$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa File: 03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa (raw, json) Hash identifier: hIeGs5WWxHwTaE+KKLWgzhsIfSd+yDfLccb+++ydzNg= Subject key identifier: 16:41:93:F3:33:6D:BB:6D:A2:5A:54:08:B3:BB:7B:D5:38:57:D3:66 Certificate issuer: /CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Certificate serial: 010D0C9F4328584B52C2BA892A837734608844BA Authority key identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa Signing time: Fri 26 Sep 2025 13:56:20 +0000 ROA not before: Fri 26 Sep 2025 13:56:20 +0000 ROA not after: Thu 25 Dec 2025 14:56:20 +0000 asID: 21941 IP address blocks: 198.62.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:c2:ba:89:2a:83:77:34:60:88:44:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Validity Not Before: Sep 26 13:56:20 2025 GMT Not After : Dec 25 14:56:20 2025 GMT Subject: CN=7c075aac-680a-4da6-94a0-87e309ad997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:36:34:bb:2e:71:f2:cb:d4:ab:da:22:fa: 3d:94:59:77:38:5f:ff:b1:3f:23:cf:08:75:cd:d4: 3e:f4:8e:f1:7a:f3:57:be:65:8b:03:7b:3e:9b:e4: 72:bf:81:e4:18:85:77:0e:68:45:69:37:50:e8:07: 23:df:ab:af:d2:64:3b:72:64:5c:fe:f9:97:8e:4c: 2f:4d:ee:dd:fd:c5:a3:70:72:74:58:95:4d:fa:c8: cb:11:80:1f:55:b0:11:62:0e:4f:a8:2d:43:b2:fc: 2e:07:b8:8b:7c:54:94:5d:29:c0:81:a6:c3:9b:92: 77:26:94:9d:25:b5:fd:dc:c2:1d:09:dc:1f:f8:95: 1e:f1:85:c3:f5:e2:e4:3d:4a:58:7a:a3:39:24:5b: 3f:67:a9:a4:69:7e:44:4a:26:6c:0e:cb:52:83:3b: ef:4b:4a:69:80:6f:3b:5b:3d:63:fe:c5:86:d7:74: 69:a1:fc:7b:59:43:58:fd:f8:45:1c:d2:77:26:3d: 85:cf:45:40:9e:18:f1:75:52:63:f6:72:29:1c:fa: 66:6a:6a:80:b7:ee:d6:f1:fd:27:8f:f5:37:fb:3d: 4e:eb:33:7b:88:11:09:eb:52:1e:75:5a:7e:81:36: f1:c7:b5:ed:bf:9e:f2:ac:b6:72:dc:d4:51:66:10: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:93:F3:33:6D:BB:6D:A2:5A:54:08:B3:BB:7B:D5:38:57:D3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl X509v3 Authority Key Identifier: keyid:02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer sbgp-ipAddrBlock: critical IPv4: 198.62.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1a:33:a9:8e:f7:9c:9e:d1:dd:8e:a9:68:0f:28:d2:0b:aa: 40:77:af:6b:cc:01:ab:ca:cf:8c:85:79:d2:2b:b8:c3:55:bb: 19:03:04:2b:01:39:bf:14:db:11:93:b7:d8:fc:04:0f:9a:37: 35:fa:e1:ce:63:23:67:f9:26:f9:80:19:e8:5e:71:9d:1f:96: cf:24:50:08:db:a6:e0:bf:ce:cd:a4:72:a9:90:6a:b1:7c:46: b8:06:19:bc:dd:ae:0c:26:ce:34:7c:d0:d6:a0:3f:46:11:e8: 25:54:29:7c:64:32:dd:01:e9:2d:81:95:83:c8:e3:91:85:c9: 0f:ad:d0:b2:c9:c1:ad:14:58:84:cb:61:08:c4:a2:d8:83:8e: 61:e8:70:98:68:7c:2b:33:a6:bd:f2:e2:fa:f7:bc:39:30:db: 47:cd:ad:3e:ff:58:8a:8b:b7:59:28:ea:4a:8f:8e:6b:db:2e: ad:08:d3:2f:ce:7b:58:f1:4b:9e:2d:ea:50:7e:5a:02:34:78: 58:fd:47:3e:4a:6e:65:07:54:41:ec:61:fd:03:96:be:f5:59: 4a:c0:64:38:60:7b:33:4b:5a:dc:d4:77:be:99:c4:e7:bf:d4: 93:64:1b:97:cf:60:92:c0:40:c1:2b:c9:55:1c:dd:36:72:9e: 44:d9:9d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSwrqJKoN3NGCIRLowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGViZTMzYzAtYTUyYy00MzYyLWFlODAtNGYxZmMxNTky MmExMB4XDTI1MDkyNjEzNTYyMFoXDTI1MTIyNTE0NTYyMFowLzEtMCsGA1UEAxMk N2MwNzVhYWMtNjgwYS00ZGE2LTk0YTAtODdlMzA5YWQ5OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHg2NLsucfLL1KvaIvo9lFl3OF//sT8jzwh1 zdQ+9I7xevNXvmWLA3s+m+Ryv4HkGIV3DmhFaTdQ6Acj36uv0mQ7cmRc/vmXjkwv Te7d/cWjcHJ0WJVN+sjLEYAfVbARYg5PqC1DsvwuB7iLfFSUXSnAgabDm5J3JpSd JbX93MIdCdwf+JUe8YXD9eLkPUpYeqM5JFs/Z6mkaX5ESiZsDstSgzvvS0ppgG87 Wz1j/sWG13Rpofx7WUNY/fhFHNJ3Jj2Fz0VAnhjxdVJj9nIpHPpmamqAt+7W8f0n j/U3+z1O6zN7iBEJ61IedVp+gTbxx7Xtv57yrLZy3NRRZhC4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZBk/MzbbttolpUCLO7e9U4V9NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJl MzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1OTIyYTEvMDNmMTlhNzYtNzRjOS0z Y2QzLWFlMzktZjZjZjg1YTU2NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGViZTMzYzAtYTUyYy00MzYyLWFl ODAtNGYxZmMxNTkyMmExL2RlYmUzM2MwLWE1MmMtNDM2Mi1hZTgwLTRmMWZjMTU5 MjJhMS5jcmwwHwYDVR0jBBgwFoAUAoI5F2CNOITn3mwO8Z9jPlDKbFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFm YzE1OTIyYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxj7vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoaM6mO95ye0d2OqWgPKNILqkB3r2vMAavKz4yFedIruMNVuxkDBCsB Ob8U2xGTt9j8BA+aNzX64c5jI2f5JvmAGehecZ0fls8kUAjbpuC/zs2kcqmQarF8 RrgGGbzdrgwmzjR80NagP0YR6CVUKXxkMt0B6S2BlYPI45GFyQ+t0LLJwa0UWITL YQjEotiDjmHocJhofCszpr3y4vr3vDkw20fNrT7/WIqLt1ko6kqPjmvbLq0I0y/O e1jxS54t6lB+WgI0eFj9Rz5KbmUHVEHsYf0Dlr71WUrAZDhgezNLWtzUd76ZxOe/ 1JNkG5fPYJLAQMEryVUc3TZynkTZncc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:09 2025 by rpki-client