$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa File: f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa (raw, json) Hash identifier: ycS5K+l6orjEzI1x7RAMehuflinhKxf8rv0gCnC3ek8= Subject key identifier: 7A:89:20:7C:FB:45:88:8C:BE:CD:BA:F5:03:35:0B:EA:D8:48:A2:7E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806C9BF4979E0ED90649990 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c9:bf:49:79:e0:ed:90:64:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=0aebd0ff-5866-4735-9b22-45675b38af59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:f7:4c:5e:b8:37:4a:9c:71:24:26:9d:43: b9:6b:9e:ce:6f:e9:f6:1c:d7:61:71:64:1f:d3:9e: 9d:54:54:a1:46:52:9f:d1:75:bb:b8:01:de:6a:b0: 14:72:08:01:ce:b3:0c:ad:42:33:05:2e:82:9f:a3: 49:ec:20:0f:0d:67:5b:d2:09:52:ac:ed:6b:04:63: 9e:2a:7b:d9:37:7d:43:84:76:6f:4b:a6:a2:79:ad: fa:23:50:ae:f6:48:0a:cd:a0:48:e0:a6:21:2c:98: 1d:cd:e1:b4:83:97:7b:6e:30:32:dc:18:c1:9a:5b: 38:cc:b9:71:07:4a:36:73:0c:47:b9:3b:00:6e:97: 34:3b:89:41:97:a4:c4:95:36:00:6e:46:c4:9c:2d: b2:2b:54:66:2b:00:82:56:7d:3a:d6:8b:42:56:76: 52:e1:db:11:c5:42:c1:5c:d7:61:d7:cd:6e:f8:d4: 6e:29:3b:7c:9c:9e:ec:e3:aa:cd:a6:3d:c1:a8:2d: ff:c9:c0:b2:89:f0:62:85:0b:90:b2:a1:1c:2b:93: a3:de:f5:6a:f3:0c:bc:72:0f:cb:26:ca:71:f1:22: a6:cd:61:d7:bf:d8:64:63:d2:1a:0f:fd:d4:2e:03: 56:ac:d0:86:a4:44:85:92:02:4d:65:a9:cb:23:84: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:89:20:7C:FB:45:88:8C:BE:CD:BA:F5:03:35:0B:EA:D8:48:A2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7e:58:e5:c9:aa:99:dd:18:1f:14:fc:6d:af:a3:aa:ca:5b: c5:bb:5e:9f:59:af:1d:88:6a:1e:7a:62:94:57:3b:1b:8e:6b: 79:ea:3a:90:a0:65:03:cf:d5:0d:74:09:8e:bb:8e:a4:21:78: eb:ce:b6:4b:c2:28:46:e9:f0:74:8c:43:93:58:f8:26:51:50: 35:3d:ec:66:88:aa:6e:2c:05:f6:dc:a0:d0:ad:4d:89:29:00: 07:22:9e:17:5b:b9:56:5e:02:75:bd:d6:5f:94:5c:4a:8d:fc: b1:58:0c:9a:96:6a:fc:55:3e:c0:e3:0d:e1:72:4d:a3:99:6b: eb:eb:d5:a7:85:7c:b4:67:91:93:e5:c5:0a:c3:e8:db:f7:bf: 57:39:a3:6c:03:ba:35:e2:4b:d7:cc:d3:bc:a2:96:42:8a:82: 7b:02:b0:45:53:e5:b9:ad:ec:e0:78:ab:9a:42:b3:ff:38:5e: 99:60:27:39:27:4c:86:9b:d1:55:e6:dd:82:01:6a:1e:82:b9: 4b:bb:a1:80:2a:88:95:4a:c9:c8:5c:12:a5:a5:77:df:50:70: e9:8d:ac:ee:f5:96:96:0b:6f:bd:ae:e1:f5:02:9a:a3:b8:90: f4:57:01:05:48:b3:96:fd:93:7f:4b:fa:e9:77:ce:d9:d6:42: ea:a3:f2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsm/SXng7ZBkmZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGFlYmQwZmYtNTg2Ni00NzM1LTliMjItNDU2NzViMzhhZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GT3TF64N0qccSQmnUO5a57Ob+n2HNdhcWQf 056dVFShRlKf0XW7uAHearAUcggBzrMMrUIzBS6Cn6NJ7CAPDWdb0glSrO1rBGOe KnvZN31DhHZvS6aiea36I1Cu9kgKzaBI4KYhLJgdzeG0g5d7bjAy3BjBmls4zLlx B0o2cwxHuTsAbpc0O4lBl6TElTYAbkbEnC2yK1RmKwCCVn061otCVnZS4dsRxULB XNdh181u+NRuKTt8nJ7s46rNpj3BqC3/ycCyifBihQuQsqEcK5Oj3vVq8wy8cg/L Jspx8SKmzWHXv9hkY9IaD/3ULgNWrNCGpESFkgJNZanLI4RvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqJIHz7RYiMvs269QM1C+rYSKJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZjFhNWQ4ZjYtZDM2Yi0z MjkxLTgwNTUtZjg4ZDY0MDU3ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt+WOXJqpndGB8U/G2vo6rKW8W7Xp9Zrx2Iah56YpRXOxuOa3nqOpCg ZQPP1Q10CY67jqQheOvOtkvCKEbp8HSMQ5NY+CZRUDU97GaIqm4sBfbcoNCtTYkp AAcinhdbuVZeAnW91l+UXEqN/LFYDJqWavxVPsDjDeFyTaOZa+vr1aeFfLRnkZPl xQrD6Nv3v1c5o2wDujXiS9fM07yilkKKgnsCsEVT5bmt7OB4q5pCs/84XplgJzkn TIab0VXm3YIBah6CuUu7oYAqiJVKychcEqWld99QcOmNrO71lpYLb72u4fUCmqO4 kPRXAQVIs5b9k39L+ul3ztnWQuqj8gU= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:37 2025 by rpki-client