$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d5e73e93-0cc0-3fd9-95bb-50c4624fb537.roa File: d5e73e93-0cc0-3fd9-95bb-50c4624fb537.roa (raw, json) Hash identifier: qNDWpy1q0ByeRl+CwfpEWOdtz1AycShXWgx1CYL+NI0= Subject key identifier: 98:ED:7A:74:85:25:70:8B:D3:C7:97:BC:57:56:15:0F:64:02:03:76 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B27617DB9831C9EDBE1696A00 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d5e73e93-0cc0-3fd9-95bb-50c4624fb537.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 2559 IP address blocks: 198.241.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7d:b9:83:1c:9e:db:e1:69:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=199bc99a-0e83-40b2-b755-f256cb8d2fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:96:9d:2a:53:f4:11:f4:d7:4a:51:c4:52: 46:ae:2b:05:18:c5:f7:c1:48:9e:d6:8c:8d:f0:ad: 4e:c2:66:0b:dd:a7:73:b9:f2:ad:33:ed:f1:1d:85: 94:f8:f7:9a:e5:c3:52:4e:61:92:eb:03:02:bc:71: cf:3e:e7:12:11:39:72:78:c1:d0:c4:a8:63:3f:4d: e3:3c:41:a3:7e:e8:81:3b:b8:fa:f5:6d:01:66:bb: 43:b4:b4:28:1c:76:4f:8d:f8:f4:c2:c8:46:32:c3: 96:41:eb:37:d3:f0:30:c1:56:be:8f:44:7d:14:68: 64:7d:b9:d5:0a:06:1a:e9:5a:a8:57:5f:36:bf:69: 28:fe:f7:95:6d:b9:65:87:44:b4:df:4e:5e:87:d9: b1:31:ef:cf:d4:f3:d2:d1:fc:b9:ff:1a:49:86:97: 81:93:b0:09:f7:25:03:71:4a:dc:51:4a:f9:43:86: 3c:20:9a:46:71:dd:fe:4c:bf:64:e4:c3:b7:17:9c: 4f:6a:8d:94:c8:62:de:31:eb:ee:14:18:3d:ef:bc: 1c:06:b1:4a:70:db:ba:19:a1:7b:30:88:93:3f:91: 60:2a:f9:b0:68:8d:fe:ad:ca:04:ae:09:d3:5d:61: e0:47:2e:f2:e8:cf:af:a8:92:0b:de:2b:05:bc:f0: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:7A:74:85:25:70:8B:D3:C7:97:BC:57:56:15:0F:64:02:03:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d5e73e93-0cc0-3fd9-95bb-50c4624fb537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:64:70:c2:9b:a0:bd:d0:be:6b:ab:eb:41:83:e4:bb:0f:ed: 9f:8d:77:97:bd:1c:20:fe:1f:b6:93:4e:78:2b:45:2f:a9:48: 23:ed:7f:6a:c4:25:11:a0:26:9e:05:a4:3a:83:a7:04:92:fe: 3b:7f:17:b9:0f:21:9e:c1:14:92:69:c4:ad:38:69:ad:43:de: ca:14:b1:02:1b:2b:02:65:41:83:1f:90:71:23:26:83:1c:67: aa:f4:6f:5f:c3:bf:7b:bb:5f:26:5f:82:35:7f:e8:0c:18:2b: 8f:5b:be:67:37:29:17:3a:31:db:ed:f5:97:88:56:42:8d:87: 74:76:4f:69:36:13:b2:1e:23:ce:dd:73:03:52:bb:56:66:0a: 86:c2:51:08:ac:c2:c4:33:99:c7:e4:f3:3f:71:51:e6:63:40: 23:db:c6:5c:e9:b9:3f:0e:0b:e5:65:4f:64:9b:65:43:25:38: e1:70:fd:60:f5:04:02:37:16:26:38:dc:09:7f:21:d0:f5:20: 03:7c:b1:8b:9c:b0:dc:1e:63:28:83:0b:01:98:09:40:e6:f1: b1:cb:1f:f5:85:f7:4e:7d:77:7e:f5:97:fd:e8:9d:16:14:e7: 9c:fc:51:10:9f:2a:07:54:0d:fc:0d:a2:91:68:cd:f6:cf:40: c1:f7:79:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYX25gxye2+FpagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk MTk5YmM5OWEtMGU4My00MGIyLWI3NTUtZjI1NmNiOGQyZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOWWnSpT9BH010pRxFJGrisFGMX3wUie1oyN 8K1OwmYL3adzufKtM+3xHYWU+Pea5cNSTmGS6wMCvHHPPucSETlyeMHQxKhjP03j PEGjfuiBO7j69W0BZrtDtLQoHHZPjfj0wshGMsOWQes30/AwwVa+j0R9FGhkfbnV CgYa6VqoV182v2ko/veVbbllh0S0305eh9mxMe/P1PPS0fy5/xpJhpeBk7AJ9yUD cUrcUUr5Q4Y8IJpGcd3+TL9k5MO3F5xPao2UyGLeMevuFBg977wcBrFKcNu6GaF7 MIiTP5FgKvmwaI3+rcoErgnTXWHgRy7y6M+vqJIL3isFvPAT8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjtenSFJXCL08eXvFdWFQ9kAgN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZDVlNzNlOTMtMGNjMC0z ZmQ5LTk1YmItNTBjNDYyNGZiNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARkcMKboL3Qvmur60GD5LsP7Z+Nd5e9HCD+H7aTTngrRS+pSCPtf2rE JRGgJp4FpDqDpwSS/jt/F7kPIZ7BFJJpxK04aa1D3soUsQIbKwJlQYMfkHEjJoMc Z6r0b1/Dv3u7XyZfgjV/6AwYK49bvmc3KRc6Mdvt9ZeIVkKNh3R2T2k2E7IeI87d cwNSu1ZmCobCUQiswsQzmcfk8z9xUeZjQCPbxlzpuT8OC+VlT2SbZUMlOOFw/WD1 BAI3FiY43Al/IdD1IAN8sYucsNweYyiDCwGYCUDm8bHLH/WF9059d371l/3onRYU 55z8URCfKgdUDfwNopFozfbPQMH3eZU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:16:56 2025 by rpki-client