$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa File: fd895d36-9a69-3002-8f53-5c6ba38acca8.roa (raw, json) Hash identifier: hFHZwCiqYPZHGCNESB7Y2aGWWqoM9ZzFZcPCZJVKTUI= Subject key identifier: 44:7D:0D:6D:29:AC:10:4E:B2:AC:6F:B7:1B:B4:4B:94:34:53:4D:47 Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F4328584B44B1B5303229B356328BEC80 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 14618 IP address blocks: 198.145.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b5:30:32:29:b3:56:32:8b:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=ac35997c-9a62-4cd8-a7d8-25faf09320cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:92:af:be:d2:1b:12:da:8d:5d:b5:b4:9b: e0:89:15:07:54:df:79:1b:6e:c9:d7:25:81:5c:1a: 6c:45:67:fe:db:58:17:a6:7f:b0:0b:d7:0f:ca:4c: e1:38:27:db:62:16:39:6b:89:8d:70:36:2e:d3:47: ff:33:1b:69:2e:da:ee:c2:9c:02:07:e7:49:a6:dd: 4b:ff:ac:46:74:35:90:bb:9f:e9:dc:fa:0a:75:a6: 9d:ae:90:e0:9d:52:67:75:16:99:b6:a6:c6:0d:10: b5:69:62:9b:54:5e:8a:f1:10:80:d9:c0:f8:e5:b2: 7b:c2:71:76:f3:12:cc:62:2c:ea:a4:ac:1e:98:65: 8e:80:99:4f:e1:0b:34:3e:9d:25:89:7b:b0:b1:03: b6:02:af:0b:cc:9e:67:41:d7:e5:eb:ad:a6:db:64: 76:4b:52:51:66:35:41:85:7f:ef:c1:4e:1f:d6:54: 63:a2:67:f5:bb:cd:51:f5:14:cb:88:1b:b0:25:c2: a6:95:45:0e:49:5d:4e:96:0e:4c:be:aa:c6:88:17: 54:a5:4b:32:14:cb:ab:36:93:34:db:fc:e5:0e:2f: 1f:12:16:9a:0b:1b:39:c5:62:ad:6f:5a:c1:79:80: cf:29:33:8f:40:77:e2:b3:3a:31:55:fd:e4:9c:a6: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:0D:6D:29:AC:10:4E:B2:AC:6F:B7:1B:B4:4B:94:34:53:4D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 198.145.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fe:dd:19:52:64:26:55:ce:e3:c1:b9:d3:66:f5:db:78:c3: b4:ab:78:3e:6f:d1:b4:b5:8d:6f:2f:25:84:9c:c3:fb:18:ad: 9c:ce:19:25:c2:e8:95:66:ca:7b:7a:0e:56:46:25:7d:17:b8: ca:9f:47:54:cf:56:ed:ba:80:28:81:1c:63:a5:43:df:19:7c: 85:bd:cd:b1:ae:b6:4a:a6:42:23:93:84:af:f7:69:4a:0a:01: 03:95:6b:7d:03:d9:1f:85:e0:1f:66:f1:32:86:8d:58:19:67: 98:0a:ab:b5:b8:05:69:6d:fe:97:1c:93:8b:55:4c:9b:13:e0: 41:b2:18:62:97:80:77:63:52:84:1a:a6:f1:fe:8f:de:39:e5: 19:e6:b4:d9:b6:04:54:b3:f3:8a:73:d5:17:47:31:94:c1:ec: 8c:4a:55:cc:48:16:96:6e:f1:84:20:50:1a:32:a8:db:02:42: 12:16:5c:0d:eb:4e:ee:ce:81:0e:7f:be:93:11:85:75:33:f2: 34:3a:49:df:5c:29:4d:8c:69:7e:a1:4c:a3:d6:6a:d7:14:79: 8f:ad:ae:61:dd:ba:28:15:08:a2:1a:b7:ee:70:13:1f:fd:51: d9:05:6f:66:48:83:e5:48:b5:48:bd:cb:90:e3:47:19:27:b7: 5b:5e:8f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbUwMimzVjKL7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YWMzNTk5N2MtOWE2Mi00Y2Q4LWE3ZDgtMjVmYWYwOTMyMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwqSr77SGxLajV21tJvgiRUHVN95G27J1yWB XBpsRWf+21gXpn+wC9cPykzhOCfbYhY5a4mNcDYu00f/MxtpLtruwpwCB+dJpt1L /6xGdDWQu5/p3PoKdaadrpDgnVJndRaZtqbGDRC1aWKbVF6K8RCA2cD45bJ7wnF2 8xLMYizqpKwemGWOgJlP4Qs0Pp0liXuwsQO2Aq8LzJ5nQdfl662m22R2S1JRZjVB hX/vwU4f1lRjomf1u81R9RTLiBuwJcKmlUUOSV1Olg5MvqrGiBdUpUsyFMurNpM0 2/zlDi8fEhaaCxs5xWKtb1rBeYDPKTOPQHfiszoxVf3knKZgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER9DW0prBBOsqxvtxu0S5Q0U01HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvZmQ4OTVkMzYtOWE2OS0z MDAyLThmNTMtNWM2YmEzOGFjY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/+3RlSZCZVzuPBudNm9dt4w7SreD5v0bS1jW8vJYScw/sYrZzOGSXC 6JVmynt6DlZGJX0XuMqfR1TPVu26gCiBHGOlQ98ZfIW9zbGutkqmQiOThK/3aUoK AQOVa30D2R+F4B9m8TKGjVgZZ5gKq7W4BWlt/pcck4tVTJsT4EGyGGKXgHdjUoQa pvH+j9455RnmtNm2BFSz84pz1RdHMZTB7IxKVcxIFpZu8YQgUBoyqNsCQhIWXA3r Tu7OgQ5/vpMRhXUz8jQ6Sd9cKU2MaX6hTKPWatcUeY+trmHduigVCKIat+5wEx/9 UdkFb2ZIg+VItUi9y5DjRxknt1tej1k= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:43 2025 by rpki-client