$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa File: fb908917-c491-34f1-b319-3e29a99f6486.roa (raw, json) Hash identifier: /uPzKOrRp32OGaV2CRdYeAovduY1bQ7JsSshnoZW1AA= Subject key identifier: DF:53:17:2A:54:2A:C0:6D:03:1A:19:64:6A:33:81:A9:B5:F7:0E:83 Certificate issuer: /CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2 Certificate serial: 010D0C9F4328584B76FC142EC0B1D59E9A5C9940 Authority key identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa Signing time: Thu 09 Oct 2025 13:21:00 +0000 ROA not before: Thu 09 Oct 2025 13:21:00 +0000 ROA not after: Wed 07 Jan 2026 14:21:00 +0000 asID: 33553 IP address blocks: 199.191.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:fc:14:2e:c0:b1:d5:9e:9a:5c:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2 Validity Not Before: Oct 9 13:21:00 2025 GMT Not After : Jan 7 14:21:00 2026 GMT Subject: CN=f641b4c2-252a-4e69-9469-4c20433d55b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:06:aa:3f:c7:47:40:ef:9f:9b:d9:5f:26: 12:61:35:66:10:4c:26:ac:ae:26:6a:6f:7b:73:b5: ba:86:1a:45:29:03:0a:73:12:7e:0a:e9:93:1b:d3: 05:5d:57:00:62:71:9f:b7:6e:d3:83:bb:5d:12:0f: 11:1b:65:88:f1:e0:65:18:0e:17:4e:63:3a:06:86: 05:f5:60:29:e7:44:6c:f1:26:b2:00:f1:4f:50:0f: 55:33:fd:22:17:e9:db:43:85:35:0c:f5:55:45:ba: 95:d5:26:dd:75:c1:a9:a2:50:29:c7:8a:3e:cf:29: 1d:41:00:c5:89:87:eb:09:99:cb:db:f8:7f:3c:70: c2:11:d3:1e:67:00:0b:7a:86:03:68:f8:36:89:67: ef:db:09:ff:d5:4e:c8:d9:5d:ec:d3:a2:71:b7:13: 03:7f:0e:9f:20:3c:ba:ed:2f:e6:7b:1e:b9:f4:25: b0:38:75:d0:5b:aa:31:f2:2c:70:96:2d:35:9e:63: a4:81:78:29:c5:fe:06:c2:69:d3:16:fc:0f:fd:ce: d6:b9:9d:88:c9:a7:46:d8:d7:02:10:ce:75:79:d9: bd:d5:65:5a:0f:f9:43:77:1b:2b:9f:38:a9:2d:80: eb:bf:f0:21:8e:9f:5b:3e:c9:df:00:a7:a6:c5:62: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:53:17:2A:54:2A:C0:6D:03:1A:19:64:6A:33:81:A9:B5:F7:0E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl X509v3 Authority Key Identifier: keyid:5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer sbgp-ipAddrBlock: critical IPv4: 199.191.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fe:b8:94:c6:f0:6e:24:cb:0b:43:80:12:c4:9f:f1:06:64: c2:1b:c0:de:af:13:a6:8c:17:b6:61:7c:db:91:44:91:ac:52: 6b:84:0b:d2:f9:91:fc:ab:e7:f4:87:53:91:f8:77:f8:5a:e2: 33:37:2a:b1:b6:a7:1c:e5:4e:30:3f:22:f9:9c:23:da:f0:04: c3:4f:35:a5:cb:36:9b:c5:a8:d2:70:e4:ac:de:9b:d9:6b:5f: dd:62:c2:46:35:ea:aa:31:e3:16:6a:c5:d9:a9:75:79:95:ca: 0f:03:69:c2:e8:64:d6:80:72:08:e4:22:89:25:05:94:15:01: 5f:7c:15:5e:da:ac:9e:c8:48:95:71:bb:36:e6:24:33:78:50: 8e:73:71:b8:f0:7c:d4:30:d1:8c:af:82:04:84:72:a6:88:8c: 30:48:0c:db:82:2f:2f:47:0b:76:2d:54:d6:8f:3e:ea:2e:ea: 44:8d:94:a1:3c:95:66:33:53:a5:da:9c:33:d4:5e:da:83:e2: 05:ca:c6:e6:8e:c1:5e:0c:5d:bf:0d:b3:4b:b1:bf:8b:6f:bb: d1:04:28:7d:3b:54:fd:86:00:ee:8b:b1:87:bb:10:17:b9:2e: 2c:9d:a6:6e:e6:17:8d:c5:45:f4:c4:ed:51:70:56:f9:e2:d0: 1e:f8:98:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2/BQuwLHVnppcmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYzNTUzMGMtOTdjNy00ZTYwLTlhNDQtODZjZjViNzcx NWEyMB4XDTI1MTAwOTEzMjEwMFoXDTI2MDEwNzE0MjEwMFowLzEtMCsGA1UEAxMk ZjY0MWI0YzItMjUyYS00ZTY5LTk0NjktNGMyMDQzM2Q1NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70Gqj/HR0Dvn5vZXyYSYTVmEEwmrK4mam97 c7W6hhpFKQMKcxJ+CumTG9MFXVcAYnGft27Tg7tdEg8RG2WI8eBlGA4XTmM6BoYF 9WAp50Rs8SayAPFPUA9VM/0iF+nbQ4U1DPVVRbqV1SbddcGpolApx4o+zykdQQDF iYfrCZnL2/h/PHDCEdMeZwALeoYDaPg2iWfv2wn/1U7I2V3s06JxtxMDfw6fIDy6 7S/mex659CWwOHXQW6ox8ixwli01nmOkgXgpxf4GwmnTFvwP/c7WuZ2IyadG2NcC EM51edm91WVaD/lDdxsrnzipLYDrv/Ahjp9bPsnfAKemxWI0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9TFypUKsBtAxoZZGozgam19w6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZjM1 NTMwYy05N2M3LTRlNjAtOWE0NC04NmNmNWI3NzE1YTIvZmI5MDg5MTctYzQ5MS0z NGYxLWIzMTktM2UyOWE5OWY2NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGYzNTUzMGMtOTdjNy00ZTYwLTlh NDQtODZjZjViNzcxNWEyLzhmMzU1MzBjLTk3YzctNGU2MC05YTQ0LTg2Y2Y1Yjc3 MTVhMi5jcmwwHwYDVR0jBBgwFoAUX4B6t47F1/5BUz5nXX8pbl/uG4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZjM1NTMwYy05N2M3LTRlNjAtOWE0NC04NmNm NWI3NzE1YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx78xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH+uJTG8G4kywtDgBLEn/EGZMIbwN6vE6aMF7ZhfNuRRJGsUmuEC9L5 kfyr5/SHU5H4d/ha4jM3KrG2pxzlTjA/IvmcI9rwBMNPNaXLNpvFqNJw5Kzem9lr X91iwkY16qox4xZqxdmpdXmVyg8DacLoZNaAcgjkIoklBZQVAV98FV7arJ7ISJVx uzbmJDN4UI5zcbjwfNQw0YyvggSEcqaIjDBIDNuCLy9HC3YtVNaPPuou6kSNlKE8 lWYzU6XanDPUXtqD4gXKxuaOwV4MXb8Ns0uxv4tvu9EEKH07VP2GAO6LsYe7EBe5 Liydpm7mF43FRfTE7VFwVvni0B74mP4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:27 2025 by rpki-client