$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa File: f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa (raw, json) Hash identifier: JzOE8WPCSlwWjbfJrArGcYWPaPX8hFNTziNbp/vNLFI= Subject key identifier: 0C:9C:3E:4A:B5:CE:9D:69:C2:4A:ED:83:EB:55:A7:ED:50:EF:85:DB Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584B4E7709697211D0B5E7B25860 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 19108 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:09:69:72:11:d0:b5:e7:b2:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=da53b4a5-0e58-41cd-8728-9cdeab951219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:d5:14:bf:f4:47:16:e5:c5:59:45:9b:20: 43:cc:45:2d:8f:d1:07:b8:bb:e3:d8:01:26:73:35: 28:dc:b7:08:55:cc:23:07:25:2e:a0:0c:eb:12:c0: 8b:c6:0c:10:1d:89:f8:57:02:76:9d:78:87:8a:43: b5:00:49:7a:dd:8b:f8:f4:81:94:7c:55:02:2e:27: 13:27:85:8c:8a:7b:59:f0:d2:08:7b:0d:53:ca:83: a5:99:51:1e:f6:36:5a:49:bf:64:44:ca:10:14:9e: 5a:92:8f:43:f7:3d:82:10:82:27:8c:ec:7c:94:0c: f5:45:a6:dd:6f:6c:36:0f:92:0a:0e:43:12:61:06: 7d:2b:f8:76:45:7b:33:10:35:90:2f:8f:af:6f:56: e5:fd:c9:26:f4:56:96:b7:c5:89:1c:d5:78:4c:5f: 9e:a9:6f:a0:45:84:1f:47:da:d6:2c:79:de:9f:b1: 55:63:a3:4e:5c:b8:04:69:f4:43:29:04:41:81:9b: d2:01:6e:14:24:b5:b8:38:01:50:ee:09:58:d6:7a: 6d:11:85:30:ad:50:e4:ad:da:df:6d:65:a5:5d:18: 2a:72:62:e1:a0:7d:62:64:d7:26:d9:5e:c8:43:c7: c0:ca:b5:4d:91:54:ec:8c:cf:81:f5:14:e9:f5:81: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:3E:4A:B5:CE:9D:69:C2:4A:ED:83:EB:55:A7:ED:50:EF:85:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:39:ea:d9:d1:d5:a5:7e:7a:e8:63:15:97:06:6e:63:84:4d: c2:ae:2d:cb:c9:65:11:ff:2a:4a:4c:c8:f8:36:fd:c0:76:76: 10:a7:b6:89:7c:2f:83:84:34:18:b6:2e:94:dd:54:a1:e8:b8: 69:23:9d:f0:36:59:a7:76:99:81:2f:91:a9:e4:7f:a7:0a:5a: c3:1e:b9:eb:51:1e:4e:7b:14:e5:70:e3:0d:7e:1c:61:1f:56: e0:6f:c8:59:78:2f:5d:74:34:0f:40:22:16:b1:59:98:ee:bf: ce:c2:c1:0b:ad:a3:28:4e:d2:e0:c3:c5:b9:38:c6:4c:4b:ca: 4c:b0:2b:a8:79:89:1a:31:34:21:5f:04:aa:84:f1:f7:91:45: 13:5a:b6:d1:14:a0:5e:19:a4:f0:2d:ec:db:1c:ec:1c:e2:f2: ac:3e:69:ee:c3:90:c1:18:c8:64:ab:18:fa:e5:84:0e:4b:98: a2:4f:f1:8d:62:6a:15:6f:83:09:b0:69:42:db:4b:46:94:88: e3:7e:ca:1f:10:32:8a:d2:b9:4f:28:f4:a9:25:00:f3:ff:b7: a2:05:6e:87:f2:e6:92:12:e1:02:9a:a9:45:d9:74:45:fc:81: 28:f3:eb:02:92:30:f2:40:2a:89:28:0f:54:9e:14:6d:1b:db: aa:ff:b4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwlpchHQteeyWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGE1M2I0YTUtMGU1OC00MWNkLTg3MjgtOWNkZWFiOTUxMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y7VFL/0RxblxVlFmyBDzEUtj9EHuLvj2AEm czUo3LcIVcwjByUuoAzrEsCLxgwQHYn4VwJ2nXiHikO1AEl63Yv49IGUfFUCLicT J4WMintZ8NIIew1TyoOlmVEe9jZaSb9kRMoQFJ5ako9D9z2CEIInjOx8lAz1Rabd b2w2D5IKDkMSYQZ9K/h2RXszEDWQL4+vb1bl/ckm9FaWt8WJHNV4TF+eqW+gRYQf R9rWLHnen7FVY6NOXLgEafRDKQRBgZvSAW4UJLW4OAFQ7glY1nptEYUwrVDkrdrf bWWlXRgqcmLhoH1iZNcm2V7IQ8fAyrVNkVTsjM+B9RTp9YHuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAycPkq1zp1pwkrtg+tVp+1Q74XbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZjhiZDkyZjAtZjY5Yi0z M2M3LTg0YjEtMWNhMWQ4MWY5ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo56tnR1aV+euhjFZcGbmOETcKuLcvJZRH/KkpMyPg2/cB2dhCntol8 L4OENBi2LpTdVKHouGkjnfA2Wad2mYEvkankf6cKWsMeuetRHk57FOVw4w1+HGEf VuBvyFl4L110NA9AIhaxWZjuv87CwQutoyhO0uDDxbk4xkxLykywK6h5iRoxNCFf BKqE8feRRRNattEUoF4ZpPAt7Nsc7Bzi8qw+ae7DkMEYyGSrGPrlhA5LmKJP8Y1i ahVvgwmwaULbS0aUiON+yh8QMorSuU8o9KklAPP/t6IFbofy5pIS4QKaqUXZdEX8 gSjz6wKSMPJAKokoD1SeFG0b26r/tGA= -----END CERTIFICATE-----Generated at Thu Oct 9 01:19:44 2025 by rpki-client