$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/fa447953-e92b-30b1-9197-989d81d996f9.roa File: fa447953-e92b-30b1-9197-989d81d996f9.roa (raw, json) Hash identifier: pzzEKXx92PxwLJDybbtLrzj0fBdqdGNRlpt09YX9pII= Subject key identifier: 31:9E:11:0A:46:29:C2:3B:D6:CE:C7:C1:5C:B1:69:C8:76:58:A2:AB Certificate issuer: /CN=7b881d7c-479b-4ae4-80c2-a2995524b9ae Certificate serial: 010D0C9F4328584B7692C72A0C7FBD88A760C080 Authority key identifier: A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/fa447953-e92b-30b1-9197-989d81d996f9.roa Signing time: Thu 09 Oct 2025 09:48:49 +0000 ROA not before: Thu 09 Oct 2025 09:48:49 +0000 ROA not after: Wed 07 Jan 2026 10:48:49 +0000 asID: 401650 IP address blocks: 199.15.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:92:c7:2a:0c:7f:bd:88:a7:60:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b881d7c-479b-4ae4-80c2-a2995524b9ae Validity Not Before: Oct 9 09:48:49 2025 GMT Not After : Jan 7 10:48:49 2026 GMT Subject: CN=dec7bc57-7dc8-4ab3-adde-c8a35c134770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:3f:b5:54:ac:31:2f:d6:b6:ba:67:dc:6d: 72:f2:ec:5f:c2:fc:f9:f3:25:65:d1:f8:36:f3:51: ef:24:35:09:1f:5d:a2:22:85:19:7c:fa:5c:21:2a: 2d:28:03:88:b3:37:b9:d7:98:fd:fb:f9:ec:f3:25: 56:11:7f:97:ab:67:90:8b:7b:ee:6c:8e:20:4e:ec: 9d:8e:09:e2:69:b2:fe:99:2e:54:75:93:52:8d:f0: c5:12:de:5b:9b:ff:4c:6c:4c:ef:df:e5:b1:a2:3c: cc:62:ac:0c:f8:c4:87:74:cd:97:9c:82:6c:0a:10: f7:96:4b:7e:ae:15:d5:2c:c8:98:2f:2c:69:90:4f: ce:a2:ad:62:97:0a:12:35:db:92:60:cc:c7:8e:00: a8:23:d4:61:df:22:81:8c:15:a7:13:a2:9d:a8:bc: 33:46:c4:70:5e:5a:7e:e3:05:b0:e9:94:17:b8:72: 42:9a:61:28:cf:7f:e3:49:28:1e:58:b8:50:86:97: be:2e:c8:0e:19:e6:32:a4:a3:14:6d:f5:92:74:24: c3:e2:48:8d:7f:a9:ce:4c:9e:e3:85:2e:e8:49:57: c1:69:38:b9:d1:b9:35:f8:b2:dd:d0:56:4b:eb:d1: 09:22:af:31:3d:2b:3b:28:2b:52:3d:a5:99:cd:f0: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:11:0A:46:29:C2:3B:D6:CE:C7:C1:5C:B1:69:C8:76:58:A2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/fa447953-e92b-30b1-9197-989d81d996f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.crl X509v3 Authority Key Identifier: keyid:A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer sbgp-ipAddrBlock: critical IPv4: 199.15.