$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa File: ed318ff3-2835-3288-a505-9e112c93201b.roa (raw, json) Hash identifier: ArV0rMBGke3bf3hmZdIVOXoVGciIGKQbvi2S5JkXYDw= Subject key identifier: 12:BE:E7:EA:CD:F3:BD:E8:32:90:9D:59:92:DC:22:E6:C0:18:B8:5F Certificate issuer: /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Certificate serial: 010D0C9F4328584B328C3F65619C58860934C860 Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 396425 IP address blocks: 128.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3f:65:61:9c:58:86:09:34:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=85eae3f8-c148-4878-8b5f-f9cca0131643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:78:d9:29:70:c8:84:01:d8:ba:dd:99:63: f5:4d:f8:8f:23:e2:4c:48:27:50:4c:37:58:7e:6d: b6:1a:eb:61:b5:b2:2b:20:8e:c7:97:7a:36:29:d2: 00:49:92:df:8b:77:db:48:bd:ef:04:c1:79:2b:1c: 7e:a3:c5:fd:7f:bd:56:f3:d2:1b:b9:f2:fd:e9:0c: 44:d9:5f:d1:94:d6:11:57:bd:81:23:bc:ef:27:38: 26:4f:45:f9:21:b3:e3:4b:67:66:aa:4a:e4:32:9f: 8e:b0:4c:b0:62:8e:f2:0b:c5:0a:49:e3:a5:93:94: d9:db:3d:ba:9f:61:03:c5:2c:58:72:97:8f:b6:82: 66:dd:bd:c6:8e:b0:eb:52:e5:e1:f6:da:d9:1a:b7: 8a:b1:d8:71:c1:b6:27:44:67:53:ad:28:fb:ec:51: 69:44:e4:7c:9e:bf:35:1a:84:6f:86:ab:d5:6b:1b: 3c:69:f6:a4:c1:b7:6a:20:2b:92:f8:1d:b9:6f:27: 09:17:94:4f:c2:78:43:af:8c:42:e5:b0:fe:79:b7: f7:47:4a:89:43:5d:f8:4c:60:56:5b:0f:95:30:52: 81:49:f3:2e:33:c9:a8:23:41:30:5b:51:5d:fa:5a: 35:60:7d:d1:6a:e6:e0:75:f0:20:b7:7d:58:5a:5f: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BE:E7:EA:CD:F3:BD:E8:32:90:9D:59:92:DC:22:E6:C0:18:B8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl X509v3 Authority Key Identifier: keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer sbgp-ipAddrBlock: critical IPv4: 128.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f5:d8:f0:b0:3b:84:14:9d:f6:62:f8:84:19:41:bc:dc:f5: 08:65:6d:58:10:03:cb:57:50:08:e3:57:8b:57:27:0b:f9:ce: 9b:56:93:5b:e3:fa:30:6d:53:bf:4e:a7:00:7a:9a:11:54:36: 46:19:62:66:d3:12:63:46:4b:70:d6:19:e4:0a:df:70:e9:4a: 2a:66:be:06:4a:7e:4b:5c:43:41:c5:98:4e:61:79:b6:dd:26: 82:be:9a:83:d5:37:9b:27:16:fc:92:f4:e6:cc:fd:14:34:3d: b0:3f:27:aa:14:2f:ef:65:d0:4a:54:29:1f:fe:19:58:7e:09: 59:da:4a:f9:4f:69:74:88:a8:a9:79:8a:3f:89:ac:64:a7:0b: 6e:a3:f4:79:bd:70:88:63:24:25:d6:99:b7:42:ae:61:69:05: 3f:7e:69:d4:5d:e5:c1:3f:42:19:8d:eb:99:21:70:bf:81:a8: b1:2d:c0:aa:92:c9:66:62:8a:9b:d3:44:3a:33:7f:37:30:0f: b9:f6:f0:de:1d:8b:3a:f1:e9:b7:55:40:0c:88:51:c5:d2:5a: 1a:5a:83:cc:a1:2b:bd:ab:bf:97:ad:09:4a:98:fc:ca:14:1a: e7:87:e0:ce:95:36:c1:bf:1a:bb:79:78:79:87:8a:f7:54:df: 54:e1:13:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsyjD9lYZxYhgk0yGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1 M2EyMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ODVlYWUzZjgtYzE0OC00ODc4LThiNWYtZjljY2EwMTMxNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zd42SlwyIQB2LrdmWP1TfiPI+JMSCdQTDdY fm22GuthtbIrII7Hl3o2KdIASZLfi3fbSL3vBMF5Kxx+o8X9f71W89IbufL96QxE 2V/RlNYRV72BI7zvJzgmT0X5IbPjS2dmqkrkMp+OsEywYo7yC8UKSeOlk5TZ2z26 n2EDxSxYcpePtoJm3b3GjrDrUuXh9trZGreKsdhxwbYnRGdTrSj77FFpROR8nr81 GoRvhqvVaxs8afakwbdqICuS+B25bycJF5RPwnhDr4xC5bD+ebf3R0qJQ134TGBW Ww+VMFKBSfMuM8moI0EwW1Fd+lo1YH3RaubgdfAgt31YWl9TMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBK+5+rN873oMpCdWZLcIubAGLhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2 OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvZWQzMThmZjMtMjgzNS0z Mjg4LWE1MDUtOWUxMTJjOTMyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWQyNjkzNGUtMGJiZi00MzljLWEx MTUtNGU2ZjRhOGQ1M2EyLzFkMjY5MzRlLTBiYmYtNDM5Yy1hMTE1LTRlNmY0YThk NTNhMi5jcmwwHwYDVR0jBBgwFoAUl3QYBBX9COHAfkms6zr4PoGpoMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZm NGE4ZDUzYTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgMYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQfXY8LA7hBSd9mL4hBlBvNz1CGVtWBADy1dQCONXi1cnC/nOm1aTW+P6 MG1Tv06nAHqaEVQ2RhliZtMSY0ZLcNYZ5ArfcOlKKma+Bkp+S1xDQcWYTmF5tt0m gr6ag9U3mycW/JL05sz9FDQ9sD8nqhQv72XQSlQpH/4ZWH4JWdpK+U9pdIioqXmK P4msZKcLbqP0eb1wiGMkJdaZt0KuYWkFP35p1F3lwT9CGY3rmSFwv4GosS3AqpLJ ZmKKm9NEOjN/NzAPufbw3h2LOvHpt1VADIhRxdJaGlqDzKErvau/l60JSpj8yhQa 54fgzpU2wb8au3l4eYeK91TfVOET0A== -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:06 2025 by rpki-client