$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa File: d50fa22c-28fc-3c4e-b12d-4de891836c64.roa (raw, json) Hash identifier: tKzxW8ox6hhk1QZvXuh29uE6d187xULS7brX4D+nNtg= Subject key identifier: D7:7C:86:01:B4:04:D1:57:0F:90:15:1C:F9:66:37:1B:FC:23:0B:37 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584B4E77097E9F72CDF07115A000 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 400446 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:09:7e:9f:72:cd:f0:71:15:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=392d3a02-44a4-4b88-bb89-f0df20a00ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:52:38:0a:88:bd:03:c3:28:ee:3a:e1:1a: 12:f5:79:9b:fb:69:59:91:10:e6:24:4d:32:b5:87: 21:63:58:55:e5:04:cf:0f:49:06:65:9c:9a:df:fc: 64:31:16:dd:63:bf:1d:79:e8:e6:82:38:88:80:fd: ec:04:43:99:be:f3:84:2f:1b:9f:ce:ad:7e:0f:f2: 32:67:ad:07:87:0c:c7:f3:dc:85:fd:b7:9d:c9:9a: 1a:de:65:87:4b:dc:3a:21:f7:c2:af:db:f6:a3:59: 35:4d:38:15:fa:6f:25:d0:cf:07:25:cf:e8:4d:93: e2:fc:8d:2c:05:92:76:74:a9:00:66:16:59:7a:6b: 39:b3:f0:3f:1b:4b:7b:dd:e2:71:5c:fd:15:d3:2a: 61:5b:41:b8:a0:51:9b:16:e8:a6:a8:2a:9d:d3:80: 7c:9e:96:40:d5:cc:9b:91:9e:2d:9d:a1:d5:36:97: c4:93:19:35:0d:57:f9:ed:7a:55:f5:08:c2:69:b0: 1a:0c:ba:69:e8:0a:de:a8:8f:50:70:5b:20:c3:66: dd:39:25:6e:4a:70:50:2d:58:f8:a2:9c:aa:9b:5a: 17:9e:06:c5:ec:e1:0f:79:58:53:1e:60:ca:94:fe: 09:5b:cc:07:6a:7d:bc:48:1a:2f:8d:a2:7b:29:2c: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:86:01:B4:04:D1:57:0F:90:15:1C:F9:66:37:1B:FC:23:0B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e5:58:76:44:7e:28:6c:ca:65:29:91:3d:57:39:b5:4a:b3: bf:87:4a:3f:aa:46:5c:d3:9c:84:4b:0b:10:8c:1b:4d:99:cc: 96:80:80:74:74:2e:b9:a0:15:b3:b7:51:1f:4c:b1:60:78:7b: 03:ae:97:89:56:13:eb:29:f1:89:e0:2c:63:3f:0b:f5:f9:65: aa:eb:54:16:f7:39:6d:30:a0:59:db:34:8e:cc:da:ed:6d:1f: ee:77:19:60:4c:50:34:1d:09:2e:83:77:03:6e:3e:49:b7:09: 1b:63:a7:de:f8:f6:09:e9:05:e5:d4:f5:27:c8:a7:3c:fe:35: 71:b8:66:c8:f8:a1:9d:48:27:73:17:63:a9:24:7e:7b:af:f4: 83:b1:d2:93:a9:e7:93:62:ad:58:3e:53:5d:f7:57:ab:3d:16: 6a:eb:3a:f8:b0:26:9d:4b:79:80:4c:9b:a1:84:76:05:2c:76: 63:3c:7f:51:0c:c5:a7:3f:f3:fd:09:ad:72:f0:30:03:fa:05: 74:ff:fc:ab:93:f5:33:bb:ef:9f:dc:fd:6d:a7:f6:d3:c3:70: b1:c6:30:7d:60:1a:ea:35:7f:82:51:8e:d4:52:20:9b:98:62: 81:3a:57:ba:64:a9:c1:68:6a:e3:08:64:49:33:dd:3d:3e:c9: 14:02:73:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwl+n3LN8HEVoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MzkyZDNhMDItNDRhNC00Yjg4LWJiODktZjBkZjIwYTAwYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1SOAqIvQPDKO464RoS9Xmb+2lZkRDmJE0y tYchY1hV5QTPD0kGZZya3/xkMRbdY78deejmgjiIgP3sBEOZvvOELxufzq1+D/Iy Z60HhwzH89yF/bedyZoa3mWHS9w6IffCr9v2o1k1TTgV+m8l0M8HJc/oTZPi/I0s BZJ2dKkAZhZZems5s/A/G0t73eJxXP0V0yphW0G4oFGbFuimqCqd04B8npZA1cyb kZ4tnaHVNpfEkxk1DVf57XpV9QjCabAaDLpp6AreqI9QcFsgw2bdOSVuSnBQLVj4 opyqm1oXngbF7OEPeVhTHmDKlP4JW8wHan28SBovjaJ7KSzXsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd8hgG0BNFXD5AVHPlmNxv8Iws3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDUwZmEyMmMtMjhmYy0z YzRlLWIxMmQtNGRlODkxODM2YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7lWHZEfihsymUpkT1XObVKs7+HSj+qRlzTnIRLCxCMG02ZzJaAgHR0 LrmgFbO3UR9MsWB4ewOul4lWE+sp8YngLGM/C/X5ZarrVBb3OW0woFnbNI7M2u1t H+53GWBMUDQdCS6DdwNuPkm3CRtjp9749gnpBeXU9SfIpzz+NXG4Zsj4oZ1IJ3MX Y6kkfnuv9IOx0pOp55NirVg+U133V6s9FmrrOviwJp1LeYBMm6GEdgUsdmM8f1EM xac/8/0JrXLwMAP6BXT//KuT9TO775/c/W2n9tPDcLHGMH1gGuo1f4JRjtRSIJuY YoE6V7pkqcFoauMIZEkz3T0+yRQCcww= -----END CERTIFICATE-----Generated at Thu Oct 9 06:10:49 2025 by rpki-client