$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa File: a4d572d7-4e1a-3495-99a5-851c0396c090.roa (raw, json) Hash identifier: orQ2e4YuT+nLD9GHELKmhG+XEqTxl27H0iPRbJNqm7Y= Subject key identifier: A7:82:BA:8D:98:2B:7A:A9:5C:8A:2E:D7:F6:46:AA:83:1F:B4:5F:DE Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B21CC1EEC800A4B04C6993D40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1e:ec:80:0a:4b:04:c6:99:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=29b707f2-c492-469a-8910-22985e3681fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:6c:8f:b4:1a:09:9d:2b:13:06:94:4d:c1: 99:87:30:6b:83:be:6a:b1:b3:e3:b0:67:b4:50:fa: 98:85:48:27:1a:27:52:ae:cb:4f:2a:0b:13:6a:bb: 9f:1c:fc:1f:10:b0:dd:a4:f1:a3:85:b0:24:7f:48: f0:b4:b6:f7:71:60:ce:74:93:6a:8e:2a:a7:dd:4b: f0:d2:5d:26:af:d4:fd:71:8d:27:d1:b9:a7:43:2d: eb:e3:d1:83:04:00:c6:fe:1c:26:22:a5:4a:d1:cc: 70:cd:d6:ff:11:dc:6e:01:8d:c6:51:d4:ba:9d:95: 38:2f:ab:bc:b3:c8:3e:57:8b:f2:6a:52:d4:72:d9: 6e:c1:a6:5f:49:cc:a1:9b:bb:2b:cc:c1:25:f9:b4: e0:cf:3c:08:db:1d:ba:d4:8d:63:c8:c3:41:03:f9: c4:46:4b:4f:2d:4b:c6:1f:06:f5:ff:80:88:ec:6b: 63:ec:51:a3:5a:ea:e6:b7:5a:41:39:5a:f9:38:e9: bb:4c:99:17:dd:23:b3:b5:30:e3:48:4a:66:63:4d: fc:e7:b7:d5:eb:76:6f:83:73:35:10:f9:c2:c6:22: ed:04:63:b4:0e:20:eb:a0:6e:f4:33:cf:72:68:26: fc:d6:4e:96:d0:a4:d9:83:82:46:fe:86:2b:20:13: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:82:BA:8D:98:2B:7A:A9:5C:8A:2E:D7:F6:46:AA:83:1F:B4:5F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:06:06:23:3f:78:e9:6b:b6:17:b7:38:f3:56:a4:02:ff:7f: d2:f6:42:94:74:06:0c:01:99:00:40:75:2d:76:c5:fe:d0:f6: b2:4d:66:1f:fc:fe:62:b6:f2:79:1b:b2:9b:d1:bf:8b:c7:68: 94:53:c9:b9:8d:38:03:2b:f0:a4:24:ad:53:65:09:86:58:c8: 60:e5:a6:f6:06:c9:d7:7d:16:18:00:8d:d5:3d:0f:dc:4a:39: a8:b6:09:25:60:34:80:0a:a9:4d:84:61:ab:8f:9b:d5:98:6e: 9f:21:d3:ff:cd:c6:c0:af:82:48:70:c8:5c:87:98:a4:eb:95: e0:4e:9f:92:74:be:75:a2:47:95:f5:0d:f5:53:ea:57:ec:e3: 90:8f:2e:66:92:f4:bc:c5:58:5e:75:79:cf:e0:00:bd:08:8d: e2:b2:ba:4d:f2:dc:68:e0:0f:7b:3d:f5:bc:e4:5c:17:98:1d: d6:40:35:d6:d9:cd:43:71:cc:3d:de:f2:0f:a6:ac:79:79:28: 4c:66:5c:91:4c:47:8f:3e:98:72:42:33:13:65:b9:8a:4f:a5: f3:7d:aa:44:47:75:f2:31:b3:97:db:94:e4:ee:be:0b:f3:85: b7:8a:c8:8c:ad:d2:82:ec:cc:c2:a0:8e:14:59:29:66:84:13: bc:8b:13:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB7sgApLBMaZPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjliNzA3ZjItYzQ5Mi00NjlhLTg5MTAtMjI5ODVlMzY4MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bpsj7QaCZ0rEwaUTcGZhzBrg75qsbPjsGe0 UPqYhUgnGidSrstPKgsTarufHPwfELDdpPGjhbAkf0jwtLb3cWDOdJNqjiqn3Uvw 0l0mr9T9cY0n0bmnQy3r49GDBADG/hwmIqVK0cxwzdb/EdxuAY3GUdS6nZU4L6u8 s8g+V4vyalLUctluwaZfScyhm7srzMEl+bTgzzwI2x261I1jyMNBA/nERktPLUvG Hwb1/4CI7Gtj7FGjWurmt1pBOVr5OOm7TJkX3SOztTDjSEpmY03857fV63Zvg3M1 EPnCxiLtBGO0DiDroG70M89yaCb81k6W0KTZg4JG/oYrIBO8bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeCuo2YK3qpXIou1/ZGqoMftF/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTRkNTcyZDctNGUxYS0z NDk1LTk5YTUtODUxYzAzOTZjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcGBiM/eOlrthe3OPNWpAL/f9L2QpR0BgwBmQBAdS12xf7Q9rJNZh/8 /mK28nkbspvRv4vHaJRTybmNOAMr8KQkrVNlCYZYyGDlpvYGydd9FhgAjdU9D9xK Oai2CSVgNIAKqU2EYauPm9WYbp8h0//NxsCvgkhwyFyHmKTrleBOn5J0vnWiR5X1 DfVT6lfs45CPLmaS9LzFWF51ec/gAL0IjeKyuk3y3GjgD3s99bzkXBeYHdZANdbZ zUNxzD3e8g+mrHl5KExmXJFMR48+mHJCMxNluYpPpfN9qkRHdfIxs5fblOTuvgvz hbeKyIyt0oLszMKgjhRZKWaEE7yLEws= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:20 2025 by rpki-client