$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa File: d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json) Hash identifier: rWPlc50plDLIcv3JWWtrUBLqKIOPGM5HmB3QxLDe69c= Subject key identifier: DA:CE:A9:33:CD:86:4A:1A:67:AE:E7:F3:C1:3C:2C:EC:06:06:30:DA Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584B4E770D1AE02A36BAA6D04140 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18943 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0d:1a:e0:2a:36:ba:a6:d0:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=99fcd146-7931-430e-bd26-5a7db2618ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:cd:4f:bd:c2:c0:0d:6d:0f:16:d7:ad:53: 29:56:7f:e8:6c:d8:7c:1c:e1:36:48:83:0d:ac:47: 8c:7a:1d:e1:d0:91:90:8e:85:54:39:0a:b4:ec:0e: 63:ca:e9:e6:87:12:d3:41:99:66:ee:8b:90:12:a5: b4:bf:91:c7:62:e2:71:b4:42:f2:74:60:61:9c:0c: 78:92:73:0d:bd:dc:47:84:4e:e4:94:c8:80:da:ae: ed:9d:27:b3:a5:0c:4a:ca:ab:3f:e5:37:33:97:64: 95:fc:1b:7d:82:db:19:84:29:20:89:74:3d:aa:b9: 1b:fd:27:c1:b1:92:be:6a:b6:90:ff:c8:8a:cf:d1: 4f:32:aa:8f:6d:b2:f2:84:f8:ff:f5:79:e9:fe:50: 00:09:2e:e8:15:3d:38:fc:06:25:6c:19:b1:ab:01: 9a:b9:a6:0c:1d:7a:5e:35:cd:5f:aa:b6:7d:ed:20: 91:de:43:a5:48:50:b6:d3:32:26:74:b2:a8:cc:18: 08:50:e3:b7:6b:da:a4:fd:5e:e0:1c:21:75:ef:43: 18:45:0d:14:88:6a:6c:08:75:44:23:de:0b:2a:a2: e4:d0:82:c7:be:48:cc:44:bc:73:d8:4e:ed:7b:14: dc:22:ab:c2:20:6e:19:71:1a:39:29:3b:e0:29:f0: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CE:A9:33:CD:86:4A:1A:67:AE:E7:F3:C1:3C:2C:EC:06:06:30:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:06:f9:5a:11:8c:66:6f:fc:85:76:ef:e1:46:50:11:88:40: 97:54:f1:ed:1b:1c:86:dd:5e:c9:20:1b:23:45:3c:e5:05:c1: ee:c0:0a:b1:8d:d8:dc:7e:95:e8:a7:67:04:af:ad:3c:dc:7a: 4a:7c:2b:3c:6a:b8:c8:af:3a:56:2f:8f:76:20:01:26:1f:ae: 6a:03:95:ed:19:6b:de:a5:f4:7c:33:8a:cd:e3:30:22:6c:47: 0c:cb:2f:79:e0:a4:f2:95:13:cb:06:bc:3b:eb:20:54:57:d4: cc:3f:c7:4c:34:cd:36:bc:e4:6c:94:8a:ce:67:b0:ad:35:6e: 0a:6c:23:b3:f3:b8:05:98:74:2c:73:bb:c4:47:78:9d:0f:f8: 6b:5c:20:39:ea:77:46:a7:92:f7:32:fa:9a:be:21:f0:ab:3b: a9:ed:96:8f:d8:93:62:73:10:9e:c8:66:9d:38:9a:d8:2b:d9: cf:f6:8e:b9:2a:63:52:cd:35:fc:a7:2c:ba:6d:7c:26:ec:0f: 92:1a:72:c7:d0:35:3c:09:1b:d0:22:98:ce:00:02:e1:89:0a: bc:58:0d:52:e0:61:0a:f5:fb:6c:d6:d4:57:42:84:c5:e3:3e: e0:c9:b1:70:ea:06:95:97:33:d9:ce:f0:65:9b:44:a2:b3:cc: 61:9a:46:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw0a4Co2uqbQQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OTlmY2QxNDYtNzkzMS00MzBlLWJkMjYtNWE3ZGIyNjE4ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngzNT73CwA1tDxbXrVMpVn/obNh8HOE2SIMN rEeMeh3h0JGQjoVUOQq07A5jyunmhxLTQZlm7ouQEqW0v5HHYuJxtELydGBhnAx4 knMNvdxHhE7klMiA2q7tnSezpQxKyqs/5Tczl2SV/Bt9gtsZhCkgiXQ9qrkb/SfB sZK+araQ/8iKz9FPMqqPbbLyhPj/9Xnp/lAACS7oFT04/AYlbBmxqwGauaYMHXpe Nc1fqrZ97SCR3kOlSFC20zImdLKozBgIUOO3a9qk/V7gHCF170MYRQ0UiGpsCHVE I94LKqLk0ILHvkjMRLxz2E7texTcIqvCIG4ZcRo5KTvgKfBz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrOqTPNhkoaZ67n88E8LOwGBjDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDgyOGMyMmYtZTNiMy0z YmIxLWIxNjQtOGRjMzBkYTVhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8G+VoRjGZv/IV27+FGUBGIQJdU8e0bHIbdXskgGyNFPOUFwe7ACrGN 2Nx+leinZwSvrTzcekp8KzxquMivOlYvj3YgASYfrmoDle0Za96l9Hwzis3jMCJs RwzLL3ngpPKVE8sGvDvrIFRX1Mw/x0w0zTa85GyUis5nsK01bgpsI7PzuAWYdCxz u8RHeJ0P+GtcIDnqd0ankvcy+pq+IfCrO6ntlo/Yk2JzEJ7IZp04mtgr2c/2jrkq Y1LNNfynLLptfCbsD5IacsfQNTwJG9AimM4AAuGJCrxYDVLgYQr1+2zW1FdChMXj PuDJsXDqBpWXM9nO8GWbRKKzzGGaRp4= -----END CERTIFICATE-----Generated at Thu Oct 9 06:04:43 2025 by rpki-client