$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa File: 4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa (raw, json) Hash identifier: cqj91nHY2B/Amvk4Vo6LSqw9nYj48m0gurSBXr4Y2xU= Subject key identifier: 30:96:D9:7E:E6:6D:33:01:81:B1:D2:94:25:68:31:A2:00:53:6E:52 Certificate issuer: /CN=2011e64c-7c9c-4249-87ab-c66e2076120e Certificate serial: 010D0C9F4328584B68FCAA778BB1E1BE389E0100 Authority key identifier: 50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 8075 IP address blocks: 198.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:aa:77:8b:b1:e1:be:38:9e:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2011e64c-7c9c-4249-87ab-c66e2076120e Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=f55b5fa5-5723-405a-85c6-33e35c5bb103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:93:b0:d1:25:ca:37:66:ca:33:86:32:d4: 03:15:19:e9:1f:0e:8e:7c:d0:48:0a:20:fa:08:f3: d6:11:82:cd:ba:38:07:61:0f:51:6e:a0:19:ce:4b: 84:01:a6:ce:80:b4:29:a9:74:72:e9:ad:2e:1d:b9: 4d:ea:6d:a6:7f:eb:13:6f:40:83:a3:1e:1f:86:05: 5d:83:29:16:93:54:21:6a:1b:67:13:ef:44:20:10: 7a:30:7b:a2:0c:01:0c:4e:a4:64:e5:ab:29:8b:79: 15:82:f7:52:38:aa:d7:5e:64:c3:7e:8f:7c:79:c5: c9:5a:8f:87:43:53:3b:c9:99:67:39:16:1b:eb:65: 5c:8f:9b:dc:ad:d8:f5:87:53:0b:ce:75:39:f8:05: 60:2f:07:cc:4d:15:f1:d9:57:4c:d0:b1:4e:9b:a9: 66:63:6e:71:30:e3:01:f7:d0:6c:98:e6:00:b5:dc: fd:8a:d1:d3:c7:a6:49:1a:49:56:d4:c1:df:5d:79: 99:f3:23:5d:ca:92:fa:50:06:c5:0c:2d:06:b3:b3: 06:26:54:6d:e4:18:7f:9d:e7:83:b1:15:c8:47:2a: b3:f2:3b:01:e6:e9:9c:c7:94:2e:bc:d6:7b:cc:95: 8e:be:53:3d:8a:5e:4e:18:e1:bd:f6:e4:a9:6f:bf: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:D9:7E:E6:6D:33:01:81:B1:D2:94:25:68:31:A2:00:53:6E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl X509v3 Authority Key Identifier: keyid:50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer sbgp-ipAddrBlock: critical IPv4: 198.167.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2f:b9:3b:f2:df:db:1f:4e:7d:82:e3:61:2d:b6:5b:fc:7e: f5:de:cc:33:fb:1f:90:88:d6:ad:e2:33:3b:ee:16:17:0d:0f: f2:bb:3d:ef:0a:f2:a9:a6:01:6f:90:b0:1d:d2:73:34:cb:bb: cc:38:33:53:b9:74:c5:ef:d8:66:57:ee:ca:b8:43:54:da:ca: fb:ef:2a:76:65:ad:1f:d6:5c:99:99:5c:c1:71:89:ff:6a:97: f5:29:0d:87:42:f2:33:55:ec:c2:2f:57:ee:59:d5:6c:36:75: 23:19:63:ec:85:72:8d:03:9f:62:7b:d1:5f:fd:ba:3e:26:f4: 96:eb:d0:1f:c0:e2:47:c7:73:ea:f0:ae:84:0b:67:43:96:0f: d4:9f:2e:5a:c4:cf:3e:8f:28:2d:65:bd:09:ba:10:e3:03:59: cb:ee:81:b2:29:a9:bc:49:df:66:54:28:e2:92:44:99:34:8f: d4:7f:e5:ae:d8:2e:92:e9:c1:08:a4:e6:bc:9e:92:df:6a:a4: 2d:bd:04:0d:7e:46:a5:0a:46:e7:e0:97:4a:bf:b2:f6:ae:47: 1a:33:22:71:f9:8d:41:63:83:25:0f:a3:22:62:dc:38:0a:46: f8:66:93:63:5e:01:eb:35:12:99:17:f8:3d:ec:2f:1e:53:1b: a6:ff:b6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Kp3i7HhvjieAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAxMWU2NGMtN2M5Yy00MjQ5LTg3YWItYzY2ZTIwNzYx MjBlMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZjU1YjVmYTUtNTcyMy00MDVhLTg1YzYtMzNlMzVjNWJiMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXKTsNElyjdmyjOGMtQDFRnpHw6OfNBICiD6 CPPWEYLNujgHYQ9RbqAZzkuEAabOgLQpqXRy6a0uHblN6m2mf+sTb0CDox4fhgVd gykWk1QhahtnE+9EIBB6MHuiDAEMTqRk5aspi3kVgvdSOKrXXmTDfo98ecXJWo+H Q1M7yZlnORYb62Vcj5vcrdj1h1MLznU5+AVgLwfMTRXx2VdM0LFOm6lmY25xMOMB 99BsmOYAtdz9itHTx6ZJGklW1MHfXXmZ8yNdypL6UAbFDC0Gs7MGJlRt5Bh/neeD sRXIRyqz8jsB5umcx5QuvNZ7zJWOvlM9il5OGOG99uSpb79QnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCW2X7mbTMBgbHSlCVoMaIAU25SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDEx ZTY0Yy03YzljLTQyNDktODdhYi1jNjZlMjA3NjEyMGUvNGYxYzdiNmQtODQ3My0z YjA1LWEwOTctZTkwYjI3ZThjMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjAxMWU2NGMtN2M5Yy00MjQ5LTg3 YWItYzY2ZTIwNzYxMjBlLzIwMTFlNjRjLTdjOWMtNDI0OS04N2FiLWM2NmUyMDc2 MTIwZS5jcmwwHwYDVR0jBBgwFoAUUDZdYSfSvJP81d6moDBM+w7Tk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDExZTY0Yy03YzljLTQyNDktODdhYi1jNjZl MjA3NjEyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYvuTvy39sfTn2C42Ettlv8fvXezDP7H5CI1q3iMzvuFhcND/K7Pe8K 8qmmAW+QsB3SczTLu8w4M1O5dMXv2GZX7sq4Q1TayvvvKnZlrR/WXJmZXMFxif9q l/UpDYdC8jNV7MIvV+5Z1Ww2dSMZY+yFco0Dn2J70V/9uj4m9Jbr0B/A4kfHc+rw roQLZ0OWD9SfLlrEzz6PKC1lvQm6EOMDWcvugbIpqbxJ32ZUKOKSRJk0j9R/5a7Y LpLpwQik5ryekt9qpC29BA1+RqUKRufgl0q/svauRxozInH5jUFjgyUPoyJi3DgK Rvhmk2NeAes1EpkX+D3sLx5TG6b/tkc= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:28 2025 by rpki-client