$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa File: 7722da27-45e1-3732-a4d4-8186e8994e5d.roa (raw, json) Hash identifier: KGt6/tbaH4Kv18dBX/48w54g0YsMimUsnjVNNwvmI24= Subject key identifier: 91:CA:32:43:C8:CF:51:99:81:35:BE:CE:8D:A6:BD:B8:F3:F0:15:0F Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584BB45D45B6D945C3EB6C9C1F80 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 22748 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:45:b6:d9:45:c3:eb:6c:9c:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=3405dea1-cf18-4943-a1de-d412e1303a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:73:40:3d:9e:ba:25:16:26:41:0b:4f:af: 4b:09:19:40:a1:75:e0:92:00:8c:88:3d:04:2d:74: f4:91:42:97:d0:2e:eb:a5:b9:1e:50:61:88:cd:ce: b6:e1:70:74:4a:e0:ce:65:f1:33:6e:a3:51:54:00: 1d:c5:f8:00:91:b9:57:5f:7f:e6:5c:fd:56:29:48: a4:5f:67:2e:76:6d:68:91:c9:75:e8:39:7a:41:71: 72:17:05:6c:9e:be:a9:e3:01:67:03:af:aa:58:5e: dd:54:63:8e:53:19:55:32:6f:d3:37:55:6a:1a:d7: 59:1a:1f:d0:c7:0d:db:5a:d4:ab:68:83:2c:3d:d8: 28:ea:16:c4:e4:76:b4:e0:34:35:91:d6:95:38:e1: 9c:27:e0:03:e0:72:fa:9d:9f:6e:fa:a1:4f:2f:3a: a5:82:07:85:57:4e:59:1e:98:47:9e:1a:8b:35:31: 84:a6:e2:a6:dd:c4:1b:30:bc:86:56:09:14:eb:c9: 01:64:3d:fc:38:35:12:be:a2:5d:1c:90:e8:3e:3b: 4a:50:a6:39:1f:49:e3:f7:0e:25:3a:77:e0:b3:12: 7d:25:b5:08:de:ea:c2:3c:2d:dd:38:83:b4:55:7c: 98:2d:05:37:56:f6:82:41:e8:b7:3f:f8:17:82:0d: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CA:32:43:C8:CF:51:99:81:35:BE:CE:8D:A6:BD:B8:F3:F0:15:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:03:93:32:be:0e:58:18:7e:9e:9a:ba:29:1f:e1:05:ef:3d: e9:8d:73:1d:c1:40:e1:48:8c:bb:18:5d:b6:3b:1a:c9:df:57: b7:3f:07:86:fa:d0:4c:66:b2:ca:a6:99:21:e4:e5:20:95:36: ad:73:01:87:55:81:ae:cd:08:79:37:9a:49:53:72:8f:5e:1f: e3:01:0a:2e:ef:10:71:b6:1c:ec:7f:e1:99:49:44:a9:01:c6: f4:c9:05:37:02:8e:4e:51:00:f8:c9:4a:19:82:ee:34:3c:4b: ff:06:3d:c5:55:d4:dc:ab:32:c9:56:0e:8e:54:e1:a1:c1:16: fc:29:79:d7:81:3d:01:ca:e2:9f:d8:b7:d5:1c:25:96:76:68: 2c:51:92:11:0c:a3:a6:0b:5d:27:44:10:84:66:b0:d5:3b:e3: 3f:5f:14:8a:a0:84:c5:69:e1:e5:a0:b7:ca:62:e3:09:eb:7d: 0d:8a:06:13:74:41:6a:a6:c0:f2:eb:53:5d:51:8c:30:bb:f4: 72:f4:69:85:09:2c:00:46:a4:af:22:05:18:da:ef:9c:2b:77: a5:de:e5:96:3b:ad:38:51:1f:99:65:1d:a0:10:0f:1d:24:2a: 61:9b:28:2f:49:0c:6f:7c:f0:3e:b2:04:fb:ef:c4:85:7c:16: 18:ea:e5:f6 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu0XUW22UXD62ycH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzQwNWRlYTEtY2YxOC00OTQzLWExZGUtZDQxMmUxMzAzYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM9zQD2euiUWJkELT69LCRlAoXXgkgCMiD0E LXT0kUKX0C7rpbkeUGGIzc624XB0SuDOZfEzbqNRVAAdxfgAkblXX3/mXP1WKUik X2cudm1okcl16Dl6QXFyFwVsnr6p4wFnA6+qWF7dVGOOUxlVMm/TN1VqGtdZGh/Q xw3bWtSraIMsPdgo6hbE5Ha04DQ1kdaVOOGcJ+AD4HL6nZ9u+qFPLzqlggeFV05Z HphHnhqLNTGEpuKm3cQbMLyGVgkU68kBZD38ODUSvqJdHJDoPjtKUKY5H0nj9w4l OnfgsxJ9JbUI3urCPC3dOIO0VXyYLQU3VvaCQei3P/gXgg1pTQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJHKMkPIz1GZgTW+zo2mvbjz8BUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNzcyMmRhMjctNDVlMS0z NzMyLWE0ZDQtODE4NmU4OTk0ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAA8DkzK+DlgYfp6auikf4QXvPemNcx3BQOFI jLsYXbY7GsnfV7c/B4b60ExmssqmmSHk5SCVNq1zAYdVga7NCHk3mklTco9eH+MB Ci7vEHG2HOx/4ZlJRKkBxvTJBTcCjk5RAPjJShmC7jQ8S/8GPcVV1NyrMslWDo5U 4aHBFvwpedeBPQHK4p/Yt9UcJZZ2aCxRkhEMo6YLXSdEEIRmsNU74z9fFIqghMVp 4eWgt8pi4wnrfQ2KBhN0QWqmwPLrU11RjDC79HL0aYUJLABGpK8iBRja75wrd6Xe 5ZY7rThRH5llHaAQDx0kKmGbKC9JDG988D6yBPvvxIV8Fhjq5fY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:31:00 2025 by rpki-client