$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa File: 538eaa57-d298-3f25-8222-de9e3819f175.roa (raw, json) Hash identifier: be0U4SAq+RNuvDEmBDZot6nUf4wXthHy0ka0CKin6Gk= Subject key identifier: 9E:53:39:96:F9:FC:D5:DC:92:BE:36:59:E6:3E:D6:58:AE:8D:16:8C Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Certificate serial: 010D0C9F4328584B0FAB969D9D0C04A5D6A79910 Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16796 IP address blocks: 198.169.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:ab:96:9d:9d:0c:04:a5:d6:a7:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=51182a94-e39e-4426-8fb2-5e9420e5e07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:ec:31:c4:b4:e1:f1:f3:da:cb:a0:66:9d: 91:81:87:fe:f7:e7:3d:f2:9e:36:e9:ec:45:9c:9c: 31:5b:e0:33:aa:97:de:72:c0:6f:63:dc:50:97:49: 8b:f3:5a:e3:cf:e2:d9:66:eb:1c:cb:4f:67:60:01: f7:7d:ed:e3:c5:7a:87:20:b5:e9:ef:2a:de:56:6d: 77:c3:67:d0:b0:57:44:c5:0a:8d:f6:a0:18:69:d9: f5:1e:eb:32:4b:93:d2:be:07:01:30:6f:bb:6b:aa: b0:22:a8:4f:7c:61:54:84:f4:f2:ee:bc:76:f2:d2: ae:63:46:82:e9:39:a5:e5:46:6e:a7:e3:58:b7:98: 0c:c7:b2:80:d7:83:e2:d2:75:06:df:b8:23:af:1b: 81:14:17:a7:f2:75:6f:36:1a:64:82:6c:00:a7:22: 6c:2d:e8:52:2d:1c:cd:c2:fb:73:8b:ce:d4:b7:55: fa:34:e1:7b:6b:e2:d9:0a:e3:1c:f8:4c:29:11:ca: 33:97:f7:66:d7:54:49:44:7d:b9:43:d3:a2:ef:0e: e6:c9:f7:3c:61:c2:c1:40:32:fd:10:8f:d4:10:b9: 06:ab:49:5e:b3:8f:58:85:ae:64:cd:50:18:90:51: f4:33:53:c2:9d:94:14:41:b1:40:be:96:5f:af:a6: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:53:39:96:F9:FC:D5:DC:92:BE:36:59:E6:3E:D6:58:AE:8D:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl X509v3 Authority Key Identifier: keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer sbgp-ipAddrBlock: critical IPv4: 198.169.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:41:92:7c:e7:cb:4d:84:16:e4:2a:72:73:a2:34:92:cc:98: 6d:51:c2:e5:57:87:54:18:56:17:a9:60:39:0b:ca:fa:6e:8c: dd:5e:72:ca:f5:9a:ed:f1:b3:ad:58:8e:06:86:fc:98:0b:c4: d0:be:6a:d1:36:9e:0c:fd:33:9c:0c:1d:73:49:42:dc:2c:9a: 03:30:51:5a:fd:bf:7b:87:e0:cc:d8:58:32:3e:e6:01:d6:33: d5:e2:d4:e2:64:19:2d:61:e2:ce:68:eb:a7:db:0c:29:44:c6: 31:14:31:9c:19:9f:c3:19:a8:0f:37:4b:2a:39:22:0b:57:a2: 27:94:7a:7c:bc:8b:1c:8b:6d:0a:4f:ae:3f:6c:2a:60:4c:61: 13:86:6d:37:fd:81:18:b6:a3:80:0c:c9:a6:1f:dd:5b:64:a0: 70:4f:16:a3:fb:33:ec:27:17:40:65:19:40:9e:bc:ec:78:08: 51:f4:96:e9:50:1f:f2:0b:26:49:ae:92:c2:33:be:00:eb:78: e1:a1:37:cc:14:29:b3:f4:0e:88:10:57:e2:3d:07:d2:bb:2f: e6:93:3b:45:30:e1:49:e7:9c:8f:31:c2:d8:27:70:38:6c:03: e5:bf:fd:9b:cc:32:ae:e2:18:c8:17:7c:be:34:43:bb:03:0f: 1b:08:c4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPq5adnQwEpdanmRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiMDRiMjAtMDlkMy00Y2Y5LThkZDAtYzQ1Y2U1OTg5 OWQ4MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTExODJhOTQtZTM5ZS00NDI2LThmYjItNWU5NDIwZTVlMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQzsMcS04fHz2sugZp2RgYf+9+c98p426exF nJwxW+AzqpfecsBvY9xQl0mL81rjz+LZZuscy09nYAH3fe3jxXqHILXp7yreVm13 w2fQsFdExQqN9qAYadn1HusyS5PSvgcBMG+7a6qwIqhPfGFUhPTy7rx28tKuY0aC 6Tml5UZup+NYt5gMx7KA14Pi0nUG37gjrxuBFBen8nVvNhpkgmwApyJsLehSLRzN wvtzi87Ut1X6NOF7a+LZCuMc+EwpEcozl/dm11RJRH25Q9Oi7w7myfc8YcLBQDL9 EI/UELkGq0les49Yha5kzVAYkFH0M1PCnZQUQbFAvpZfr6ZgVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5TOZb5/NXckr42WeY+1liujRaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIw NGIyMC0wOWQzLTRjZjktOGRkMC1jNDVjZTU5ODk5ZDgvNTM4ZWFhNTctZDI5OC0z ZjI1LTgyMjItZGU5ZTM4MTlmMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRiMDRiMjAtMDlkMy00Y2Y5LThk ZDAtYzQ1Y2U1OTg5OWQ4L2U0YjA0YjIwLTA5ZDMtNGNmOS04ZGQwLWM0NWNlNTk4 OTlkOC5jcmwwHwYDVR0jBBgwFoAU2paC1lH+07XgQc9x1uafrOAumQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIwNGIyMC0wOWQzLTRjZjktOGRkMC1jNDVj ZTU5ODk5ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpBknzny02EFuQqcnOiNJLMmG1RwuVXh1QYVhepYDkLyvpujN1ecsr1 mu3xs61YjgaG/JgLxNC+atE2ngz9M5wMHXNJQtwsmgMwUVr9v3uH4MzYWDI+5gHW M9Xi1OJkGS1h4s5o66fbDClExjEUMZwZn8MZqA83Syo5IgtXoieUeny8ixyLbQpP rj9sKmBMYROGbTf9gRi2o4AMyaYf3VtkoHBPFqP7M+wnF0BlGUCevOx4CFH0lulQ H/ILJkmuksIzvgDreOGhN8wUKbP0DogQV+I9B9K7L+aTO0Uw4UnnnI8xwtgncDhs A+W//ZvMMq7iGMgXfL40Q7sDDxsIxEA= -----END CERTIFICATE-----Generated at Sat Oct 11 09:16:55 2025 by rpki-client