$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa File: 5ff297e9-0b93-336f-a807-5fd81fc10453.roa (raw, json) Hash identifier: KsZ9IY24MgztjC6c0F6aDAN0H1dA0HCVTkjmz5eZm7A= Subject key identifier: 35:46:B6:1E:B5:07:85:A3:ED:6C:F9:E4:F7:7D:C1:6F:F4:96:CE:93 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD1885A118316962069F4A0 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 198.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:88:5a:11:83:16:96:20:69:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=01e80e37-b0d8-42d8-8c55-b041e63ded45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:fd:47:06:e5:b3:24:d2:68:b2:fc:3c:78: 0d:3b:10:28:e9:0e:2c:fe:f2:98:5e:ed:92:35:ca: c9:05:f7:b2:6a:43:20:35:96:b7:5f:b4:ec:b6:4c: 97:d6:ef:6a:d5:35:78:85:d3:6b:a7:c7:c5:56:08: 19:f9:94:9c:15:74:35:19:ef:a5:2f:08:ec:3e:b0: e9:c6:95:69:a5:96:c0:a6:00:a3:49:4f:67:2c:54: 34:aa:c1:b9:ce:80:d0:6b:4a:2f:de:00:b3:1f:9c: 7b:01:98:cb:f7:32:3f:70:e5:c7:3e:e2:bf:8c:b9: c9:ef:0a:9b:cf:3e:40:5f:14:c7:22:94:8c:11:45: 38:60:0b:d8:4b:a9:ca:d5:5c:83:8a:c5:44:63:52: ab:3c:5e:be:1f:b8:10:aa:b9:7b:e5:cf:c1:bb:57: cb:16:94:09:21:da:6d:c4:14:ae:ce:f7:48:11:c1: cc:4e:af:70:af:75:1b:89:b3:bc:e7:04:c7:ad:86: b4:bf:b0:fa:12:11:a7:b8:24:73:2d:6e:14:cb:de: 3c:0f:93:6e:8b:c8:58:e5:4f:b9:de:54:6c:6f:11: 7a:d5:ce:6f:67:5b:b6:38:6a:20:9a:d8:20:ae:97: 28:ba:b3:3b:4a:c0:18:4d:c5:3a:3f:cc:de:e3:6c: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:46:B6:1E:B5:07:85:A3:ED:6C:F9:E4:F7:7D:C1:6F:F4:96:CE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 198.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:55:e9:63:bf:c2:c7:b7:20:2b:c3:6d:cf:4b:11:23:3e: c1:de:8d:3b:6b:a5:23:df:91:e8:45:17:b7:13:d2:b2:23:9c: 9e:da:55:a0:d4:74:6b:c9:f3:a7:00:6f:3e:72:1b:a4:56:39: e4:a9:20:65:43:3d:ae:33:a4:78:df:06:cd:25:40:2e:c7:23: 85:0a:c3:93:ff:45:0e:4d:a7:73:9b:c8:a5:13:4b:d1:2c:b6: 21:d5:de:01:c2:0a:7b:f8:be:ca:05:c9:8f:a6:da:00:19:3b: 6c:4f:8b:75:5f:fe:eb:9a:31:d2:7e:22:53:c2:97:7b:b1:4b: ef:7e:89:b0:31:61:2a:2a:6e:21:c3:c7:28:b5:63:55:51:9a: b0:48:15:6e:ee:db:cb:32:0b:ae:5c:c4:04:87:f4:70:4b:c7: 8d:8e:59:32:03:d6:05:c6:2a:77:98:ee:98:e5:8c:fc:2c:68: e4:1d:0e:82:41:be:35:70:13:04:d1:e9:ea:83:c7:72:db:7c: d0:fa:05:7f:30:ef:11:05:46:b8:90:91:82:6c:9e:52:51:7d: 90:1c:f2:a1:f6:ed:75:d0:6f:d7:19:d1:01:53:52:97:f9:bb: be:d0:8c:12:77:30:1f:03:83:71:b9:7c:5d:0f:16:99:1b:d5: 9e:ae:67:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YhaEYMWliBp9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDFlODBlMzctYjBkOC00MmQ4LThjNTUtYjA0MWU2M2RlZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitL9RwblsyTSaLL8PHgNOxAo6Q4s/vKYXu2S NcrJBfeyakMgNZa3X7TstkyX1u9q1TV4hdNrp8fFVggZ+ZScFXQ1Ge+lLwjsPrDp xpVppZbApgCjSU9nLFQ0qsG5zoDQa0ov3gCzH5x7AZjL9zI/cOXHPuK/jLnJ7wqb zz5AXxTHIpSMEUU4YAvYS6nK1VyDisVEY1KrPF6+H7gQqrl75c/Bu1fLFpQJIdpt xBSuzvdIEcHMTq9wr3UbibO85wTHrYa0v7D6EhGnuCRzLW4Uy948D5Nui8hY5U+5 3lRsbxF61c5vZ1u2OGogmtggrpcourM7SsAYTcU6P8ze42wL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVGth61B4Wj7Wz55Pd9wW/0ls6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNWZmMjk3ZTktMGI5My0z MzZmLWE4MDctNWZkODFmYzEwNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxgJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZMVeljv8LHtyArw23PSxEjPsHejTtrpSPfkehFF7cT0rIjnJ7aVaDU dGvJ86cAbz5yG6RWOeSpIGVDPa4zpHjfBs0lQC7HI4UKw5P/RQ5Np3ObyKUTS9Es tiHV3gHCCnv4vsoFyY+m2gAZO2xPi3Vf/uuaMdJ+IlPCl3uxS+9+ibAxYSoqbiHD xyi1Y1VRmrBIFW7u28syC65cxASH9HBLx42OWTID1gXGKneY7pjljPwsaOQdDoJB vjVwEwTR6eqDx3LbfND6BX8w7xEFRriQkYJsnlJRfZAc8qH27XXQb9cZ0QFTUpf5 u77QjBJ3MB8Dg3G5fF0PFpkb1Z6uZ1s= -----END CERTIFICATE-----Generated at Fri Oct 10 17:34:33 2025 by rpki-client