$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa File: 1bb70b65-5f1d-3615-810a-87635980935f.roa (raw, json) Hash identifier: mt5dMeZkH9Paebrepi5E4iWLoINduiE6CVcDkhyLnVo= Subject key identifier: CD:02:4C:B6:94:99:3B:FD:FB:37:51:24:ED:0A:41:B6:D3:7D:21:3E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B21CC1F02C239D87A22CB3E80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.255.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1f:02:c2:39:d8:7a:22:cb:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=3a21bb58-6834-4f9e-87fa-bdc5a097a735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:61:51:d9:3f:c5:2c:10:81:91:8a:46:e5: 92:00:72:55:d7:d0:60:1e:42:b6:5b:2f:62:7b:8f: dc:af:aa:e3:1d:f0:90:5d:77:40:34:53:f9:b3:20: 67:5c:47:76:9a:03:45:e4:e1:20:14:1d:64:65:e6: 28:df:6c:d6:82:fe:3b:99:51:0a:22:0a:2f:1d:ea: a6:c4:c9:a3:ae:0a:79:61:cc:4f:2b:fc:eb:30:ff: d9:3a:de:ce:ae:5e:20:8f:8a:eb:83:3a:a0:c1:19: 1f:c1:42:46:e2:5a:4a:ab:24:47:ce:52:47:79:7f: 53:d6:dc:83:b2:df:f6:61:02:4b:63:55:72:1a:7a: f3:69:36:99:17:ee:ef:be:d4:47:25:db:01:e3:90: 6f:21:7b:2d:d9:f4:3c:f2:54:b6:2c:af:e4:be:4a: a7:7b:17:91:84:14:fb:fa:dc:fd:3c:5c:a5:12:1f: f1:58:0d:57:fe:a9:6a:30:6c:7b:dc:d6:2b:42:65: 54:09:01:6c:98:c1:3e:ff:10:68:fe:d1:5f:ed:97: 99:2d:35:24:55:53:eb:98:4f:db:3f:7d:6a:b0:25: 4a:ee:b8:d8:89:b7:18:72:a7:8f:d0:73:a6:e9:28: 03:23:0b:39:d3:a6:2a:9c:8a:f6:21:2d:93:05:19: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:02:4C:B6:94:99:3B:FD:FB:37:51:24:ED:0A:41:B6:D3:7D:21:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1bb70b65-5f1d-3615-810a-87635980935f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c0:12:6a:58:46:ac:eb:19:f5:c8:0a:5a:cb:a3:70:35:c3: b2:9c:1a:cb:65:c8:18:70:74:1b:95:5e:bd:cd:c0:4d:cd:0b: b4:ff:5b:e7:9e:18:97:9a:21:92:a3:8c:ca:02:cb:14:b9:5b: f6:ce:51:73:1a:db:3f:fd:b8:06:97:7e:37:ca:d3:bd:21:8d: 03:48:ef:e6:0b:1a:1a:f8:d7:2a:20:08:f1:6c:19:77:0d:1b: 18:e0:79:5a:d1:7b:46:73:e8:e1:2b:3f:0e:39:32:51:bc:92: 55:b1:1f:a5:ad:72:02:9a:1d:ec:2b:c8:07:38:de:c3:37:60: de:c4:a9:ee:53:4f:b0:38:57:c8:97:80:a9:e8:d2:80:0d:b2: 1d:90:6e:db:c0:34:68:72:61:fc:58:27:fd:fe:23:4d:23:7c: ad:5e:0e:84:96:93:6d:2e:9d:4f:f8:ea:5e:fb:5e:24:c6:bc: ae:7c:98:cb:2a:d6:a2:16:9b:cf:a7:ca:46:45:50:4d:3d:fc: 4f:fb:24:4b:e9:4d:d8:e3:76:41:c4:a9:cc:55:de:df:f1:1f: 4d:04:75:28:5a:aa:5d:96:be:95:18:8c:29:d7:c1:f6:67:1b: f2:69:c4:ac:01:49:82:c1:8b:87:9a:93:04:ff:a1:c5:4d:3f: 18:f9:96:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB8CwjnYeiLLPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk M2EyMWJiNTgtNjgzNC00ZjllLTg3ZmEtYmRjNWEwOTdhNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlehhUdk/xSwQgZGKRuWSAHJV19BgHkK2Wy9i e4/cr6rjHfCQXXdANFP5syBnXEd2mgNF5OEgFB1kZeYo32zWgv47mVEKIgovHeqm xMmjrgp5YcxPK/zrMP/ZOt7Orl4gj4rrgzqgwRkfwUJG4lpKqyRHzlJHeX9T1tyD st/2YQJLY1VyGnrzaTaZF+7vvtRHJdsB45BvIXst2fQ88lS2LK/kvkqnexeRhBT7 +tz9PFylEh/xWA1X/qlqMGx73NYrQmVUCQFsmME+/xBo/tFf7ZeZLTUkVVPrmE/b P31qsCVK7rjYibcYcqeP0HOm6SgDIws506YqnIr2IS2TBRlDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0CTLaUmTv9+zdRJO0KQbbTfSE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWJiNzBiNjUtNWYxZC0z NjE1LTgxMGEtODc2MzU5ODA5MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/AEmpYRqzrGfXIClrLo3A1w7KcGstlyBhwdBuVXr3NwE3NC7T/W+ee GJeaIZKjjMoCyxS5W/bOUXMa2z/9uAaXfjfK070hjQNI7+YLGhr41yogCPFsGXcN GxjgeVrRe0Zz6OErPw45MlG8klWxH6WtcgKaHewryAc43sM3YN7Eqe5TT7A4V8iX gKno0oANsh2QbtvANGhyYfxYJ/3+I00jfK1eDoSWk20unU/46l77XiTGvK58mMsq 1qIWm8+nykZFUE09/E/7JEvpTdjjdkHEqcxV3t/xH00EdShaql2WvpUYjCnXwfZn G/JpxKwBSYLBi4eakwT/ocVNPxj5loE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:30 2025 by rpki-client