$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa File: a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa (raw, json) Hash identifier: 43Vb71Pg9vQQyBoUXgrqG4Rdqc97Rgqd44QUFJ8MAf4= Subject key identifier: 2C:60:A4:85:3C:E1:7C:8F:3E:11:77:13:5C:95:C3:B0:F8:AE:4E:0E Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584B715D125CCCE27537CFD59A80 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 13998 IP address blocks: 198.215.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:12:5c:cc:e2:75:37:cf:d5:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7d1d9f20-f408-46b8-bdd5-d5f3368123f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:00:a1:db:26:ff:09:09:0f:3f:74:ec:c0: 38:a5:f3:54:40:d5:94:69:ae:95:f3:7a:96:d2:8f: 27:aa:8d:e9:96:96:d5:6b:ac:3f:69:a9:a4:60:c8: 87:2b:57:d0:27:b4:61:4c:94:07:37:fe:c3:0d:a6: a2:87:8a:05:7f:d0:a8:29:e4:ed:e7:f1:d9:5c:64: cf:a4:3c:a5:f7:d4:fb:82:8f:cf:d5:2f:aa:80:71: 19:c8:a6:41:6a:3b:d2:13:5d:fe:af:91:2f:03:eb: c1:a0:77:c2:6b:6b:90:1d:1b:7d:ea:b5:9e:13:4c: 7b:4e:4c:f9:65:3e:5f:d3:27:c0:7c:0d:a9:08:a3: 41:45:35:28:4e:73:ae:95:e5:7e:ce:00:9a:60:e1: 6a:3f:fa:9e:63:b7:f0:9e:51:c7:3f:f8:e5:d7:40: bf:db:a7:8a:85:6f:f4:68:46:a0:03:4a:33:ec:0a: ca:db:15:69:77:ca:e8:e2:87:ed:5a:f9:a8:b2:9a: 9b:e1:93:51:cc:ca:70:cb:43:09:05:10:05:ff:71: bb:55:fc:a7:d7:40:0c:bb:89:3d:a0:63:34:3a:8f: 67:ce:dd:8c:3b:75:f7:05:cf:1c:35:99:69:06:4a: 91:0d:92:05:33:17:73:7f:e5:db:ba:7c:c9:4e:55: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:60:A4:85:3C:E1:7C:8F:3E:11:77:13:5C:95:C3:B0:F8:AE:4E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 198.215.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a7:c3:d9:cb:47:70:6e:eb:ea:f8:2b:13:59:2e:65:08:31: 9a:d3:d2:0e:8f:cd:b1:2a:8f:f2:2f:be:57:d0:5e:13:10:0b: a9:db:a5:a3:ac:54:76:f0:6c:64:f4:e8:c1:65:48:0f:fe:ea: e0:f9:5a:68:50:f9:a0:21:70:71:c7:61:36:a8:f3:14:b4:be: 79:99:7e:45:5c:8d:0f:75:4b:cc:41:80:01:ab:f2:7f:58:84: df:82:89:39:74:75:bb:7c:94:e3:fa:4d:75:4c:c9:34:5a:c2: 3a:3c:3f:e4:2d:18:bc:f0:98:b8:de:e8:61:d8:5c:b1:9e:87: 72:95:37:84:13:73:e1:58:2c:e4:51:24:0c:3a:a5:12:24:7b: 48:91:c6:bf:ba:ef:4c:ed:1c:7f:80:08:ed:df:3d:b8:83:00: 0d:fc:90:8c:25:ee:8e:e2:a5:81:7b:3a:22:86:dd:05:55:cc: ae:3d:16:b9:c3:ab:d5:d0:21:75:3a:77:46:11:ca:ad:f4:6d: 35:de:b8:74:13:07:d4:b6:2e:0a:84:3c:df:b5:da:2f:64:54: 01:c7:80:ff:b3:37:65:00:a2:e7:ee:39:a5:7e:6c:05:af:ce: c4:40:5c:45:15:21:24:83:8b:ac:6e:89:0b:f4:76:02:ef:39: 8e:1b:64:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXRJczOJ1N8/VmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2QxZDlmMjAtZjQwOC00NmI4LWJkZDUtZDVmMzM2ODEyM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmkAodsm/wkJDz907MA4pfNUQNWUaa6V83qW 0o8nqo3plpbVa6w/aamkYMiHK1fQJ7RhTJQHN/7DDaaih4oFf9CoKeTt5/HZXGTP pDyl99T7go/P1S+qgHEZyKZBajvSE13+r5EvA+vBoHfCa2uQHRt96rWeE0x7Tkz5 ZT5f0yfAfA2pCKNBRTUoTnOuleV+zgCaYOFqP/qeY7fwnlHHP/jl10C/26eKhW/0 aEagA0oz7ArK2xVpd8ro4oftWvmospqb4ZNRzMpwy0MJBRAF/3G7Vfyn10AMu4k9 oGM0Oo9nzt2MO3X3Bc8cNZlpBkqRDZIFMxdzf+XbunzJTlWMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxgpIU84XyPPhF3E1yVw7D4rk4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvYTBhN2NkMjAtNGFlMy0z MjQ4LTkzY2ItMTM4MGY4MWI1MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxtckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKnw9nLR3Bu6+r4KxNZLmUIMZrT0g6PzbEqj/IvvlfQXhMQC6nbpaOs VHbwbGT06MFlSA/+6uD5WmhQ+aAhcHHHYTao8xS0vnmZfkVcjQ91S8xBgAGr8n9Y hN+CiTl0dbt8lOP6TXVMyTRawjo8P+QtGLzwmLje6GHYXLGeh3KVN4QTc+FYLORR JAw6pRIke0iRxr+670ztHH+ACO3fPbiDAA38kIwl7o7ipYF7OiKG3QVVzK49FrnD q9XQIXU6d0YRyq30bTXeuHQTB9S2LgqEPN+12i9kVAHHgP+zN2UAoufuOaV+bAWv zsRAXEUVISSDi6xuiQv0dgLvOY4bZI4= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:23 2025 by rpki-client