$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/4a9a0be8-db6d-3ca5-b9e4-6efc86e0529e.roa File: 4a9a0be8-db6d-3ca5-b9e4-6efc86e0529e.roa (raw, json) Hash identifier: zvPMmnmgnKScHvhgqMRVfYICt2kqsKFTt19uWNKmcpY= Subject key identifier: B9:55:FA:9C:C1:40:F9:BB:99:0F:D5:89:98:5A:CC:11:3C:EF:B5:96 Certificate issuer: /CN=9efc5ee4-5178-488a-abd0-63bc19c491eb Certificate serial: 010D0C9F4328584B4D05171D05726D5DE4A8E100 Authority key identifier: 40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/4a9a0be8-db6d-3ca5-b9e4-6efc86e0529e.roa Signing time: Wed 24 Sep 2025 12:35:12 +0000 ROA not before: Wed 24 Sep 2025 12:35:12 +0000 ROA not after: Tue 23 Dec 2025 13:35:12 +0000 asID: 16642 IP address blocks: 199.229.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:05:17:1d:05:72:6d:5d:e4:a8:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efc5ee4-5178-488a-abd0-63bc19c491eb Validity Not Before: Sep 24 12:35:12 2025 GMT Not After : Dec 23 13:35:12 2025 GMT Subject: CN=e0ac9c9c-5b2f-4838-a071-86ac0c3aaabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:38:e9:59:40:a4:d9:2e:73:a8:a9:b5:8b: 7b:57:cc:b7:a6:b6:0c:48:e0:b4:b6:59:45:b2:2d: 54:64:5e:61:e8:ec:fe:6e:0f:62:0d:1b:2e:57:cc: 3d:e1:72:4f:02:e2:53:22:fd:b5:b0:62:21:df:6c: 25:ef:81:7d:25:1e:ce:95:8b:a6:60:6a:72:87:f2: 4a:30:78:58:37:ce:02:b7:f1:cc:9b:87:5e:20:3f: 16:3b:50:10:19:ec:70:8f:20:64:e8:3b:d8:c9:af: c9:f1:ec:22:e4:98:cf:91:bc:ec:5a:5e:f9:b5:31: 47:f1:72:2e:e7:e6:1b:3b:ed:78:ee:1c:56:65:55: c6:a5:c6:a8:b0:4e:ea:ff:47:df:44:63:9d:4f:e2: a6:ec:cf:2a:7b:c0:ce:eb:62:be:19:42:91:56:40: 65:93:3b:47:85:5e:a4:15:89:18:20:a4:f5:55:9e: 1d:0f:3e:75:68:a8:8b:51:b2:4a:13:f7:87:91:2d: f1:ba:83:97:1d:2a:47:d2:bb:ae:6e:74:ad:04:29: 6b:5e:20:3e:69:38:52:37:7c:4c:9c:1a:05:ef:fc: 74:f4:79:71:d6:90:81:2f:6c:ba:f9:a7:c6:4c:03: f5:39:4c:d2:a5:46:e9:14:6e:36:5a:10:fa:6d:f2: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:FA:9C:C1:40:F9:BB:99:0F:D5:89:98:5A:CC:11:3C:EF:B5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/4a9a0be8-db6d-3ca5-b9e4-6efc86e0529e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl X509v3 Authority Key Identifier: keyid:40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer sbgp-ipAddrBlock: critical IPv4: 199.229.