$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/bc18b120-ad35-32f5-8eec-ecea5f008965.roa File: bc18b120-ad35-32f5-8eec-ecea5f008965.roa (raw, json) Hash identifier: qLk3vA1rRogGgQz0Gag+LiZxRdIxs7O3J0i3kwkhw8U= Subject key identifier: 12:7C:81:A4:58:3F:84:E9:53:86:9D:3B:B8:51:3D:99:E4:3A:09:36 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B2FC183EDFE6B0D00C9531180 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/bc18b120-ad35-32f5-8eec-ecea5f008965.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 198.154.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:83:ed:fe:6b:0d:00:c9:53:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=44bd52ed-a0c4-47e4-b763-5e12502baee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:04:23:17:58:1c:8c:fe:58:18:f7:14:06: a9:50:c8:78:b7:93:75:01:ee:63:7c:85:16:62:2b: 9e:5f:82:4e:fb:b9:84:03:72:e1:78:a6:0b:1a:d0: 54:bb:71:14:ec:67:54:01:43:ac:ff:8d:4e:98:b2: a0:65:3a:ee:7a:95:48:f6:b9:ac:5f:9b:15:2d:0b: af:f7:5e:51:77:fc:5d:57:b3:f3:e8:f5:b6:bb:87: f4:ee:db:ab:a2:af:63:4e:b4:42:88:69:a1:b7:43: b2:2c:d1:a6:4e:ef:2b:6f:4b:e4:fa:07:19:02:27: bb:e8:6d:af:4b:d7:65:a3:5e:4e:30:15:10:0c:5d: 11:aa:31:54:18:83:fb:ca:ac:ee:f5:37:a9:58:85: ec:57:13:93:e3:70:12:2d:48:24:72:99:88:2d:1b: db:65:5f:e3:a9:1e:f3:11:ad:18:8f:f3:4c:84:37: 1a:c5:fb:ed:d6:a4:7e:7a:77:c5:80:08:05:33:ec: c9:48:3d:10:5d:22:d3:6d:04:e1:78:fe:66:70:31: c1:13:11:f8:99:82:6f:41:a3:f6:43:52:8f:af:0f: 5b:81:6b:1b:af:dc:80:a5:5b:04:74:4e:29:85:9b: 44:0a:79:9f:99:be:1d:11:3f:25:4a:7d:ab:26:38: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:81:A4:58:3F:84:E9:53:86:9D:3B:B8:51:3D:99:E4:3A:09:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/bc18b120-ad35-32f5-8eec-ecea5f008965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 198.154.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:01:51:56:d0:3c:a3:d3:06:c8:61:02:2f:5a:5d:9a:f2:2b: 60:de:f6:da:68:98:db:c5:73:0b:37:3f:71:8b:4d:9c:cd:88: 3d:11:bb:2a:93:72:7b:1d:f6:0c:bf:7f:42:00:fb:35:f4:21: 9b:90:c4:b4:b5:33:3a:b4:a4:f4:7d:04:fa:b4:e7:b6:8d:bb: b8:91:65:a3:c9:e6:25:55:71:c2:c3:27:42:77:39:1a:4d:c2: f4:19:65:12:01:44:72:82:d0:cb:7c:f3:18:f3:80:d5:46:7f: 4a:19:4e:56:bb:6d:49:ea:45:c3:a0:41:99:85:db:3c:f0:05: 64:fc:e2:b4:1d:bf:8e:33:54:98:f1:95:7a:9f:5e:40:6c:f6: 90:68:cc:69:f6:07:d2:74:55:74:db:bc:8c:fc:f0:12:d8:b2: 3d:62:e6:38:68:b7:a9:7b:82:29:57:06:29:30:13:8d:29:33: 23:f6:42:85:de:2b:49:ae:dc:ed:42:09:e7:6e:ee:13:28:dc: 10:e0:a6:60:d1:6b:2a:33:b4:f6:6d:8a:19:e1:d0:f3:66:a9: cd:31:b8:f7:b1:b1:5b:93:be:0a:61:c8:ef:56:49:d4:15:9e: a9:4b:ff:69:19:2d:3b:aa:6d:54:af:38:8d:0b:4b:c3:96:65: 41:1f:7f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYPt/msNAMlTEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NDRiZDUyZWQtYTBjNC00N2U0LWI3NjMtNWUxMjUwMmJhZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0EIxdYHIz+WBj3FAapUMh4t5N1Ae5jfIUW YiueX4JO+7mEA3LheKYLGtBUu3EU7GdUAUOs/41OmLKgZTruepVI9rmsX5sVLQuv 915Rd/xdV7Pz6PW2u4f07turoq9jTrRCiGmht0OyLNGmTu8rb0vk+gcZAie76G2v S9dlo15OMBUQDF0RqjFUGIP7yqzu9TepWIXsVxOT43ASLUgkcpmILRvbZV/jqR7z Ea0Yj/NMhDcaxfvt1qR+enfFgAgFM+zJSD0QXSLTbQTheP5mcDHBExH4mYJvQaP2 Q1KPrw9bgWsbr9yApVsEdE4phZtECnmfmb4dET8lSn2rJjjqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ8gaRYP4TpU4adO7hRPZnkOgk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYmMxOGIxMjAtYWQzNS0z MmY1LThlZWMtZWNlYTVmMDA4OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcBUVbQPKPTBshhAi9aXZryK2De9tpomNvFcws3P3GLTZzNiD0RuyqT cnsd9gy/f0IA+zX0IZuQxLS1Mzq0pPR9BPq057aNu7iRZaPJ5iVVccLDJ0J3ORpN wvQZZRIBRHKC0Mt88xjzgNVGf0oZTla7bUnqRcOgQZmF2zzwBWT84rQdv44zVJjx lXqfXkBs9pBozGn2B9J0VXTbvIz88BLYsj1i5jhot6l7gilXBikwE40pMyP2QoXe K0mu3O1CCedu7hMo3BDgpmDRayoztPZtihnh0PNmqc0xuPexsVuTvgphyO9WSdQV nqlL/2kZLTuqbVSvOI0LS8OWZUEffzA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:57 2025 by rpki-client