$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa File: 187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa (raw, json) Hash identifier: DLSA7zqxuU3snH+adHV6KI7gmTmH/dvZPp4u4Balx1E= Subject key identifier: 4E:69:06:F5:EB:30:D3:54:E8:E9:07:FA:8C:E1:B4:EA:85:A4:7E:A4 Certificate issuer: /CN=0b6916e5-2238-46bc-9e75-63363cc71a0a Certificate serial: 010D0C9F4328584B715CBA337F06246A95189480 Authority key identifier: 9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 21976 IP address blocks: 198.133.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ba:33:7f:06:24:6a:95:18:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6916e5-2238-46bc-9e75-63363cc71a0a Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5825c09a-6add-4aa4-bf63-c6c2f0e34c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:79:a6:d8:64:18:6a:f6:a4:80:db:13:c1: 0f:d6:53:1e:44:23:a9:3d:43:4c:03:26:8a:32:7a: 23:c7:4e:db:84:d3:1e:f8:2e:7d:c1:89:c5:5f:ef: 78:d8:24:c4:38:a1:ac:59:89:b5:c4:04:09:d2:91: 0d:6f:5d:71:07:5f:3c:9b:75:ad:71:6a:83:20:58: a1:3f:fd:a3:c6:4c:49:04:22:97:ad:a4:cf:77:0d: dc:19:92:12:be:bc:bb:96:ac:9a:73:f6:7b:1c:d9: cc:41:1c:54:d4:c5:3b:47:f5:1f:81:2d:66:4a:f6: c6:ca:96:69:75:42:e4:d0:42:8a:cc:01:79:d8:61: 7b:51:57:fc:aa:68:01:d5:7b:4a:53:02:be:23:a4: d4:cd:48:d0:d8:4b:82:e3:b9:00:46:73:98:df:e2: 0e:fc:42:83:0f:5a:5d:bc:ab:a9:78:24:ba:4a:a2: 19:c3:7b:06:02:a4:68:8b:1d:bf:0e:e6:6a:3c:5f: bb:f0:51:91:7e:6e:12:cb:f7:13:06:6a:e7:80:36: 3c:7f:f1:d6:45:b1:e9:dd:9b:24:67:c6:61:0d:ee: 35:16:26:87:20:03:d0:50:31:be:38:b5:7e:64:5f: f6:32:36:01:26:c5:cd:27:5c:c7:0a:69:26:70:93: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:06:F5:EB:30:D3:54:E8:E9:07:FA:8C:E1:B4:EA:85:A4:7E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.crl X509v3 Authority Key Identifier: keyid:9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer sbgp-ipAddrBlock: critical IPv4: 198.133.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:91:46:43:51:27:14:0f:77:67:3d:d7:59:5f:b1:5d:08: 76:0e:a9:2f:79:b3:1e:b4:66:a5:94:1f:ca:b1:e9:35:fe:b4: 4f:93:73:5f:a0:1d:8a:56:25:c1:41:b2:cc:d5:58:21:4c:34: 34:d6:12:d7:78:2c:ee:02:b2:3a:68:e3:85:06:cd:13:6e:fd: c0:1b:5f:fe:70:df:ee:b0:b0:93:5d:0f:a4:6a:50:1c:62:c9: 80:08:c7:5c:9d:9b:96:96:09:f7:f6:43:23:14:ca:27:3e:2b: 0d:b9:88:09:d3:7b:92:9b:5c:cf:82:35:d7:e3:c9:d0:2f:73: 56:ef:f9:05:dd:50:82:54:97:f0:e9:94:5d:d2:58:5c:78:52: 9d:6e:f7:65:d4:09:74:00:6c:fe:36:55:c3:01:6a:01:08:51: fa:58:e9:50:d5:b7:a6:c6:55:bc:21:8f:66:83:a2:b3:26:ef: ef:b2:c9:40:3b:1f:ec:25:73:50:bc:21:f5:4c:75:1d:6e:29: 4c:48:1e:a1:c8:28:d2:ff:54:f6:01:32:b7:74:0b:1d:df:d2: 11:f6:31:d7:6b:33:5f:40:99:a2:35:6f:f3:5e:94:c7:a4:e1: 52:2f:c8:d7:2c:dc:65:63:b6:26:3f:3a:a6:97:63:3f:a7:81: 80:61:a9:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLozfwYkapUYlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2OTE2ZTUtMjIzOC00NmJjLTllNzUtNjMzNjNjYzcx YTBhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTgyNWMwOWEtNmFkZC00YWE0LWJmNjMtYzZjMmYwZTM0YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lZ5pthkGGr2pIDbE8EP1lMeRCOpPUNMAyaK Mnojx07bhNMe+C59wYnFX+942CTEOKGsWYm1xAQJ0pENb11xB188m3WtcWqDIFih P/2jxkxJBCKXraTPdw3cGZISvry7lqyac/Z7HNnMQRxU1MU7R/UfgS1mSvbGypZp dULk0EKKzAF52GF7UVf8qmgB1XtKUwK+I6TUzUjQ2EuC47kARnOY3+IO/EKDD1pd vKupeCS6SqIZw3sGAqRoix2/DuZqPF+78FGRfm4Sy/cTBmrngDY8f/HWRbHp3Zsk Z8ZhDe41FiaHIAPQUDG+OLV+ZF/2MjYBJsXNJ1zHCmkmcJPQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5pBvXrMNNU6OkH+ozhtOqFpH6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYjY5 MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2M2NjNzFhMGEvMTg3ZTMxZTktYjNhYS0z YzdmLWJmYWItZWUwYzI3M2UyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGI2OTE2ZTUtMjIzOC00NmJjLTll NzUtNjMzNjNjYzcxYTBhLzBiNjkxNmU1LTIyMzgtNDZiYy05ZTc1LTYzMzYzY2M3 MWEwYS5jcmwwHwYDVR0jBBgwFoAUn6k6M8GBodYDD5SpJ7wjZWSZ1VMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wYjY5MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2 M2NjNzFhMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqkUZDUScUD3dnPddZX7FdCHYOqS95sx60ZqWUH8qx6TX+tE+Tc1+g HYpWJcFBsszVWCFMNDTWEtd4LO4Csjpo44UGzRNu/cAbX/5w3+6wsJNdD6RqUBxi yYAIx1ydm5aWCff2QyMUyic+Kw25iAnTe5KbXM+CNdfjydAvc1bv+QXdUIJUl/Dp lF3SWFx4Up1u92XUCXQAbP42VcMBagEIUfpY6VDVt6bGVbwhj2aDorMm7++yyUA7 H+wlc1C8IfVMdR1uKUxIHqHIKNL/VPYBMrd0Cx3f0hH2MddrM19AmaI1b/NelMek 4VIvyNcs3GVjtiY/OqaXYz+ngYBhqfw= -----END CERTIFICATE-----Generated at Fri Oct 10 09:57:38 2025 by rpki-client