$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa File: db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa (raw, json) Hash identifier: nNMZvYZ/0O0Jh9CSrfBPuMdB7nO7hAKs35bwUvX/nhY= Subject key identifier: 40:9C:CE:2D:F2:94:33:47:F4:AF:33:50:FA:EA:1D:0C:24:EC:2E:55 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584B5571CD5B81DA67DC77C7BE80 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 23404 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:cd:5b:81:da:67:dc:77:c7:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=0aec6438-edb9-4346-95a2-e941edcca567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:09:73:ff:83:50:91:e7:10:14:e6:d1:f6: ff:de:22:bf:bc:5b:06:7e:4a:9a:af:9e:7b:2c:61: 60:d3:2a:79:39:1e:44:2a:a3:e1:14:7e:0b:15:5d: e5:22:0c:e1:ec:62:20:2e:ee:61:0a:02:77:bd:38: 81:02:c7:b6:0f:35:b5:12:87:4f:38:76:74:71:06: a3:3b:1b:69:95:ab:71:d5:9d:5d:ee:fa:34:37:4c: 57:33:8c:ba:93:ef:a8:67:19:f3:5b:ed:70:84:b9: 3d:67:47:ef:c5:c4:3d:5c:f8:8e:54:da:e0:0b:7e: 73:1d:4a:b5:4f:4c:e7:ab:0b:94:d0:fc:21:4e:35: 73:bc:cd:b1:4b:9b:4f:ed:31:5c:37:10:6f:db:f5: 77:2a:f1:c1:e8:dd:df:bf:2a:d4:b8:e1:66:6f:9f: 85:b4:9d:fc:40:74:15:1d:86:15:10:0e:96:2d:4b: a1:a9:cf:87:6e:cd:36:55:42:67:6f:e4:88:e0:10: 88:27:99:5b:7c:91:d0:9d:54:3e:3b:ad:0c:8a:c3: 02:2b:ce:79:38:65:14:1b:73:b0:44:38:94:58:a9: bd:16:a2:24:6d:31:e7:e3:a4:af:88:88:a4:25:a6: 0e:a0:9b:33:73:3b:f7:c4:50:50:43:91:ac:ba:78: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:CE:2D:F2:94:33:47:F4:AF:33:50:FA:EA:1D:0C:24:EC:2E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:36:a8:7c:b2:48:2a:b9:00:8d:1e:b9:1f:09:56:1a:49:8b: 62:92:26:fe:3e:9f:f9:72:51:22:7d:34:03:0e:3c:f4:52:2a: 9b:61:16:ec:1e:b1:11:07:5f:ab:0d:90:98:aa:97:bf:32:b8: 28:78:b0:04:fd:23:43:3a:40:38:11:72:09:bf:96:b2:76:86: 78:e4:09:5a:9f:12:b1:23:45:ca:d5:67:1e:fa:1a:96:f0:c5: e4:35:1e:ac:f6:b1:d3:ef:cb:09:c3:e4:4c:e8:ed:9e:b4:a5: d0:78:bf:67:3a:df:3c:7a:6a:c7:00:64:62:ef:79:7a:8f:6d: a0:52:d4:94:a8:a7:71:51:2e:6c:4a:ac:29:00:83:2e:40:80: 39:23:e0:8c:ae:58:14:8d:b0:47:ad:f6:5f:90:ae:52:70:d9: 1f:78:56:92:b9:65:64:36:e1:9e:b1:14:12:0f:45:35:48:43: 85:9b:42:9c:1b:62:7b:3d:8e:0c:06:76:d9:dd:a5:87:a7:13: 55:73:53:f4:c9:1d:f1:b6:8d:b6:1c:27:07:64:a0:60:81:45: af:59:c0:43:f0:da:e2:4e:d9:09:0d:75:58:95:15:f2:cb:2f: 63:3a:b3:d8:68:cc:84:7a:42:63:e3:60:3f:c7:fe:e3:d0:0a: 89:09:91:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcc1bgdpn3HfHvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MGFlYzY0MzgtZWRiOS00MzQ2LTk1YTItZTk0MWVkY2NhNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilIJc/+DUJHnEBTm0fb/3iK/vFsGfkqar557 LGFg0yp5OR5EKqPhFH4LFV3lIgzh7GIgLu5hCgJ3vTiBAse2DzW1EodPOHZ0cQaj Oxtplatx1Z1d7vo0N0xXM4y6k++oZxnzW+1whLk9Z0fvxcQ9XPiOVNrgC35zHUq1 T0znqwuU0PwhTjVzvM2xS5tP7TFcNxBv2/V3KvHB6N3fvyrUuOFmb5+FtJ38QHQV HYYVEA6WLUuhqc+Hbs02VUJnb+SI4BCIJ5lbfJHQnVQ+O60MisMCK855OGUUG3Ow RDiUWKm9FqIkbTHn46SviIikJaYOoJszczv3xFBQQ5GsuniTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECczi3ylDNH9K8zUPrqHQwk7C5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZGIwNzlkN2MtZTEwZC0z NTU5LWIzZmQtMjViNGVjNjk3M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc2qHyySCq5AI0euR8JVhpJi2KSJv4+n/lyUSJ9NAMOPPRSKpthFuwe sREHX6sNkJiql78yuCh4sAT9I0M6QDgRcgm/lrJ2hnjkCVqfErEjRcrVZx76Gpbw xeQ1Hqz2sdPvywnD5Ezo7Z60pdB4v2c63zx6ascAZGLveXqPbaBS1JSop3FRLmxK rCkAgy5AgDkj4IyuWBSNsEet9l+QrlJw2R94VpK5ZWQ24Z6xFBIPRTVIQ4WbQpwb Yns9jgwGdtndpYenE1VzU/TJHfG2jbYcJwdkoGCBRa9ZwEPw2uJO2QkNdViVFfLL L2M6s9hozIR6QmPjYD/H/uPQCokJkSw= -----END CERTIFICATE-----Generated at Thu Oct 9 06:10:49 2025 by rpki-client