$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa File: 00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa (raw, json) Hash identifier: QAy0ioiG7igGIksrNu3k8d20wUfbhM2eslDl+o8sivo= Subject key identifier: 3E:AC:61:78:6A:EF:9E:FF:D7:7F:A3:A9:F9:09:D3:1A:1F:C6:16:D0 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B2B91973B2F399229B6B90380 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 59241 IP address blocks: 162.98.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:97:3b:2f:39:92:29:b6:b9:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=25575f98-a8c8-4a8d-9cec-d5b7c7ffcb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:2c:61:e9:84:c0:19:42:f0:1f:c2:a4:20: de:0f:77:f9:38:37:2a:b7:e3:ad:8c:13:a9:da:ed: dd:06:28:f8:71:b0:a0:07:92:c9:53:15:12:d5:3c: 14:20:c4:28:70:6d:86:be:7e:b7:eb:31:39:c8:5a: 3b:b6:cb:b3:56:6c:6a:bc:36:b1:38:8f:fa:23:8b: 3c:67:25:75:31:99:72:d8:0b:96:56:e6:cd:d4:58: 33:fa:5f:cb:ee:a0:03:fe:18:19:4c:4e:0c:44:bd: b1:a9:63:ff:5e:c6:cc:eb:25:30:7a:41:c8:50:4a: 04:aa:7f:e7:3a:04:cf:09:8d:6a:97:4e:8a:2b:e9: ea:8a:3a:20:48:21:21:e6:aa:f2:b7:8e:da:e0:27: 26:c1:8e:c8:92:80:45:a7:1a:51:2f:be:07:e6:1d: 21:7f:61:df:11:c8:52:70:aa:af:a1:a4:5d:d6:f0: b8:31:22:0d:87:de:6a:be:fd:42:1a:1c:aa:6d:47: ea:b8:6a:5c:f7:83:ce:7e:83:03:29:5d:8d:c8:c1: 55:61:1b:00:d1:f7:e6:43:d8:4a:8e:75:66:a7:33: bc:67:61:62:e0:75:80:d9:23:2e:92:fa:60:54:9d: ad:47:72:07:bc:aa:9b:7f:2d:1b:5d:25:a2:5c:5a: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:61:78:6A:EF:9E:FF:D7:7F:A3:A9:F9:09:D3:1A:1F:C6:16:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 162.98.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:a7:88:bd:10:b6:25:2c:28:e2:58:0b:ff:2c:d7:53:fc: 58:ff:d8:85:9b:08:ef:a0:71:95:3f:62:02:a0:62:d8:62:3e: e5:dc:32:f9:fe:6e:9b:24:80:66:98:e6:ae:f7:bd:80:98:a8: 61:66:78:c9:88:59:4d:9c:13:04:9b:28:29:94:da:11:83:81: 50:0d:5b:96:80:52:cd:f7:75:d6:c5:73:da:e2:eb:f2:91:a3: 70:f7:3e:1d:86:f9:17:99:e3:ad:39:d8:a6:9b:19:cc:7a:f9: 89:46:a2:e2:59:27:f0:09:03:85:b2:85:e8:1c:ca:e5:70:73: 61:2c:8b:6d:9a:14:2f:13:44:51:16:f9:fe:34:79:7d:9c:b0: 0e:66:70:25:d3:21:4b:50:f6:8d:a7:1a:83:01:fe:3f:df:53: 88:0f:01:7b:79:54:60:99:55:9c:a0:08:27:ab:eb:91:7d:ef: 3e:97:ec:44:fb:d8:7a:73:e6:d2:ac:53:83:95:c3:52:41:f4: 57:11:1f:80:86:76:02:94:67:06:de:c4:87:89:06:6b:0f:1f: 09:47:1c:d8:71:40:2a:10:02:7d:e3:3b:7c:b4:6e:b3:71:e1: 41:7d:60:6b:d1:84:6f:21:1b:38:8b:20:0a:b0:28:7d:f7:9b: 2c:48:54:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZc7LzmSKba5A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MjU1NzVmOTgtYThjOC00YThkLTljZWMtZDViN2M3ZmZjYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiIsYemEwBlC8B/CpCDeD3f5ODcqt+OtjBOp 2u3dBij4cbCgB5LJUxUS1TwUIMQocG2Gvn636zE5yFo7tsuzVmxqvDaxOI/6I4s8 ZyV1MZly2AuWVubN1Fgz+l/L7qAD/hgZTE4MRL2xqWP/XsbM6yUwekHIUEoEqn/n OgTPCY1ql06KK+nqijogSCEh5qryt47a4CcmwY7IkoBFpxpRL74H5h0hf2HfEchS cKqvoaRd1vC4MSINh95qvv1CGhyqbUfquGpc94POfoMDKV2NyMFVYRsA0ffmQ9hK jnVmpzO8Z2Fi4HWA2SMukvpgVJ2tR3IHvKqbfy0bXSWiXFqDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6sYXhq757/13+jqfkJ0xofxhbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDBkZjcyZjktYWQzYi0z OGFjLWIxYTAtOWNiYmJhYzYxODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBomIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvrp4i9ELYlLCjiWAv/LNdT/Fj/2IWbCO+gcZU/YgKgYthiPuXcMvn+ bpskgGaY5q73vYCYqGFmeMmIWU2cEwSbKCmU2hGDgVANW5aAUs33ddbFc9ri6/KR o3D3Ph2G+ReZ46052KabGcx6+YlGouJZJ/AJA4WyhegcyuVwc2Esi22aFC8TRFEW +f40eX2csA5mcCXTIUtQ9o2nGoMB/j/fU4gPAXt5VGCZVZygCCer65F97z6X7ET7 2Hpz5tKsU4OVw1JB9FcRH4CGdgKUZwbexIeJBmsPHwlHHNhxQCoQAn3jO3y0brNx 4UF9YGvRhG8hGziLIAqwKH33myxIVHg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:30:35 2025 by rpki-client