$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa File: ab2f321e-03b1-3793-839e-0511ef8aaa27.roa (raw, json) Hash identifier: 2BlguVPyvwEOEhTdTyvUkNRHyuFf65WtvmCfw8fKVQM= Subject key identifier: 47:B0:C0:93:89:6A:64:49:63:36:5D:4D:C7:B4:02:7A:D8:7D:9E:F6 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584B2761758F2CDBAE718D720680 Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 64199 IP address blocks: 198.178.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:75:8f:2c:db:ae:71:8d:72:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=90d83b90-3214-44f8-a767-f5e5a56f1bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:bc:51:f0:57:9c:52:19:58:05:d2:a3:fc: 4a:c5:f5:7c:eb:74:de:d9:3f:be:35:a0:36:a0:d6: e6:85:bb:ea:54:e8:24:d2:c6:9a:2b:f7:c1:c4:dc: 3c:c5:f9:73:1c:66:82:a8:cc:6d:a7:9d:dd:6b:31: f7:78:eb:db:8a:bd:cb:6f:e1:ba:3f:3a:d9:40:4e: 53:b0:68:5a:fe:72:61:ca:04:6b:d2:1d:67:bd:0f: 13:2a:04:a0:dc:e7:3f:18:3c:17:c1:62:42:51:09: 99:90:41:cf:99:98:ba:0d:02:7c:e6:3f:0a:fc:c8: ab:89:7e:b4:9e:48:b2:84:d3:c3:a7:dd:01:cf:84: e4:a5:6f:0e:30:44:55:0e:c4:60:8b:21:f0:88:23: 8e:b7:b6:9b:85:13:04:8a:87:01:46:7e:1c:f2:0d: dc:2b:1c:df:a0:c6:d5:d1:05:78:ca:4b:1b:ad:88: 14:6c:13:77:88:ba:61:c7:3b:01:8f:68:78:93:41: aa:08:d6:fa:0d:0c:10:1e:88:9d:20:7b:ee:b4:fc: 73:dd:f5:70:48:68:ad:02:a8:e6:7d:65:6c:7a:f1: 6a:dc:e4:1a:2c:8e:f6:3b:23:96:e7:6d:e4:48:a0: c4:17:30:a3:dc:dc:9f:e6:6a:c6:93:ac:e8:3e:31: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:C0:93:89:6A:64:49:63:36:5D:4D:C7:B4:02:7A:D8:7D:9E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: 198.178.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e0:ad:42:a0:62:80:1b:cc:be:f8:44:ed:25:e6:a7:47:2d: 88:d6:9c:c4:36:28:1b:74:e2:8c:2a:5a:d1:be:f9:56:23:bc: a2:0e:69:1d:88:6c:73:e9:3a:5a:47:03:cb:c1:da:5b:8c:2e: 2e:cb:d6:58:bd:fa:c0:f8:7d:df:01:42:35:36:c9:28:6a:99: 84:08:62:d4:5f:a7:0c:d5:ce:7d:e7:f2:a4:21:35:69:02:23: 21:73:6a:c4:9a:f7:2e:95:d4:6c:52:46:df:56:f1:b2:b4:39: e0:12:98:14:f0:dd:de:86:0e:8b:4a:0d:df:dd:2d:50:9c:6d: 8e:62:64:36:df:dc:76:9d:b9:ec:83:9d:69:65:c8:12:d1:59: d6:51:2d:a8:e2:81:b4:e0:a7:f0:72:24:71:b8:d0:ea:7b:44: 29:3b:8f:47:fd:a4:fa:b2:d3:f3:b8:0f:b6:f6:8e:03:e4:61: 07:0f:dd:73:9b:68:b9:93:95:5d:24:75:86:fa:b3:fd:01:b3: b5:69:3a:80:4f:2f:52:6b:51:80:1d:8e:0a:b8:85:96:9e:eb: ef:a6:ef:04:b1:46:c6:a1:50:ba:6f:73:17:a8:f2:5b:75:0d: f2:92:c6:d4:49:4f:9a:54:8e:3c:0b:7c:57:f9:74:f2:f2:e1: 2c:0d:79:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXWPLNuucY1yBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OTBkODNiOTAtMzIxNC00NGY4LWE3NjctZjVlNWE1NmYxYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2y8UfBXnFIZWAXSo/xKxfV863Te2T++NaA2 oNbmhbvqVOgk0saaK/fBxNw8xflzHGaCqMxtp53dazH3eOvbir3Lb+G6PzrZQE5T sGha/nJhygRr0h1nvQ8TKgSg3Oc/GDwXwWJCUQmZkEHPmZi6DQJ85j8K/MiriX60 nkiyhNPDp90Bz4TkpW8OMERVDsRgiyHwiCOOt7abhRMEiocBRn4c8g3cKxzfoMbV 0QV4yksbrYgUbBN3iLphxzsBj2h4k0GqCNb6DQwQHoidIHvutPxz3fVwSGitAqjm fWVsevFq3OQaLI72OyOW523kSKDEFzCj3Nyf5mrGk6zoPjG9gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEewwJOJamRJYzZdTce0AnrYfZ72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvYWIyZjMyMWUtMDNiMS0z NzkzLTgzOWUtMDUxMWVmOGFhYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTgrUKgYoAbzL74RO0l5qdHLYjWnMQ2KBt04owqWtG++VYjvKIOaR2I bHPpOlpHA8vB2luMLi7L1li9+sD4fd8BQjU2yShqmYQIYtRfpwzVzn3n8qQhNWkC IyFzasSa9y6V1GxSRt9W8bK0OeASmBTw3d6GDotKDd/dLVCcbY5iZDbf3HadueyD nWllyBLRWdZRLajigbTgp/ByJHG40Op7RCk7j0f9pPqy0/O4D7b2jgPkYQcP3XOb aLmTlV0kdYb6s/0Bs7VpOoBPL1JrUYAdjgq4hZae6++m7wSxRsahULpvcxeo8lt1 DfKSxtRJT5pUjjwLfFf5dPLy4SwNef8= -----END CERTIFICATE-----Generated at Sat Sep 20 01:04:54 2025 by rpki-client