$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa File: fff7a9df-13dd-30bd-8174-9e2a97311552.roa (raw, json) Hash identifier: 6GFvRsZrayTTNLxxscweH61+ZvlwlDY2suL4ZkCE7uo= Subject key identifier: 95:78:77:8C:43:1A:69:33:7D:4D:34:E4:01:49:71:A6:58:A6:2E:5C Certificate issuer: /CN=129538be-cccb-40d0-8a7d-ac02bf86976a Certificate serial: 010D0C9F4328584AF9513BD5BF588B3F269FA580 Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 14618 IP address blocks: 198.212.172.0/22 maxlen: 22 198.212.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3b:d5:bf:58:8b:3f:26:9f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=ff50e1a7-6d8b-483b-85d3-62a8c5b9feaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:28:0a:20:cf:38:40:4d:80:da:0f:b6:82: db:9a:d6:c3:98:d3:28:94:af:c3:b4:3d:99:70:1c: 20:2d:c3:96:c8:0b:a8:7e:1c:6f:cf:9c:31:df:cf: 77:cd:61:19:2f:8e:7c:e9:c5:c8:74:a5:1a:9e:75: 87:b5:6c:23:e9:fd:08:23:30:ee:6c:76:ce:e8:32: 14:02:6a:95:89:a6:ba:15:92:6e:82:aa:fc:08:cc: 01:2d:0e:31:cd:f4:61:6c:64:34:69:e7:01:77:20: 27:16:73:2f:cf:ef:97:1d:43:0f:78:13:e9:7d:5f: a1:12:15:8b:ae:9a:65:b8:96:02:2a:ea:a7:18:10: e1:e5:59:4a:e5:f9:01:40:3d:0b:fd:22:df:ce:fd: 7b:6e:80:b6:ab:71:64:87:4d:d9:85:3f:0d:b4:23: 39:0e:84:b3:37:6a:39:ab:99:f9:d0:a5:58:fb:ef: fb:7f:4c:8b:05:c4:d2:ea:3e:ef:39:cd:46:6c:64: 92:3b:00:08:97:69:fc:c3:dc:94:10:d5:9e:1b:9b: a9:a8:1e:62:bd:fb:62:36:07:1d:18:cb:74:b7:d4: 40:06:b2:14:3d:43:52:23:98:63:8b:43:de:66:c5: cb:b3:3c:d6:b8:28:df:10:48:75:66:4a:51:45:fa: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:77:8C:43:1A:69:33:7D:4D:34:E4:01:49:71:A6:58:A6:2E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/fff7a9df-13dd-30bd-8174-9e2a97311552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl X509v3 Authority Key Identifier: keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer sbgp-ipAddrBlock: critical IPv4: 198.212.172.0-198.212.176.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:03:f2:9b:f5:af:9a:04:bb:a4:9a:a8:40:ad:24:d7:1c:9a: 88:59:9d:7f:72:9d:6c:56:ca:5a:eb:5d:60:11:44:ad:12:a5: b4:e0:94:81:ca:3c:7a:8c:f6:7f:a6:59:75:ae:ee:58:ce:51: db:9c:54:33:52:a4:fc:0e:f3:b7:d3:4d:8b:c5:c4:4b:93:7a: ef:bd:81:22:d2:df:f1:fa:31:14:b8:33:e4:4d:25:ba:a3:3f: f8:16:40:a9:e3:7b:ef:63:14:1c:10:53:70:1c:0c:32:a3:01: b1:97:2a:35:8c:27:1e:73:a5:4f:3b:5a:29:be:1f:40:07:13: 81:b8:fb:2a:af:5c:3e:9c:fe:b4:b3:18:c7:25:03:1c:6c:9f: db:8c:aa:ea:4f:a0:49:b7:7a:35:ea:28:77:79:7d:95:37:70: 6b:19:b2:2d:c7:47:6e:36:d0:2c:5c:08:da:f1:ae:cc:79:fb: 71:ac:0d:d3:bf:47:36:26:1a:61:30:b4:fe:be:7f:4e:b9:b5: 06:f3:80:c6:4a:e9:7f:41:81:78:74:ec:c7:70:12:d5:76:b5: 59:a3:cd:49:eb:c5:91:5b:1f:1f:4a:4e:72:5f:64:07:bf:02: 8e:a4:e4:48:17:d7:b7:15:df:a6:4f:9a:34:57:73:de:68:e2: f7:16:b6:61 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEr5UTvVv1iLPyafpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI5NTM4YmUtY2NjYi00MGQwLThhN2QtYWMwMmJmODY5 NzZhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmY1MGUxYTctNmQ4Yi00ODNiLTg1ZDMtNjJhOGM1YjlmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjQoCiDPOEBNgNoPtoLbmtbDmNMolK/DtD2Z cBwgLcOWyAuofhxvz5wx3893zWEZL4586cXIdKUannWHtWwj6f0IIzDubHbO6DIU AmqViaa6FZJugqr8CMwBLQ4xzfRhbGQ0aecBdyAnFnMvz++XHUMPeBPpfV+hEhWL rppluJYCKuqnGBDh5VlK5fkBQD0L/SLfzv17boC2q3Fkh03ZhT8NtCM5DoSzN2o5 q5n50KVY++/7f0yLBcTS6j7vOc1GbGSSOwAIl2n8w9yUENWeG5upqB5ivftiNgcd GMt0t9RABrIUPUNSI5hji0PeZsXLszzWuCjfEEh1ZkpRRfpI1QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJV4d4xDGmkzfU005AFJcaZYpi5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1 MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAyYmY4Njk3NmEvZmZmN2E5ZGYtMTNkZC0z MGJkLTgxNzQtOWUyYTk3MzExNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTI5NTM4YmUtY2NjYi00MGQwLThh N2QtYWMwMmJmODY5NzZhLzEyOTUzOGJlLWNjY2ItNDBkMC04YTdkLWFjMDJiZjg2 OTc2YS5jcmwwHwYDVR0jBBgwFoAU7Wrg6IA/tLttlWDcjl3wP4sq0GMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAy YmY4Njk3NmEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALG1KwD BADG1LAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcwPym/WvmgS7pJqoQK0k1xyaiFmdf3KdbFbKWutdYBFE rRKltOCUgco8eoz2f6ZZda7uWM5R25xUM1Kk/A7zt9NNi8XES5N6772BItLf8fox FLgz5E0luqM/+BZAqeN772MUHBBTcBwMMqMBsZcqNYwnHnOlTztaKb4fQAcTgbj7 Kq9cPpz+tLMYxyUDHGyf24yq6k+gSbd6Neood3l9lTdwaxmyLcdHbjbQLFwI2vGu zHn7cawN079HNiYaYTC0/r5/Trm1BvOAxkrpf0GBeHTsx3AS1Xa1WaPNSevFkVsf H0pOcl9kB78CjqTkSBfXtxXfpk+aNFdz3mji9xa2YQ== -----END CERTIFICATE-----Generated at Tue Aug 26 09:15:34 2025 by rpki-client