$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa File: 1caa057a-5dd5-331e-920c-18a8bc208d96.roa (raw, json) Hash identifier: jrHAFrzXJWSHfPGwwR4SeUjiTWXvTyG98iV/lGR+TqY= Subject key identifier: E3:D7:77:0F:7D:46:83:E2:65:A9:32:B7:90:AD:61:EF:AC:B2:10:28 Certificate issuer: /CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac Certificate serial: 010D0C9F4328584B59A1E1400DF4BC3983DD2000 Authority key identifier: 8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 27623 IP address blocks: 198.161.203.0/24 maxlen: 24 2620:5c:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:e1:40:0d:f4:bc:39:83:dd:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=5ecb66d9-0602-442c-bf12-0044b1028863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:98:7a:38:34:eb:31:ac:db:ef:d2:61:9b: 55:ef:df:92:cf:11:e0:a6:88:a9:87:40:d0:c9:60: 94:a6:f5:00:fd:6b:d9:91:b7:44:64:28:40:cb:8a: 8f:cb:0c:0f:e0:7c:a1:e0:bc:58:d2:1c:21:e4:e3: 20:99:ad:b5:75:40:c4:60:9e:ac:93:3c:0e:45:3f: 01:42:8a:62:d8:9e:a4:ab:75:39:84:18:4b:b5:4b: 25:83:86:b0:f8:5a:62:18:67:2a:5a:59:f1:ef:85: a4:01:24:51:26:1c:ff:80:fe:37:aa:18:31:ab:d9: 0a:19:ae:ad:86:18:45:f8:a8:e5:de:33:03:ab:08: b9:1f:8d:e0:2e:cc:49:67:ff:49:4f:db:4c:94:6f: bf:18:99:cd:cb:2e:51:61:d0:99:35:93:b4:ba:af: 7a:6d:6b:9e:34:68:a3:6d:df:80:2f:bf:5c:5e:f3: 34:52:a0:f3:d5:a4:aa:8b:9b:c8:1d:14:50:b0:a0: 02:27:0c:51:d7:4f:8e:cd:5b:46:b3:62:75:35:9e: 00:3e:d0:de:d6:f6:c3:cf:42:65:07:9c:a0:36:76: 13:56:c9:2f:aa:80:86:02:2a:c6:9d:01:dd:50:65: b5:fd:0e:87:2f:fd:42:c9:fb:ec:29:9b:6b:48:7b: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D7:77:0F:7D:46:83:E2:65:A9:32:B7:90:AD:61:EF:AC:B2:10:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl X509v3 Authority Key Identifier: keyid:8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer sbgp-ipAddrBlock: critical IPv4: 198.161.203.0/24 IPv6: 2620:5c:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e9:83:81:3f:d3:25:06:8d:96:1a:46:28:e8:1f:91:d0:fc: 0b:a5:88:d3:36:71:5c:b7:24:8c:3f:c4:11:9d:52:4b:b3:a2: aa:85:3b:9f:f2:a8:01:e7:fc:bb:b8:a9:f9:40:9e:ce:b0:83: 5b:c8:1d:dc:9d:ff:e9:6b:9e:2b:38:16:34:22:73:8a:7d:41: bf:71:16:0b:96:58:c0:6a:eb:40:b6:04:f1:9d:5f:fe:55:f6: 47:95:da:e4:65:cb:b7:2b:32:5e:8c:ed:37:4e:8b:77:36:2b: 74:0a:54:64:d5:ad:c2:43:e6:c7:bc:5d:9f:78:94:01:de:1d: ad:01:c3:e9:22:f9:ab:a8:96:49:b7:32:7d:57:d8:df:03:6e: ef:6e:00:2b:1c:2a:6e:c4:47:35:bf:4f:49:9b:80:e8:ee:86: e8:8f:cd:5a:52:2d:f5:55:a1:5b:17:32:92:d8:95:65:bf:4a: 24:90:46:6e:66:33:2d:61:f4:0f:ad:9c:5b:8e:55:3c:56:44: 38:b5:a2:aa:e5:91:86:69:b1:90:e7:89:fa:8c:1c:f5:40:e7: 2b:5c:bb:68:0d:03:07:84:0b:cf:62:e6:3c:c8:70:75:e4:7b: 2c:ae:94:75:cd:f3:d5:fd:de:28:6b:6e:25:ae:62:d4:99:c6: 70:0e:9a:6b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtZoeFADfS8OYPdIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUwOGQyZjYtNDE0OS00MTE1LWEwZjEtODFlMjRmZjU1 Y2FjMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NWVjYjY2ZDktMDYwMi00NDJjLWJmMTItMDA0NGIxMDI4ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnuYejg06zGs2+/SYZtV79+SzxHgpoiph0DQ yWCUpvUA/WvZkbdEZChAy4qPywwP4Hyh4LxY0hwh5OMgma21dUDEYJ6skzwORT8B Qopi2J6kq3U5hBhLtUslg4aw+FpiGGcqWlnx74WkASRRJhz/gP43qhgxq9kKGa6t hhhF+Kjl3jMDqwi5H43gLsxJZ/9JT9tMlG+/GJnNyy5RYdCZNZO0uq96bWueNGij bd+AL79cXvM0UqDz1aSqi5vIHRRQsKACJwxR10+OzVtGs2J1NZ4APtDe1vbDz0Jl B5ygNnYTVskvqoCGAirGnQHdUGW1/Q6HL/1CyfvsKZtrSHvfxwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOPXdw99RoPiZakyt5CtYe+sshAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZTA4 ZDJmNi00MTQ5LTQxMTUtYTBmMS04MWUyNGZmNTVjYWMvMWNhYTA1N2EtNWRkNS0z MzFlLTkyMGMtMThhOGJjMjA4ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmUwOGQyZjYtNDE0OS00MTE1LWEw ZjEtODFlMjRmZjU1Y2FjLzJlMDhkMmY2LTQxNDktNDExNS1hMGYxLTgxZTI0ZmY1 NWNhYy5jcmwwHwYDVR0jBBgwFoAUjX3/ztCmJuMQ6JbDsdLUVLp6KkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZTA4ZDJmNi00MTQ5LTQxMTUtYTBmMS04MWUy NGZmNTVjYWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxqHLMA8E AgACMAkDBwAmIABcYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgOmDgT/TJQaNlhpGKOgfkdD8C6WI0zZx XLckjD/EEZ1SS7OiqoU7n/KoAef8u7ip+UCezrCDW8gd3J3/6WueKzgWNCJzin1B v3EWC5ZYwGrrQLYE8Z1f/lX2R5Xa5GXLtysyXoztN06LdzYrdApUZNWtwkPmx7xd n3iUAd4drQHD6SL5q6iWSbcyfVfY3wNu724AKxwqbsRHNb9PSZuA6O6G6I/NWlIt 9VWhWxcyktiVZb9KJJBGbmYzLWH0D62cW45VPFZEOLWiquWRhmmxkOeJ+owc9UDn K1y7aA0DB4QLz2LmPMhwdeR7LK6Udc3z1f3eKGtuJa5i1JnGcA6aaw== -----END CERTIFICATE-----Generated at Wed Oct 8 21:16:55 2025 by rpki-client