$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa File: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (raw, json) Hash identifier: MCocq1BYuE8KoabXn7l4sMnbkXyzwWTgqDKTL/OUgzE= Subject key identifier: 7E:6D:4B:6E:A8:49:68:0A:84:A9:01:B0:3A:C4:7E:19:5F:01:EA:74 Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584B0B76A61A6F72F046BDD71E80 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 62642 IP address blocks: 198.51.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a6:1a:6f:72:f0:46:bd:d7:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d308f1a9-3827-4614-a13a-eeb1c4dac4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:fd:a1:99:4b:72:f5:eb:2d:80:f6:40:2a: 5f:77:8a:b4:e9:58:16:c9:dd:ec:92:f7:97:50:1b: ad:39:00:73:67:f4:d6:c7:ec:db:65:15:4d:b0:e1: d6:be:f1:7b:4d:85:e3:7f:2d:0b:c9:be:1c:1c:14: 4f:2a:97:9d:14:cb:e8:6c:26:24:51:d0:3b:dc:a3: d2:1c:ff:00:25:79:0e:cc:44:d5:48:49:15:be:0e: 30:bc:7a:a6:9f:b0:a8:7b:c6:06:ea:c2:5a:ad:63: 0d:30:0f:78:2c:ab:f2:97:58:c0:59:dc:87:58:aa: 50:a2:bc:f7:00:b3:d4:f9:c0:8a:94:cf:10:37:c7: 61:e2:86:9a:e9:c3:e5:df:bf:66:0c:10:03:f8:5d: 8e:89:df:c8:3a:4f:07:89:76:20:c8:c9:19:61:23: e3:11:65:9f:e6:91:ee:58:96:0f:41:80:90:d4:d7: 96:4e:c0:0c:b6:17:1d:4a:09:70:aa:0e:9c:9a:d0: b3:c1:2b:91:32:6d:86:cb:18:af:52:a4:b6:cf:17: df:4b:d3:e1:37:97:d9:e0:a3:51:7d:17:bf:94:63: 48:03:2e:03:ff:14:cc:e0:e2:3c:94:8b:e4:45:e2: 80:a8:7c:d4:bc:5a:5f:52:0c:a8:ff:78:03:47:7c: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:4B:6E:A8:49:68:0A:84:A9:01:B0:3A:C4:7E:19:5F:01:EA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: 198.51.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5c:91:2a:95:60:94:e8:5b:08:1a:83:42:bc:f6:e6:2a:e9: d5:c4:4d:21:25:09:d5:d5:09:73:32:22:fd:53:e1:61:ab:ac: 04:38:6b:3a:fd:e6:41:c5:60:7f:6b:58:fc:7e:d0:b9:f0:e5: cd:0b:de:36:8d:b7:a4:53:c5:37:77:a7:99:3b:eb:cb:6b:02: 62:bf:eb:96:74:40:9f:17:41:1a:86:d9:22:3c:ec:12:d2:69: 8e:17:6c:be:e6:0d:d5:c0:d1:56:23:80:a4:2b:60:80:b2:42: 4f:4a:0d:c8:ab:ed:68:6a:93:1d:0a:03:93:34:c8:81:af:60: f8:ab:5c:ce:3b:87:a0:c6:94:3e:89:29:4f:da:96:4f:e8:20: b8:a9:c3:77:c8:ae:a8:24:cf:8e:d7:0c:2b:61:78:b6:6e:64: 85:99:f5:39:6c:37:7f:90:66:91:30:44:af:34:cc:08:ac:95: 09:67:b7:20:51:ba:d9:57:5d:39:46:e8:df:b4:7a:11:df:2e: b1:51:7e:ea:47:34:1f:9a:a2:f1:25:b6:23:88:b0:65:a9:e0: 21:20:e0:52:24:7f:b0:67:3c:5b:a1:8b:35:1e:86:0e:8e:6d: 57:2c:13:a0:fc:84:46:3f:64:a2:c8:3d:2d:08:f9:a2:53:72: df:b1:cf:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqYab3LwRr3XHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDMwOGYxYTktMzgyNy00NjE0LWExM2EtZWViMWM0ZGFjNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMr9oZlLcvXrLYD2QCpfd4q06VgWyd3skveX UButOQBzZ/TWx+zbZRVNsOHWvvF7TYXjfy0Lyb4cHBRPKpedFMvobCYkUdA73KPS HP8AJXkOzETVSEkVvg4wvHqmn7Coe8YG6sJarWMNMA94LKvyl1jAWdyHWKpQorz3 ALPU+cCKlM8QN8dh4oaa6cPl379mDBAD+F2Oid/IOk8HiXYgyMkZYSPjEWWf5pHu WJYPQYCQ1NeWTsAMthcdSglwqg6cmtCzwSuRMm2GyxivUqS2zxffS9PhN5fZ4KNR fRe/lGNIAy4D/xTM4OI8lIvkReKAqHzUvFpfUgyo/3gDR3woVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5tS26oSWgKhKkBsDrEfhlfAep0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWVhNGVlNjctMjY5OS0z YTBiLWE5NzgtMTNhN2IzNDViODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZckSqVYJToWwgag0K89uYq6dXETSElCdXVCXMyIv1T4WGrrAQ4azr9 5kHFYH9rWPx+0Lnw5c0L3jaNt6RTxTd3p5k768trAmK/65Z0QJ8XQRqG2SI87BLS aY4XbL7mDdXA0VYjgKQrYICyQk9KDcir7Whqkx0KA5M0yIGvYPirXM47h6DGlD6J KU/alk/oILipw3fIrqgkz47XDCtheLZuZIWZ9TlsN3+QZpEwRK80zAislQlntyBR utlXXTlG6N+0ehHfLrFRfupHNB+aovEltiOIsGWp4CEg4FIkf7BnPFuhizUehg6O bVcsE6D8hEY/ZKLIPS0I+aJTct+xzxI= -----END CERTIFICATE-----Generated at Fri Oct 10 23:31:42 2025 by rpki-client