$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: HCdHoO4ZT49azCGMCTvXgYOOGLqpUxQ7g8zKWw0k0CA= Subject key identifier: D2:5D:37:91:0F:19:8B:C1:DB:11:E6:1C:10:9E:72:E0:5F:BE:7F:A2 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584B5F3722D159BC7D648604DA00 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:d1:59:bc:7d:64:86:04:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5e4e3498-c0e9-47a6-86d0-c6497e88e83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:aa:d7:07:e4:2f:89:90:c5:3c:bc:27:2f: f7:77:cb:f5:1c:bd:72:fa:c3:a5:65:8f:b3:bb:32: 5e:24:fa:03:ab:2f:88:ee:a3:89:4f:e6:a5:2f:ef: ec:96:07:f9:4b:5d:d2:71:a6:21:6d:af:d3:cb:83: 71:27:6b:dd:de:bb:56:97:2d:a9:e1:59:0e:92:f8: 84:23:d4:db:f1:b8:63:49:8c:7d:5f:1b:c8:44:8e: d1:4b:73:5b:60:d7:c0:ce:c0:f2:f1:da:b9:3e:68: 86:af:54:eb:bf:9f:ab:d0:49:1a:3c:94:27:94:8f: 6a:31:73:d5:a8:56:af:20:15:a3:c1:66:48:9a:df: 5d:ec:f8:13:80:13:a0:8f:0e:ee:49:dc:1e:62:8a: 6c:bd:90:c4:b9:4f:22:4b:fc:dc:24:51:5d:9d:2b: 0f:03:f3:60:98:df:e1:01:1f:e5:01:11:65:39:90: 51:c1:bf:6d:9f:8c:59:44:9e:39:62:29:1e:8f:0e: 50:55:43:32:a2:c0:56:80:1a:50:f9:26:ec:02:80: 34:d0:59:2c:39:45:db:0c:aa:7b:a7:5d:a7:12:15: 01:2f:72:e4:42:03:e5:b9:8b:93:0f:aa:ad:af:57: 06:a6:ff:f8:c9:c7:e6:db:33:79:77:95:3a:bd:bd: 2f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:37:91:0F:19:8B:C1:DB:11:E6:1C:10:9E:72:E0:5F:BE:7F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:0c:fa:c4:16:b0:53:21:e1:ee:5d:78:ef:fd:e6:54:bd:32: 50:2a:b4:69:08:dc:e0:74:50:92:b9:bb:ab:90:4f:e9:81:14: 40:db:23:61:c8:46:42:d2:67:88:c8:37:85:1e:0a:e9:6e:05: e9:88:26:a8:49:77:9c:61:5a:c8:fa:36:01:72:e3:cb:99:39: 6e:29:47:12:90:40:c7:52:8b:91:dd:33:5d:06:3c:6a:33:c5: 70:80:c9:eb:47:09:ff:2a:1b:78:8f:da:e8:8b:45:67:fb:58: ba:0a:7d:d9:ee:ee:e7:0d:3b:08:a7:05:d9:7d:d6:62:b3:b9: 9f:b0:22:4b:ac:cb:42:de:37:04:34:bc:9e:99:e1:83:21:94: 9e:82:80:1b:1f:6c:d6:28:0e:63:9e:fc:73:a8:c8:88:31:1c: 81:ca:1f:11:35:33:44:fa:5b:12:b8:98:3e:4c:2a:ff:e3:29: f0:fe:2d:0a:21:69:c9:fc:22:f2:c4:e5:98:ab:ca:70:63:dc: 49:84:73:c5:f7:c3:dd:46:a3:93:50:34:d3:e3:1e:7e:92:37: 9f:77:2d:ec:5a:49:ab:40:79:2d:13:f9:9c:87:de:45:d1:4f: c3:06:15:f5:a5:5c:36:a2:51:ae:5e:92:4e:07:28:f7:2e:f6: 19:52:b3:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyLRWbx9ZIYE2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWU0ZTM0OTgtYzBlOS00N2E2LTg2ZDAtYzY0OTdlODhlODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNyq1wfkL4mQxTy8Jy/3d8v1HL1y+sOlZY+z uzJeJPoDqy+I7qOJT+alL+/slgf5S13ScaYhba/Ty4NxJ2vd3rtWly2p4VkOkviE I9Tb8bhjSYx9XxvIRI7RS3NbYNfAzsDy8dq5PmiGr1Trv5+r0EkaPJQnlI9qMXPV qFavIBWjwWZImt9d7PgTgBOgjw7uSdweYopsvZDEuU8iS/zcJFFdnSsPA/NgmN/h AR/lARFlOZBRwb9tn4xZRJ45Yikejw5QVUMyosBWgBpQ+SbsAoA00FksOUXbDKp7 p12nEhUBL3LkQgPluYuTD6qtr1cGpv/4ycfm2zN5d5U6vb0vRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJdN5EPGYvB2xHmHBCecuBfvn+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkM+sQWsFMh4e5deO/95lS9MlAqtGkI3OB0UJK5u6uQT+mBFEDbI2HI RkLSZ4jIN4UeCuluBemIJqhJd5xhWsj6NgFy48uZOW4pRxKQQMdSi5HdM10GPGoz xXCAyetHCf8qG3iP2uiLRWf7WLoKfdnu7ucNOwinBdl91mKzuZ+wIkusy0LeNwQ0 vJ6Z4YMhlJ6CgBsfbNYoDmOe/HOoyIgxHIHKHxE1M0T6WxK4mD5MKv/jKfD+LQoh acn8IvLE5ZirynBj3EmEc8X3w91Go5NQNNPjHn6SN593LexaSatAeS0T+ZyH3kXR T8MGFfWlXDaiUa5ekk4HKPcu9hlSswA= -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:25 2025 by rpki-client