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0b:1f:a2:4d:05:fe:3d:d1:3b:4d:9f:ab:e4:74:ec:c8:7b: 1f:05:f2:e2:40:2c:75:1f:3d:fa:d6:3c:ae:7e:de:be:77:53: d6:55:da:1b:44:50:e8:f7:bb:2f:b9:f4:b2:46:22:ed:9a:35: 0b:38:cc:b8:02:bb:3f:d9:a6:06:60:7e:ad:3d:2d:ec:47:fe: 36:a0:ab:ae:75:84:55:10:98:ce:1d:82:6a:6a:a2:6b:2d:2a: da:06:ed:09:16:53:63:85:70:a8:bf:62:ed:50:52:28:fa:ca: 7c:d7:e7:77:6b:67:62:3c:bf:4c:a6:ac:b5:03:bb:5a:9a:eb: ba:80:c2:fe:ae:be:7b:7f:6c:f8:6f:2e:2b:9e:ac:ff:65:17: a8:49:a5:ab:8c:6b:4b:f3:e2:a3:c4:43:39:5e:a4:0b:8a:da: af:c7:48:ff:58:fa:42:e2:26:d8:3f:ac:af:90:d5:8a:5a:86: 3b:9e:7e:f7:bf:ae:ef:0d:66:10:5f:66:d6:b0:cd:01:98:0b: 12:b1:29:a6:8a:79:12:20:f0:77:04:42:80:57:f7:4e:1d:f2: 9f:6c:df:7a:54:cf:42:45:e5:90:f1:15:49:04:f2:b6:9a:39: 47:ea:37:76:5f:44:5e:02:90:0e:5e:88:5b:90:4c:76:ac:ce: cf:89:a3:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNBRcdBXJtXeSo4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVmYzVlZTQtNTE3OC00ODhhLWFiZDAtNjNiYzE5YzQ5 MWViMB4XDTI1MDkyNDEyMzUxMloXDTI1MTIyMzEzMzUxMlowLzEtMCsGA1UEAxMk ZTBhYzljOWMtNWIyZi00ODM4LWEwNzEtODZhYzBjM2FhYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydQ46VlApNkuc6iptYt7V8y3prYMSOC0tllF si1UZF5h6Oz+bg9iDRsuV8w94XJPAuJTIv21sGIh32wl74F9JR7OlYumYGpyh/JK MHhYN84Ct/HMm4deID8WO1AQGexwjyBk6DvYya/J8ewi5JjPkbzsWl75tTFH8XIu 5+YbO+147hxWZVXGpcaosE7q/0ffRGOdT+Km7M8qe8DO62K+GUKRVkBlkztHhV6k FYkYIKT1VZ4dDz51aKiLUbJKE/eHkS3xuoOXHSpH0ruubnStBClrXiA+aThSN3xM nBoF7/x09Hlx1pCBL2y6+afGTAP1OUzSpUbpFG42WhD6bfJ/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlV+pzBQPm7mQ/ViZhazBE877WWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZWZj NWVlNC01MTc4LTQ4OGEtYWJkMC02M2JjMTljNDkxZWIvNGE5YTBiZTgtZGI2ZC0z Y2E1LWI5ZTQtNmVmYzg2ZTA1MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWVmYzVlZTQtNTE3OC00ODhhLWFi ZDAtNjNiYzE5YzQ5MWViLzllZmM1ZWU0LTUxNzgtNDg4YS1hYmQwLTYzYmMxOWM0 OTFlYi5jcmwwHwYDVR0jBBgwFoAUQFl+DVrb8fUYrriSlFLYMY0G5FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZWZjNWVlNC01MTc4LTQ4OGEtYWJkMC02M2Jj MTljNDkxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx+UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMLH6JNBf490TtNn6vkdOzIex8F8uJALHUfPfrWPK5+3r53U9ZV2htE UOj3uy+59LJGIu2aNQs4zLgCuz/ZpgZgfq09LexH/jagq651hFUQmM4dgmpqomst KtoG7QkWU2OFcKi/Yu1QUij6ynzX53drZ2I8v0ymrLUDu1qa67qAwv6uvnt/bPhv LiuerP9lF6hJpauMa0vz4qPEQzlepAuK2q/HSP9Y+kLiJtg/rK+Q1Ypahjuefve/ ru8NZhBfZtawzQGYCxKxKaaKeRIg8HcEQoBX904d8p9s33pUz0JF5ZDxFUkE8raa OUfqN3ZfRF4CkA5eiFuQTHaszs+Jo8k= -----END CERTIFICATE-----Generated at Wed Nov 5 13:57:36 2025 by rpki-client