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:07:db:93:a7:dc:f6:e8:30:ea:3e:2d:f8:6f:d1:d4:1b:67: 15:1e:5d:75:ee:26:10:ee:4d:6c:d6:05:8d:bb:04:9c:bf:e1: 38:9f:85:94:ff:cd:59:3f:d3:e2:76:18:0c:fc:83:19:e3:7b: a4:51:23:3f:83:2f:8b:67:ba:2e:81:9e:2b:8b:e3:7c:fc:58: 26:31:3d:5d:2c:fc:e2:fe:5a:c2:5a:e4:e1:7d:53:66:54:c5: f3:f3:19:d1:1e:02:b3:ed:d9:52:09:cf:54:62:6e:ba:75:20: 3b:bc:db:a4:72:07:f2:51:a5:10:27:0e:5f:4c:67:de:c7:ef: c9:be:c5:ba:ca:73:c1:04:56:17:bb:29:46:c9:0d:b0:32:18: 53:8c:2c:c7:cd:1a:99:97:75:19:88:b8:f5:f0:73:75:b0:cf: 30:d3:04:e5:06:76:14:96:43:eb:e1:98:3e:1e:6d:7e:71:9a: 87:86:03:4a:f1:1c:ed:52:be:f9:dd:79:3b:69:0c:ab:78:0b: 14:16:a9:8a:a9:7e:47:6e:4d:b6:3c:64:1c:85:4c:5e:6b:cb: 62:9e:e9:7b:5f:9b:be:2c:08:e7:9b:1c:96:42:1c:7d:f0:1c: 6e:18:fa:e3:3a:23:07:46:2d:d3:91:de:9b:6f:e8:c2:09:2b: 05:c8:c7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2kscqDH+9iKdgwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4ODFkN2MtNDc5Yi00YWU0LTgwYzItYTI5OTU1MjRi OWFlMB4XDTI1MTAwOTA5NDg0OVoXDTI2MDEwNzEwNDg0OVowLzEtMCsGA1UEAxMk ZGVjN2JjNTctN2RjOC00YWIzLWFkZGUtYzhhMzVjMTM0NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvw/tVSsMS/Wtrpn3G1y8uxfwvz58yVl0fg2 81HvJDUJH12iIoUZfPpcISotKAOIsze515j9+/ns8yVWEX+Xq2eQi3vubI4gTuyd jgniabL+mS5UdZNSjfDFEt5bm/9MbEzv3+WxojzMYqwM+MSHdM2XnIJsChD3lkt+ rhXVLMiYLyxpkE/Ooq1ilwoSNduSYMzHjgCoI9Rh3yKBjBWnE6KdqLwzRsRwXlp+ 4wWw6ZQXuHJCmmEoz3/jSSgeWLhQhpe+LsgOGeYypKMUbfWSdCTD4kiNf6nOTJ7j hS7oSVfBaTi50bk1+LLd0FZL69EJIq8xPSs7KCtSPaWZzfB7CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGeEQpGKcI71s7HwVyxach2WKKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83Yjg4 MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5NTUyNGI5YWUvZmE0NDc5NTMtZTkyYi0z MGIxLTkxOTctOTg5ZDgxZDk5NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2I4ODFkN2MtNDc5Yi00YWU0LTgw YzItYTI5OTU1MjRiOWFlLzdiODgxZDdjLTQ3OWItNGFlNC04MGMyLWEyOTk1NTI0 YjlhZS5jcmwwHwYDVR0jBBgwFoAUp5WmmRvYvqqQJHkZKo+pKyPtkC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83Yjg4MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5 NTUyNGI5YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxw/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwH25On3PboMOo+Lfhv0dQbZxUeXXXuJhDuTWzWBY27BJy/4TifhZT/ zVk/0+J2GAz8gxnje6RRIz+DL4tnui6BniuL43z8WCYxPV0s/OL+WsJa5OF9U2ZU xfPzGdEeArPt2VIJz1Ribrp1IDu826RyB/JRpRAnDl9MZ97H78m+xbrKc8EEVhe7 KUbJDbAyGFOMLMfNGpmXdRmIuPXwc3WwzzDTBOUGdhSWQ+vhmD4ebX5xmoeGA0rx HO1SvvndeTtpDKt4CxQWqYqpfkduTbY8ZByFTF5ry2Ke6Xtfm74sCOebHJZCHH3w HG4Y+uM6IwdGLdOR3ptv6MIJKwXIx/A= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:18 2025 by rpki-client