$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa File: a43cf8c1-2497-3003-b8de-65129c6513b9.roa (raw, json) Hash identifier: +70uJFjnnUekkNfQVJPCOLFOwBOrbo5CxpsKToRilNw= Subject key identifier: F5:C4:9C:F6:83:DA:E5:CC:81:03:10:85:50:E2:E5:52:EC:45:8B:67 Certificate issuer: /CN=129538be-cccb-40d0-8a7d-ac02bf86976a Certificate serial: 010D0C9F4328584AF9513FF90A1A6A9AC9E65080 Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16509 IP address blocks: 198.212.172.0/22 maxlen: 22 198.212.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3f:f9:0a:1a:6a:9a:c9:e6:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6668fe3a-ab54-437b-8e66-30bcc7e8721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:9c:a5:1c:3e:1f:3e:2a:60:a1:bc:bc:f0: 9c:e9:36:d7:58:51:21:13:1a:07:48:10:3a:fc:c0: bc:c1:9d:5b:1f:60:76:2d:24:19:fb:b8:0e:4c:49: 3d:db:ab:25:1f:b3:a4:a2:2a:3c:1c:11:41:fb:eb: 9b:d3:5c:1d:5f:26:83:38:b0:6c:7e:79:3f:26:85: 6f:f7:df:8b:36:3d:8c:51:31:ec:5d:e4:6f:5c:70: 7b:74:5e:68:d9:ac:95:fa:18:62:1c:97:37:03:00: fb:9a:47:7d:44:9c:a6:3d:a8:35:de:5a:fe:19:6e: 5d:5d:bd:0b:8a:26:2f:68:27:33:dd:03:32:c1:49: f5:ce:e1:61:89:b3:72:0e:11:30:80:a0:20:91:6e: 60:35:fc:75:13:64:dc:7d:46:3b:bd:67:4d:68:e6: 8a:31:6f:c9:3e:2f:0e:66:10:b7:7e:e2:07:ab:77: ef:88:eb:a8:59:44:81:95:f1:22:e3:48:18:e7:6e: 27:ee:f7:0f:e7:1d:a7:d5:9c:52:45:1d:e3:29:5b: be:88:a6:50:ac:e8:5a:02:bd:ca:2f:18:8f:94:82: b6:b9:95:0a:f8:c8:07:8c:41:9f:c9:50:98:67:64: e8:ba:54:b5:8e:32:73:68:f2:a7:0b:3a:09:1a:79: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C4:9C:F6:83:DA:E5:CC:81:03:10:85:50:E2:E5:52:EC:45:8B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl X509v3 Authority Key Identifier: keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer sbgp-ipAddrBlock: critical IPv4: 198.212.172.0-198.212.176.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:62:e9:7c:42:de:0a:dc:ab:77:ef:b3:bb:70:9d:18:78:b5: 23:8f:31:91:04:49:1d:6f:92:2f:b7:2c:35:f5:a0:d1:4b:80: d2:70:3d:37:eb:ae:a5:43:5d:bd:0b:7d:63:66:58:33:a2:93: 0a:13:2b:21:55:b0:cc:8a:93:9a:4d:91:b1:d5:73:e9:92:d5: 22:33:2b:b2:bb:58:24:d5:4f:7b:e5:b9:c8:41:57:dc:4a:a4: e6:15:8c:cb:69:36:23:35:ba:a0:4c:34:a3:db:bf:e4:d2:e4: 92:96:5a:4a:20:08:57:0b:94:1c:cc:85:3f:89:5b:12:72:b0: 9b:02:40:9a:d2:b1:19:10:f6:e1:25:9c:42:38:34:7f:06:46: 92:55:75:3b:0a:94:db:35:4e:dd:87:d9:61:5a:db:e0:a9:99: e2:f0:a0:09:c4:69:a2:35:cb:65:b7:2f:9c:45:af:5e:2a:7b: 16:97:c2:23:2f:04:1a:8d:de:a9:cb:f3:06:3c:48:d7:b5:a3: 50:1f:6e:94:34:d7:bd:46:df:6b:b0:74:83:bb:ff:cb:eb:28: e6:a2:d7:ae:83:13:b5:2a:39:68:28:42:1a:a5:48:2f:b4:f4: ed:96:6c:d0:32:bd:e4:c2:a3:2f:25:ef:2e:63:dd:8d:3d:c2: 78:11:f7:50 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEr5UT/5ChpqmsnmUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI5NTM4YmUtY2NjYi00MGQwLThhN2QtYWMwMmJmODY5 NzZhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjY2OGZlM2EtYWI1NC00MzdiLThlNjYtMzBiY2M3ZTg3MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ycpRw+Hz4qYKG8vPCc6TbXWFEhExoHSBA6 /MC8wZ1bH2B2LSQZ+7gOTEk926slH7Okoio8HBFB++ub01wdXyaDOLBsfnk/JoVv 99+LNj2MUTHsXeRvXHB7dF5o2ayV+hhiHJc3AwD7mkd9RJymPag13lr+GW5dXb0L iiYvaCcz3QMywUn1zuFhibNyDhEwgKAgkW5gNfx1E2TcfUY7vWdNaOaKMW/JPi8O ZhC3fuIHq3fviOuoWUSBlfEi40gY524n7vcP5x2n1ZxSRR3jKVu+iKZQrOhaAr3K LxiPlIK2uZUK+MgHjEGfyVCYZ2ToulS1jjJzaPKnCzoJGnm6CwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPXEnPaD2uXMgQMQhVDi5VLsRYtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1 MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAyYmY4Njk3NmEvYTQzY2Y4YzEtMjQ5Ny0z MDAzLWI4ZGUtNjUxMjljNjUxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTI5NTM4YmUtY2NjYi00MGQwLThh N2QtYWMwMmJmODY5NzZhLzEyOTUzOGJlLWNjY2ItNDBkMC04YTdkLWFjMDJiZjg2 OTc2YS5jcmwwHwYDVR0jBBgwFoAU7Wrg6IA/tLttlWDcjl3wP4sq0GMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAy YmY4Njk3NmEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALG1KwD BADG1LAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAl2LpfELeCtyrd++zu3CdGHi1I48xkQRJHW+SL7csNfWg 0UuA0nA9N+uupUNdvQt9Y2ZYM6KTChMrIVWwzIqTmk2RsdVz6ZLVIjMrsrtYJNVP e+W5yEFX3Eqk5hWMy2k2IzW6oEw0o9u/5NLkkpZaSiAIVwuUHMyFP4lbEnKwmwJA mtKxGRD24SWcQjg0fwZGklV1OwqU2zVO3YfZYVrb4KmZ4vCgCcRpojXLZbcvnEWv Xip7FpfCIy8EGo3eqcvzBjxI17WjUB9ulDTXvUbfa7B0g7v/y+so5qLXroMTtSo5 aChCGqVIL7T07ZZs0DK95MKjLyXvLmPdjT3CeBH3UA== -----END CERTIFICATE-----Generated at Tue Aug 26 09:15:25 2025 by rpki-client