$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/c7d57a92-628b-3b27-9585-738765f25852.roa File: c7d57a92-628b-3b27-9585-738765f25852.roa (raw, json) Hash identifier: PBjlRtle4NoVFURR2zRsFsczFWWVINjR0d78U7AkD1k= Subject key identifier: 19:17:B3:33:28:60:73:3B:7D:06:91:F2:84:80:2C:D3:F0:DE:4E:B3 Certificate issuer: /CN=bc1f6b58-a62a-483c-91e9-4b599e71076e Certificate serial: 010D0C9F4328584BBB75A374A7FA3C392152B540 Authority key identifier: 58:D7:A1:17:68:DA:AD:B2:F3:57:C1:97:D6:81:E9:41:21:80:0E:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/c7d57a92-628b-3b27-9585-738765f25852.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 13380 IP address blocks: 199.30.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a3:74:a7:fa:3c:39:21:52:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1f6b58-a62a-483c-91e9-4b599e71076e Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=4922cabf-fc1d-424c-bf9e-aaadd4f09ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:4f:b7:04:c5:a5:f5:08:dd:2a:2d:2d:e9: aa:d8:95:64:94:01:04:24:a2:94:c3:66:13:2e:38: de:a8:89:8f:a5:35:a2:e6:93:1e:16:00:e3:c5:a5: 38:1b:55:59:7d:39:1b:22:8d:7d:ac:05:ce:54:12: 6e:6b:6b:1c:50:9b:08:f8:32:9b:fb:9a:08:db:e0: 3e:01:24:98:89:f1:69:9c:82:78:d0:7a:78:d0:f3: 95:76:df:be:4f:59:36:99:91:6e:ea:69:0e:e2:52: 86:09:a1:a8:1d:87:f7:b6:28:3a:66:5b:3e:44:c4: 3f:d0:a8:9c:40:49:ff:bb:a1:c6:06:a4:f3:d9:7b: 19:b9:3d:3c:8c:92:a8:9e:9f:a3:df:73:dd:27:9c: c9:a1:cb:bd:4c:a4:e8:67:51:1e:9d:a9:25:ef:9b: 47:b0:a1:62:ee:93:8a:82:00:0a:ba:f6:51:72:04: b4:8e:01:b8:18:48:da:45:fc:7d:c1:8d:ac:1d:eb: 36:d9:10:e0:e5:93:85:63:64:01:be:e7:3d:18:c5: 7b:cc:9d:2e:b1:49:8b:39:d9:f6:dd:6a:35:a9:0b: 79:65:af:87:67:0c:eb:86:37:8c:c5:cb:36:aa:2b: f0:53:8f:8b:3c:a9:e5:65:5f:96:e0:c4:6d:d0:da: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:B3:33:28:60:73:3B:7D:06:91:F2:84:80:2C:D3:F0:DE:4E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/c7d57a92-628b-3b27-9585-738765f25852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.crl X509v3 Authority Key Identifier: keyid:58:D7:A1:17:68:DA:AD:B2:F3:57:C1:97:D6:81:E9:41:21:80:0E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer sbgp-ipAddrBlock: critical IPv4: 199.30.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:dc:07:2f:5e:1f:07:40:5d:d5:22:d8:a0:67:2c:95:96:9f: fe:be:03:9e:c1:da:58:9a:f2:b3:cc:0c:e6:fc:e0:ec:77:98: de:de:13:8b:9a:3d:1b:fb:cb:c8:17:69:59:d1:b8:10:ef:86: 63:8e:f5:37:08:6d:97:87:98:8d:03:12:03:28:32:3d:eb:87: 62:0f:f4:96:eb:67:61:d1:24:f7:64:3d:75:1e:8e:43:bf:6b: ac:9f:24:b4:6e:50:05:d8:d2:65:0d:ea:4f:71:7e:b8:30:63: 35:e8:44:d8:45:8b:2f:60:87:c7:0a:db:a2:ee:7c:c4:e3:9d: 55:a9:51:17:16:59:cc:37:6e:0f:93:11:88:78:63:26:27:32: e3:21:03:6d:06:26:40:01:11:06:fe:76:d3:ce:45:93:73:eb: 2d:a4:5d:21:0e:2d:6e:18:e0:5e:91:fe:57:e3:ac:8b:98:13: fd:59:c0:c6:f9:86:23:79:6e:b6:b0:0d:85:59:4e:91:46:49: bc:ef:81:8b:b7:b0:3f:9a:56:c8:86:b4:cd:6b:f9:00:e2:1f: e3:55:2a:07:96:12:c4:97:6a:06:41:bb:23:27:d1:fe:c5:c9: 00:d9:09:36:bc:4e:83:4c:fb:11:39:47:74:dc:78:2a:be:01: 29:dc:d3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daN0p/o8OSFStUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxZjZiNTgtYTYyYS00ODNjLTkxZTktNGI1OTllNzEw NzZlMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NDkyMmNhYmYtZmMxZC00MjRjLWJmOWUtYWFhZGQ0ZjA5ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMhPtwTFpfUI3SotLemq2JVklAEEJKKUw2YT LjjeqImPpTWi5pMeFgDjxaU4G1VZfTkbIo19rAXOVBJua2scUJsI+DKb+5oI2+A+ ASSYifFpnIJ40Hp40POVdt++T1k2mZFu6mkO4lKGCaGoHYf3tig6Zls+RMQ/0Kic QEn/u6HGBqTz2XsZuT08jJKonp+j33PdJ5zJocu9TKToZ1Eenakl75tHsKFi7pOK ggAKuvZRcgS0jgG4GEjaRfx9wY2sHes22RDg5ZOFY2QBvuc9GMV7zJ0usUmLOdn2 3Wo1qQt5Za+HZwzrhjeMxcs2qivwU4+LPKnlZV+W4MRt0Nq0BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkXszMoYHM7fQaR8oSALNPw3k6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzFm NmI1OC1hNjJhLTQ4M2MtOTFlOS00YjU5OWU3MTA3NmUvYzdkNTdhOTItNjI4Yi0z YjI3LTk1ODUtNzM4NzY1ZjI1ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmMxZjZiNTgtYTYyYS00ODNjLTkx ZTktNGI1OTllNzEwNzZlL2JjMWY2YjU4LWE2MmEtNDgzYy05MWU5LTRiNTk5ZTcx MDc2ZS5jcmwwHwYDVR0jBBgwFoAUWNehF2jarbLzV8GX1oHpQSGADlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzFmNmI1OC1hNjJhLTQ4M2MtOTFlOS00YjU5 OWU3MTA3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7cBy9eHwdAXdUi2KBnLJWWn/6+A57B2lia8rPMDOb84Ox3mN7eE4ua PRv7y8gXaVnRuBDvhmOO9TcIbZeHmI0DEgMoMj3rh2IP9JbrZ2HRJPdkPXUejkO/ a6yfJLRuUAXY0mUN6k9xfrgwYzXoRNhFiy9gh8cK26LufMTjnVWpURcWWcw3bg+T EYh4YyYnMuMhA20GJkABEQb+dtPORZNz6y2kXSEOLW4Y4F6R/lfjrIuYE/1ZwMb5 hiN5brawDYVZTpFGSbzvgYu3sD+aVsiGtM1r+QDiH+NVKgeWEsSXagZBuyMn0f7F yQDZCTa8ToNM+xE5R3TceCq+ASnc0yw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:53:59 2025 by rpki-client