$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa File: ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json) Hash identifier: DL1TEHFP/lXCrCjfTFZ+fxEZLRQDsOdbjB43e57Pdmo= Subject key identifier: 34:9B:14:A8:BD:69:3B:D1:FF:A2:15:B4:EF:5D:EB:98:90:6E:3B:BD Certificate issuer: /CN=67612b49-91a4-42d2-8352-16977b5d8e8a Certificate serial: 010D0C9F4328584B2FC1852273751BBEFD63AC40 Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14041 IP address blocks: 198.59.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:85:22:73:75:1b:be:fd:63:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=1b2878e7-a1f2-4358-ac16-1c2c07a27672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:f3:83:c1:5e:87:d9:2c:01:05:23:64:40: 26:d8:f8:06:6c:39:49:2f:7d:63:77:c2:9d:12:66: 1c:7b:ce:07:72:03:16:aa:dc:5c:b9:b8:f7:7e:7f: 75:f8:3d:a0:bc:76:0e:3b:c4:c6:3f:d0:61:71:61: d9:58:5f:28:ad:98:81:42:ca:9f:bc:a0:b8:a2:a2: 39:b5:66:a4:3e:59:73:a5:85:e6:4c:8a:c6:f1:05: 40:84:83:71:81:b9:1f:f2:cc:e6:ab:0c:58:3d:56: 32:fb:33:8b:9f:6b:31:21:39:c2:52:f8:53:c0:58: b9:51:29:f5:35:37:de:ba:cf:06:b8:ce:45:2a:d9: 8d:14:68:ea:9a:a6:82:f6:6b:a6:8f:2a:3b:c2:61: 52:4a:65:2e:89:1c:43:bd:54:cb:a9:9b:69:ba:65: 5b:bd:a1:de:a4:f7:4c:b1:6f:a2:ea:76:ee:22:bf: 4e:17:b8:a1:b0:c3:20:6b:a1:ab:f1:d6:50:f9:c0: 28:6d:28:d2:8b:1d:9a:c6:65:b2:3d:b9:3b:84:58: 5a:0b:5f:74:e4:b6:c3:c8:b5:21:3e:2b:70:4d:a0: 41:9d:2d:f3:37:89:1d:32:94:7e:98:4f:8a:3e:43: 13:5a:15:30:96:2e:c1:17:57:56:13:49:8d:70:75: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9B:14:A8:BD:69:3B:D1:FF:A2:15:B4:EF:5D:EB:98:90:6E:3B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl X509v3 Authority Key Identifier: keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer sbgp-ipAddrBlock: critical IPv4: 198.59.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:11:bf:2a:f4:73:7c:2a:45:89:26:97:0b:06:b7:d7:34:8d: 77:fb:ca:62:0f:4d:57:c7:21:8d:00:63:68:3a:37:c9:98:d6: bd:b7:60:60:5a:6a:67:d9:90:d0:ee:11:26:86:60:03:de:7c: 6c:95:11:1c:66:8c:14:11:c1:ae:8a:d8:67:ec:07:c1:d0:45: 3d:7d:c8:c6:c2:0b:74:db:c7:1e:a0:d6:43:34:6d:9a:b7:c4: e1:33:b5:3c:43:34:7c:0b:16:ff:cc:26:65:ed:7a:bb:4f:cb: 84:fb:56:23:41:60:44:36:1d:01:f9:53:60:3f:e4:8c:90:26: 0c:64:22:70:c5:9b:f5:90:51:49:0a:cf:98:98:d7:ff:24:e6: ee:e8:99:17:92:4d:2e:4b:17:6b:ba:50:04:12:32:f7:40:18: 59:94:69:89:19:54:dd:6d:b8:64:cc:a9:36:f4:55:ad:de:73: d2:8c:5c:13:42:3c:af:b0:05:1d:c9:2c:fc:2c:01:23:01:86: 26:10:df:5d:13:46:24:52:67:32:86:94:e1:5a:60:d5:e9:2b: 65:23:4e:df:6e:f6:33:13:3d:ef:a2:dd:17:10:a4:a2:b0:99: ef:e9:d7:73:0d:f7:64:81:c6:28:fa:0c:2d:bf:c8:4c:54:2d: 5c:a3:74:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYUic3Ubvv1jrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4 ZThhMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MWIyODc4ZTctYTFmMi00MzU4LWFjMTYtMWMyYzA3YTI3NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtLzg8Feh9ksAQUjZEAm2PgGbDlJL31jd8Kd EmYce84HcgMWqtxcubj3fn91+D2gvHYOO8TGP9BhcWHZWF8orZiBQsqfvKC4oqI5 tWakPllzpYXmTIrG8QVAhINxgbkf8szmqwxYPVYy+zOLn2sxITnCUvhTwFi5USn1 NTfeus8GuM5FKtmNFGjqmqaC9mumjyo7wmFSSmUuiRxDvVTLqZtpumVbvaHepPdM sW+i6nbuIr9OF7ihsMMga6Gr8dZQ+cAobSjSix2axmWyPbk7hFhaC1905LbDyLUh PitwTaBBnS3zN4kdMpR+mE+KPkMTWhUwli7BF1dWE0mNcHUk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSbFKi9aTvR/6IVtO9d65iQbju9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvYWI1NDBmMDgtNDBjYS0z NjJlLWE3MjMtZjNiZjBkNTNjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3 N2I1ZDhlOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0Rvyr0c3wqRYkmlwsGt9c0jXf7ymIPTVfHIY0AY2g6N8mY1r23YGBa amfZkNDuESaGYAPefGyVERxmjBQRwa6K2GfsB8HQRT19yMbCC3Tbxx6g1kM0bZq3 xOEztTxDNHwLFv/MJmXtertPy4T7ViNBYEQ2HQH5U2A/5IyQJgxkInDFm/WQUUkK z5iY1/8k5u7omReSTS5LF2u6UAQSMvdAGFmUaYkZVN1tuGTMqTb0Va3ec9KMXBNC PK+wBR3JLPwsASMBhiYQ310TRiRSZzKGlOFaYNXpK2UjTt9u9jMTPe+i3RcQpKKw me/p13MN92SBxij6DC2/yExULVyjdNE= -----END CERTIFICATE-----Generated at Tue Sep 16 00:43:29 2025 by rpki-client