$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa File: 2caf07cb-0d21-3238-a345-2f65b0288131.roa (raw, json) Hash identifier: +k1T+Ar9jxmqXJFGlMStNFvr5bCiZQqjyJCbRRSYF2Y= Subject key identifier: AE:D5:EF:1B:50:A7:A8:17:BB:8E:64:78:AB:9A:3C:46:62:9B:16:2B Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B0E4155EAA5C83657B8953C00 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 2559 IP address blocks: 198.241.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:55:ea:a5:c8:36:57:b8:95:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=3908835e-7ee7-4dd2-b81c-ee2fdf476da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:ee:92:a5:85:0d:12:24:59:fa:57:10:0c: 81:99:45:44:ac:3e:69:4e:7a:8f:eb:45:64:5d:58: f9:37:62:93:ae:98:c0:df:55:1e:e0:3c:76:c5:2c: 88:84:f3:f9:36:e2:fb:b2:57:4e:88:6f:f7:66:4f: a2:69:d0:ad:6c:7a:75:9e:86:f1:2e:09:94:c4:de: 22:db:fc:66:60:79:5c:06:17:28:2a:f6:4a:41:83: 01:56:cf:a9:78:d3:79:2d:08:e5:11:6d:8e:7a:ed: 54:d3:7d:67:24:4a:87:a0:d1:4d:87:09:1d:ed:0e: 28:5c:1c:7f:99:87:30:d3:6f:cf:4e:a9:e9:b2:2b: 48:a4:de:0e:92:fd:64:38:d0:9f:e4:06:05:6a:08: e7:c9:02:a2:4f:03:70:85:42:6b:72:ff:e0:9f:b3: 8b:3b:3a:71:d3:e2:26:fb:31:26:e8:77:fe:94:e9: 16:b8:e6:be:54:e9:02:6e:7c:16:10:79:04:32:a3: 90:35:50:e5:77:31:7e:f0:8e:ed:45:69:cc:44:40: 84:23:55:75:7c:84:3e:d6:ef:63:3f:9a:c0:89:f0: 38:e3:69:98:d4:be:f6:5e:10:e2:9b:c8:64:9b:08: 44:a7:b5:9d:dc:79:b8:f4:c3:61:35:d0:78:95:1c: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:EF:1B:50:A7:A8:17:BB:8E:64:78:AB:9A:3C:46:62:9B:16:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:cc:2f:22:e2:90:16:6a:25:35:62:a7:bb:47:25:e9:98:4e: 58:78:a5:b0:ee:3c:46:62:e8:9b:d0:0c:6b:0e:8a:19:e0:fa: 3c:bb:4a:b6:ae:ac:f5:65:e0:a3:21:a5:b3:4d:b3:63:ba:8a: c9:c6:a5:db:c6:c5:c1:26:3e:d7:13:23:a1:78:18:3e:29:74: 91:1e:51:04:64:dd:ab:94:ac:54:cd:62:08:79:b1:09:d5:12: 38:33:94:0d:b8:f0:92:55:3f:a7:94:43:25:a9:33:b8:6f:8a: 37:77:96:38:39:c3:40:18:ac:03:98:ee:a0:fc:86:0a:9e:9b: 12:71:7c:3a:33:b9:b7:d0:4c:a5:5c:dc:a5:80:55:de:f3:5d: 68:22:7f:13:3a:df:7b:3f:45:fc:a4:e2:3a:68:8a:b9:2f:3f: 8a:32:36:50:b4:83:14:fa:66:12:c0:1d:4f:22:b9:70:61:8d: 92:e9:e5:08:69:53:9e:61:17:5a:29:85:fe:20:02:8e:a3:33: b3:41:d3:18:80:b9:7a:a9:16:60:60:df:71:2f:f6:48:c0:1a: 7b:05:1f:37:42:bf:0a:ed:07:d9:90:29:a5:cb:a7:84:5f:6c: 12:2f:eb:45:e4:1a:ff:3e:3c:6d:00:af:da:be:83:02:6c:df: d1:8f:f6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVXqpcg2V7iVPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzkwODgzNWUtN2VlNy00ZGQyLWI4MWMtZWUyZmRmNDc2ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXukqWFDRIkWfpXEAyBmUVErD5pTnqP60Vk XVj5N2KTrpjA31Ue4Dx2xSyIhPP5NuL7sldOiG/3Zk+iadCtbHp1nobxLgmUxN4i 2/xmYHlcBhcoKvZKQYMBVs+peNN5LQjlEW2Oeu1U031nJEqHoNFNhwkd7Q4oXBx/ mYcw02/PTqnpsitIpN4Okv1kONCf5AYFagjnyQKiTwNwhUJrcv/gn7OLOzpx0+Im +zEm6Hf+lOkWuOa+VOkCbnwWEHkEMqOQNVDldzF+8I7tRWnMRECEI1V1fIQ+1u9j P5rAifA442mY1L72XhDim8hkmwhEp7Wd3Hm49MNhNdB4lRzaHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7V7xtQp6gXu45keKuaPEZimxYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMmNhZjA3Y2ItMGQyMS0z MjM4LWEzNDUtMmY2NWIwMjg4MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbMLyLikBZqJTVip7tHJemYTlh4pbDuPEZi6JvQDGsOihng+jy7Srau rPVl4KMhpbNNs2O6isnGpdvGxcEmPtcTI6F4GD4pdJEeUQRk3auUrFTNYgh5sQnV EjgzlA248JJVP6eUQyWpM7hvijd3ljg5w0AYrAOY7qD8hgqemxJxfDozubfQTKVc 3KWAVd7zXWgifxM633s/Rfyk4jpoirkvP4oyNlC0gxT6ZhLAHU8iuXBhjZLp5Qhp U55hF1ophf4gAo6jM7NB0xiAuXqpFmBg33Ev9kjAGnsFHzdCvwrtB9mQKaXLp4Rf bBIv60XkGv8+PG0Ar9q+gwJs39GP9uc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:28 2025 by rpki-client