$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa File: f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json) Hash identifier: 5NGTVdl9tX/nmEwITX9GZsT+qaPjLGOULgnNBXx7/T0= Subject key identifier: F9:0E:D6:7B:C9:C0:27:88:8D:75:08:75:6B:5C:9C:23:99:DE:E2:E1 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B3AEC47AA75C935D0C6D02700 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 2559 IP address blocks: 198.217.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:47:aa:75:c9:35:d0:c6:d0:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=7e56e973-2380-4f93-a8f3-b73e8e5c5ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f4:6d:c1:09:c4:8c:6b:50:04:87:57:92:8b: c4:e1:d0:0f:c4:95:ff:f4:1e:ac:65:75:b8:a4:5b: b8:b5:cb:91:6e:c0:e0:70:fe:5e:f1:bb:f0:19:07: 41:d8:4a:8b:b2:f4:07:09:71:67:d0:fb:5b:74:45: e9:ae:61:2c:d4:dc:3a:88:90:8f:c5:f3:7d:c2:0a: 0d:bf:71:b5:16:68:2f:af:12:c1:de:e4:24:96:40: 8e:69:c7:90:a9:71:b3:33:44:a9:db:47:8e:1a:b9: 29:4f:cd:a6:04:56:ea:70:c1:2d:da:e9:75:21:8b: 1d:f1:21:91:28:4c:5e:1c:af:58:16:44:b7:32:15: f3:97:47:43:d4:dd:11:a0:12:88:16:94:96:3b:26: 50:b1:a1:63:88:37:df:90:91:b4:8f:42:06:0b:29: 1c:63:6a:d1:bd:80:8c:3d:70:73:3b:7c:65:c3:8a: ef:60:b7:e5:a8:29:ab:97:b4:55:90:5d:93:26:ed: 90:20:c1:14:3d:4c:36:b8:48:2d:a0:08:3c:7a:11: a6:af:77:0d:77:c9:b9:0c:31:7a:24:20:6b:9e:98: 90:46:50:19:ed:85:99:a4:13:28:2f:30:81:b3:80: 50:4a:81:52:6a:75:aa:5c:bf:a6:be:bd:cf:d6:48: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:D6:7B:C9:C0:27:88:8D:75:08:75:6B:5C:9C:23:99:DE:E2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6b:85:71:26:0c:df:e0:63:a0:e5:72:24:53:92:e9:e3:b8: e8:2d:a8:c2:bd:ec:e2:7d:db:5a:76:89:c7:9e:59:ac:ad:da: 0e:73:3f:3b:ed:bb:00:87:e2:60:0f:59:05:f6:5f:3b:06:84: 82:92:44:ad:05:fc:18:d0:3d:1e:6b:9b:40:05:36:5f:02:94: 21:b1:6f:4a:92:42:70:68:16:c6:fd:48:5c:9e:05:65:f5:8c: ad:45:df:48:94:07:55:0d:cd:ab:23:ef:58:41:12:29:85:e0: 0a:94:3d:b9:fc:98:3e:16:4a:6c:af:b4:f2:50:17:a0:1b:45: df:c4:31:0d:52:e8:b4:a5:22:ce:83:b9:c8:07:f7:5f:9a:bf: de:e6:fc:6a:e9:d0:c2:bb:19:d7:54:27:38:12:03:60:a7:bc: 52:fd:10:25:b1:d6:3d:61:7c:5f:8c:97:c2:3e:f5:c6:3c:29: 87:b6:de:cd:6b:ba:45:02:3a:51:5c:2e:9d:53:c3:d0:b6:0b: 12:1b:de:8b:1b:14:d7:d1:a3:d0:6d:af:ff:4d:bb:ef:9c:3f: 91:2a:d8:cf:2f:cc:34:7f:34:c7:2f:77:3f:0f:69:49:76:3a: 82:74:0d:16:5d:a9:54:87:19:c5:a5:ff:b1:c0:3a:b4:da:af: e9:fb:74:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67Eeqdck10MbQJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk N2U1NmU5NzMtMjM4MC00ZjkzLWE4ZjMtYjczZThlNWM1ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPRtwQnEjGtQBIdXkovE4dAPxJX/9B6sZXW4 pFu4tcuRbsDgcP5e8bvwGQdB2EqLsvQHCXFn0PtbdEXprmEs1Nw6iJCPxfN9wgoN v3G1FmgvrxLB3uQklkCOaceQqXGzM0Sp20eOGrkpT82mBFbqcMEt2ul1IYsd8SGR KExeHK9YFkS3MhXzl0dD1N0RoBKIFpSWOyZQsaFjiDffkJG0j0IGCykcY2rRvYCM PXBzO3xlw4rvYLflqCmrl7RVkF2TJu2QIMEUPUw2uEgtoAg8ehGmr3cNd8m5DDF6 JCBrnpiQRlAZ7YWZpBMoLzCBs4BQSoFSanWqXL+mvr3P1kixewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkO1nvJwCeIjXUIdWtcnCOZ3uLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZjdjMmQwYmMtN2ZiYS0z YzFhLWI2OWEtZThjMDYzOTgxMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEprhXEmDN/gY6DlciRTkunjuOgtqMK97OJ921p2iceeWayt2g5zPzvt uwCH4mAPWQX2XzsGhIKSRK0F/BjQPR5rm0AFNl8ClCGxb0qSQnBoFsb9SFyeBWX1 jK1F30iUB1UNzasj71hBEimF4AqUPbn8mD4WSmyvtPJQF6AbRd/EMQ1S6LSlIs6D ucgH91+av97m/Grp0MK7GddUJzgSA2CnvFL9ECWx1j1hfF+Ml8I+9cY8KYe23s1r ukUCOlFcLp1Tw9C2CxIb3osbFNfRo9Btr/9Nu++cP5Eq2M8vzDR/NMcvdz8PaUl2 OoJ0DRZdqVSHGcWl/7HAOrTar+n7dPE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:45 2025 by rpki-client