$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa File: 7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa (raw, json) Hash identifier: 6RA/NrRnGhdfn6ZAaY9soRqxEIOTegB4mzuZrI23ujg= Subject key identifier: 8C:9E:E7:01:82:7C:30:10:DF:C2:3B:43:2E:93:8B:17:B8:83:35:D1 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B2698755639B9EDBF79FB1240 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa Signing time: Wed 10 Sep 2025 18:15:36 +0000 ROA not before: Wed 10 Sep 2025 18:15:36 +0000 ROA not after: Tue 09 Dec 2025 19:15:36 +0000 asID: 2559 IP address blocks: 198.241.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:98:75:56:39:b9:ed:bf:79:fb:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Sep 10 18:15:36 2025 GMT Not After : Dec 9 19:15:36 2025 GMT Subject: CN=3c8529d9-d82e-4fef-adb9-56be985e559e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:5f:7a:41:d7:1b:14:1c:a9:a6:9e:71:ca: 61:26:37:95:6c:7c:80:bd:6d:5e:a0:9d:56:58:2f: 9c:f9:92:8d:ba:70:58:7e:2b:e9:8e:d9:23:43:d3: bb:88:0f:72:fc:3b:21:17:1d:85:94:c1:db:7c:d9: eb:c9:ff:03:03:86:ef:ab:c9:2d:fa:94:77:a1:7f: 6b:87:a0:42:56:2c:e4:2a:e9:91:48:5c:11:89:17: cb:a8:f1:25:cf:a0:a1:a8:34:25:a7:a1:fb:b3:d6: 21:46:95:ea:65:b7:f0:9d:16:ef:8a:bb:4c:4f:52: 6f:d1:1a:a1:d2:92:30:2a:f8:dd:b4:90:78:3a:52: 9e:2c:3e:b2:c9:3d:5d:a7:44:3b:e9:77:f4:42:46: 63:0f:09:61:80:c5:4a:26:14:cd:ae:94:a4:34:c3: 94:8d:82:5b:4e:92:23:28:f1:d1:98:94:b4:b1:55: 29:63:da:6f:01:46:92:85:55:d2:25:58:94:18:ba: 99:41:17:b2:dd:77:c9:de:05:de:4d:4b:2d:39:31: c6:e7:a2:22:50:96:71:40:ab:4e:7a:61:16:20:1c: 54:8a:ef:6c:98:5d:3d:66:3b:90:0e:9d:e5:60:8b: f7:da:f1:aa:a3:13:74:0d:06:63:b9:47:09:29:69: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:E7:01:82:7C:30:10:DF:C2:3B:43:2E:93:8B:17:B8:83:35:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7f3025c8-ac1e-3f1d-bfa6-d623963696f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6b:d3:1d:9d:c9:6c:85:29:4e:00:3f:54:1d:3d:73:98:44: 84:ef:36:4c:c2:0f:e7:3d:d2:46:a1:e6:f0:fa:70:4f:d4:55: 67:31:c3:04:b1:75:bb:ac:0e:96:c8:67:95:83:01:27:f7:68: 49:8f:6f:b5:93:c6:41:07:5b:40:5c:6d:89:10:50:6e:bb:d9: a4:8b:a9:a3:26:83:12:0f:57:2d:6d:9f:07:a6:d1:e2:c9:0f: b7:e5:72:47:22:72:1d:5d:33:15:b4:3d:53:3f:d0:ff:99:4d: b1:84:e9:38:c1:c2:57:18:ed:37:c7:3a:e4:d7:77:a9:dc:b7: 81:9f:1a:b6:da:56:f0:aa:aa:72:b2:c9:01:00:52:71:1a:cf: 90:bc:7f:c0:fb:f2:b0:61:13:a7:53:94:ee:e3:93:dc:d7:c9: 4d:ef:a9:ec:5b:d9:05:f7:fd:50:fc:70:ea:4a:b0:cb:48:01: 5f:c1:d0:6f:26:11:e2:8f:ce:fd:9d:53:fe:6d:4f:cc:17:0d: 9a:b0:97:01:ef:a3:55:88:40:be:1f:c6:35:6f:3e:94:ea:66: b5:ba:d4:61:35:e7:a8:32:37:b1:32:42:d8:15:09:c8:7d:47: de:02:d0:73:1f:00:de:9a:c7:ab:fe:1e:24:67:4c:25:eb:01: 56:65:cd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmmHVWObntv3n7EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDkxMDE4MTUzNloXDTI1MTIwOTE5MTUzNlowLzEtMCsGA1UEAxMk M2M4NTI5ZDktZDgyZS00ZmVmLWFkYjktNTZiZTk4NWU1NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPtfekHXGxQcqaaeccphJjeVbHyAvW1eoJ1W WC+c+ZKNunBYfivpjtkjQ9O7iA9y/DshFx2FlMHbfNnryf8DA4bvq8kt+pR3oX9r h6BCVizkKumRSFwRiRfLqPElz6ChqDQlp6H7s9YhRpXqZbfwnRbvirtMT1Jv0Rqh 0pIwKvjdtJB4OlKeLD6yyT1dp0Q76Xf0QkZjDwlhgMVKJhTNrpSkNMOUjYJbTpIj KPHRmJS0sVUpY9pvAUaShVXSJViUGLqZQRey3XfJ3gXeTUstOTHG56IiUJZxQKtO emEWIBxUiu9smF09ZjuQDp3lYIv32vGqoxN0DQZjuUcJKWnqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIye5wGCfDAQ38I7Qy6Tixe4gzXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvN2YzMDI1YzgtYWMxZS0z ZjFkLWJmYTYtZDYyMzk2MzY5NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdr0x2dyWyFKU4AP1QdPXOYRITvNkzCD+c90kah5vD6cE/UVWcxwwSx dbusDpbIZ5WDASf3aEmPb7WTxkEHW0BcbYkQUG672aSLqaMmgxIPVy1tnwem0eLJ D7flckcich1dMxW0PVM/0P+ZTbGE6TjBwlcY7TfHOuTXd6nct4GfGrbaVvCqqnKy yQEAUnEaz5C8f8D78rBhE6dTlO7jk9zXyU3vqexb2QX3/VD8cOpKsMtIAV/B0G8m EeKPzv2dU/5tT8wXDZqwlwHvo1WIQL4fxjVvPpTqZrW61GE156gyN7EyQtgVCch9 R94C0HMfAN6ax6v+HiRnTCXrAVZlzck= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:25 2025 by rpki-client