLC4lHFCFqCumeqA3J9i8mWsjM gSpD1KGkPUmXpB/B2pxuFt4RTdqd7YrjwbpNN7hO5DT9RdkhBac40zUbd0Tf/lbu CT3ZEaC4aFy9iUW3FdnjS6AsUs8Srh5gYMui89C9E5R12FeAu0VI5XFViLaGgDJK F8WUndnclcUxeCmg+F2zcu3zNMrtulDojyIF1NTJTv49uDsbNF5/6Dthhlv8ak4Y 4Chix5hTANwVepAIjKxNJkvaZDbDAj0glUApcWpE/Gi5OYS62eTa7vh6JFucdiA+ wSwRt4YKYwn5aGb4RSBCyKo0/EFY7WUAkOUpsJVTSg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:44 2025 by rpki-client