$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa File: 66c24ca4-75ad-3583-bab3-0d338b0cb433.roa (raw, json) Hash identifier: tEV1eHc3Bo1QYlnz5JnO0V6puxWEJ5a7ls+4IyaOlfo= Subject key identifier: 41:59:25:4F:17:7F:CF:D4:19:29:6F:D8:06:5C:31:90:29:B4:E6:52 Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Certificate serial: 010D0C9F4328584B0A1168ABF2E24A36EE7049C0 Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 271 IP address blocks: 198.162.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:68:ab:f2:e2:4a:36:ee:70:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=3fcd19b4-42f1-4062-9ed7-fb6956a18a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:21:e9:af:15:ad:51:f5:2c:1d:44:1f:06:60: 66:b4:28:d1:dc:08:5f:15:5d:09:ad:0d:89:53:66: a2:87:4f:7e:00:9c:c4:ea:d8:ff:7c:1f:65:26:fa: 73:78:e0:95:97:37:e2:c2:a7:7b:15:ae:cf:14:10: 8c:33:53:79:5d:17:69:10:7f:77:76:2e:99:92:6b: 0f:b7:a1:6f:47:e4:e3:e1:47:62:f4:3e:cb:6f:f0: 3e:75:94:bb:09:47:e5:20:e7:dd:4a:27:17:d8:58: 33:b5:b1:64:a3:6c:0e:29:31:79:58:cc:a4:0d:c7: 61:da:c1:52:0c:05:42:4f:a2:8b:89:e5:ac:40:b5: 2e:29:fc:b8:f8:76:2f:b2:b6:48:ca:ef:50:03:f0: 4b:92:82:ba:a4:72:fa:d2:26:fe:a5:30:13:1b:a3: f0:8f:db:b8:67:1f:e7:c5:60:93:a4:a6:22:7f:ad: 6f:48:58:f8:57:38:de:60:48:21:36:26:58:c3:5b: 82:a9:0f:55:a8:4a:9b:3e:6a:dc:5c:82:06:2d:d0: f6:c3:ba:2b:db:00:e6:1e:6a:e0:fc:b8:25:64:a3: 40:49:f6:d6:2e:8d:84:f6:c5:32:7b:c0:dc:f9:1d: 2d:9e:85:52:12:1f:9e:d6:8e:b1:f6:58:01:4a:eb: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:25:4F:17:7F:CF:D4:19:29:6F:D8:06:5C:31:90:29:B4:E6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl X509v3 Authority Key Identifier: keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer sbgp-ipAddrBlock: critical IPv4: 198.162.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e9:30:cb:b3:f1:a2:69:f2:2a:fe:6b:3e:8f:47:df:b6:71: fa:2c:84:a5:0b:ff:40:12:5f:7b:70:17:12:67:e8:44:5b:d3: 57:e9:7a:20:45:07:02:17:06:ba:45:34:82:bc:3d:10:62:62: 8b:79:b9:f4:31:5d:a6:19:e8:65:b6:85:83:8f:4e:80:90:ae: a7:11:b9:17:9f:60:c4:4c:9a:56:b2:64:3c:f4:0d:09:0f:ab: 84:3c:cb:da:ac:7f:75:2f:61:8e:b3:ff:4d:ba:87:8a:73:df: 73:40:47:15:33:8a:6a:22:c5:27:df:23:d4:ae:f4:a7:92:43: 05:91:63:15:1f:fc:35:af:0c:d4:59:f3:d5:8f:3f:76:d6:bb: 77:54:11:50:f5:5c:03:aa:d6:91:7a:0e:52:94:cd:83:f1:fb: 10:ea:2a:ad:d6:62:2d:db:55:9b:99:db:48:84:33:d4:34:d8: 15:ec:71:fc:fa:39:43:f7:18:75:25:29:79:23:d7:20:e3:6d: 2c:a7:7a:13:15:79:5d:59:83:61:1d:13:19:5f:dc:24:d0:7d: d1:72:c9:82:81:51:64:c6:9d:46:db:99:92:ea:13:a6:19:cf: 14:b9:4f:67:7f:fc:68:16:20:c3:99:7b:dc:d9:88:08:17:eb: 1e:65:e6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWir8uJKNu5wScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiNjQ2MTMtNWIwZC00OTY4LWI2MDEtZTJmMmNmMDUz ZjE4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk M2ZjZDE5YjQtNDJmMS00MDYyLTllZDctZmI2OTU2YTE4YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iHprxWtUfUsHUQfBmBmtCjR3AhfFV0JrQ2J U2aih09+AJzE6tj/fB9lJvpzeOCVlzfiwqd7Fa7PFBCMM1N5XRdpEH93di6ZkmsP t6FvR+Tj4Udi9D7Lb/A+dZS7CUflIOfdSicX2FgztbFko2wOKTF5WMykDcdh2sFS DAVCT6KLieWsQLUuKfy4+HYvsrZIyu9QA/BLkoK6pHL60ib+pTATG6Pwj9u4Zx/n xWCTpKYif61vSFj4VzjeYEghNiZYw1uCqQ9VqEqbPmrcXIIGLdD2w7or2wDmHmrg /LglZKNASfbWLo2E9sUye8Dc+R0tnoVSEh+e1o6x9lgBSus2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFZJU8Xf8/UGSlv2AZcMZAptOZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2 NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2YwNTNmMTgvNjZjMjRjYTQtNzVhZC0z NTgzLWJhYjMtMGQzMzhiMGNiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGNiNjQ2MTMtNWIwZC00OTY4LWI2 MDEtZTJmMmNmMDUzZjE4LzhjYjY0NjEzLTViMGQtNDk2OC1iNjAxLWUyZjJjZjA1 M2YxOC5jcmwwHwYDVR0jBBgwFoAUmFXdTZzJoIFeqTEMx78iaxZ96QgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYy Y2YwNTNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITpMMuz8aJp8ir+az6PR9+2cfoshKUL/0ASX3twFxJn6ERb01fpeiBF BwIXBrpFNIK8PRBiYot5ufQxXaYZ6GW2hYOPToCQrqcRuRefYMRMmlayZDz0DQkP q4Q8y9qsf3UvYY6z/026h4pz33NARxUzimoixSffI9Su9KeSQwWRYxUf/DWvDNRZ 89WPP3bWu3dUEVD1XAOq1pF6DlKUzYPx+xDqKq3WYi3bVZuZ20iEM9Q02BXscfz6 OUP3GHUlKXkj1yDjbSynehMVeV1Zg2EdExlf3CTQfdFyyYKBUWTGnUbbmZLqE6YZ zxS5T2d//GgWIMOZe9zZiAgX6x5l5nQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:53 2025 by rpki-client