$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa File: b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa (raw, json) Hash identifier: 0gabO7ydKc9k/iSLL1GFCSohfPYxFfQyaN+M/thsK/s= Subject key identifier: B6:4A:5F:7B:77:E9:AC:AD:D1:AA:01:A6:D9:59:20:41:08:D6:D0:0C Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F4328584B28C6E5B3E078AF177A4C0380 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 400619 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e5:b3:e0:78:af:17:7a:4c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=27c55e44-ef2d-4599-8c16-849088d01412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:ce:23:d7:b6:4a:f9:03:11:6e:b9:90:98: 7b:be:d2:2a:65:1f:99:81:3d:50:ce:d7:57:e7:fb: 82:25:15:ed:1d:0c:ae:00:b7:33:94:e5:fb:89:e1: ec:e0:23:92:07:e4:4c:73:1f:2f:b9:e6:82:41:0b: c5:42:4d:90:01:22:b3:a1:41:44:bc:c4:23:b8:88: 72:0d:12:e0:1c:6f:95:1e:87:e1:f8:86:46:0c:2c: ec:28:2e:3f:67:e3:c3:93:dc:1a:08:5b:35:c0:ed: f9:5b:a4:d9:cc:b9:b4:2c:a5:fb:ed:2d:9b:dd:c6: c2:34:04:fe:43:f0:ca:66:16:9b:a4:95:b6:48:40: 13:28:b8:cc:b2:f9:a8:4e:77:bd:e8:c8:81:e9:82: 16:c4:ec:47:ba:7c:56:40:72:55:fa:a4:ec:e7:bf: 47:34:f7:7e:2f:48:54:f3:26:26:a2:11:c9:3c:df: 8a:29:97:b0:fd:fb:32:0a:78:50:81:b1:51:a1:6d: b8:2f:2e:5f:7b:c4:25:03:28:de:42:5b:e5:f4:1c: 2f:ba:13:de:53:12:c8:2d:6f:ed:10:ce:da:a1:1b: 77:60:ba:d4:78:f6:8f:4b:4b:f4:27:b2:3f:b1:be: 6d:1f:ba:f5:58:df:c1:c4:c2:da:48:98:b9:86:15: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4A:5F:7B:77:E9:AC:AD:D1:AA:01:A6:D9:59:20:41:08:D6:D0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:b1:a1:46:74:0e:4c:c0:82:00:6e:1a:01:6a:4e:ff:9e: 5d:e4:fe:7f:0d:2a:0a:d2:8a:3f:d1:41:d5:8a:9c:75:75:31: 0d:5a:07:08:aa:11:a7:1f:0e:9d:3a:61:cd:d6:54:dd:2a:34: a0:e1:df:b4:f7:c2:8b:79:6f:36:a1:78:61:b9:86:1b:27:0c: f5:ab:b0:5c:6e:53:42:9b:e8:08:30:8c:05:f4:c1:71:c1:24: 99:49:5d:4e:8d:27:24:bb:6e:00:fa:f6:ff:b3:da:a4:8d:e3: e8:9a:0a:22:fc:22:64:d7:ff:4b:27:2e:b6:bb:00:ed:11:88: aa:6e:61:89:e9:f0:62:ff:81:14:ae:7e:0b:9e:fd:08:58:bf: fa:1c:29:1f:c9:72:8e:2d:4a:43:32:07:68:a8:bf:76:e3:16: 14:8c:59:f2:05:38:30:7f:cb:e2:96:8b:a3:37:7d:fb:33:fe: 16:51:8d:f4:65:3d:1a:f5:5b:24:3c:0d:ec:e2:1a:a3:ee:33: 6f:5e:76:03:11:68:56:b7:6b:d0:f5:bf:c9:64:8d:77:61:62: e2:fe:08:d1:a6:bf:6a:52:b8:df:68:16:6e:46:00:85:3b:de: 7a:89:88:4b:63:6e:e9:03:a1:23:75:89:ef:ee:80:d2:cb:1a: 32:98:74:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuWz4HivF3pMA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MjdjNTVlNDQtZWYyZC00NTk5LThjMTYtODQ5MDg4ZDAxNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QbOI9e2SvkDEW65kJh7vtIqZR+ZgT1QztdX 5/uCJRXtHQyuALczlOX7ieHs4COSB+RMcx8vueaCQQvFQk2QASKzoUFEvMQjuIhy DRLgHG+VHofh+IZGDCzsKC4/Z+PDk9waCFs1wO35W6TZzLm0LKX77S2b3cbCNAT+ Q/DKZhabpJW2SEATKLjMsvmoTne96MiB6YIWxOxHunxWQHJV+qTs579HNPd+L0hU 8yYmohHJPN+KKZew/fsyCnhQgbFRoW24Ly5fe8QlAyjeQlvl9BwvuhPeUxLILW/t EM7aoRt3YLrUePaPS0v0J7I/sb5tH7r1WN/BxMLaSJi5hhUU4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZKX3t36ayt0aoBptlZIEEI1tAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvYjkzYzJmNTMtOGY2Ni0z OWY3LTlhYTMtOGEyYjI3OTQ1MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMVsaFGdA5MwIIAbhoBak7/nl3k/n8NKgrSij/RQdWKnHV1MQ1aBwiq EacfDp06Yc3WVN0qNKDh37T3wot5bzaheGG5hhsnDPWrsFxuU0Kb6AgwjAX0wXHB JJlJXU6NJyS7bgD69v+z2qSN4+iaCiL8ImTX/0snLra7AO0RiKpuYYnp8GL/gRSu fgue/QhYv/ocKR/Jco4tSkMyB2iov3bjFhSMWfIFODB/y+KWi6M3ffsz/hZRjfRl PRr1WyQ8DeziGqPuM29edgMRaFa3a9D1v8lkjXdhYuL+CNGmv2pSuN9oFm5GAIU7 3nqJiEtjbukDoSN1ie/ugNLLGjKYdGQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:33 2025 by rpki-client