$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa File: fa947067-332a-302c-90e6-a9f60107ae87.roa (raw, json) Hash identifier: CFgOfM/HA5/qtH76UCzFKSfLbkNGPJ/hDIDB5PS2rZc= Subject key identifier: B9:0E:16:3B:09:4A:27:2A:99:80:9D:11:F9:4F:12:96:4D:5C:EE:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE04FF0ACF6503B1A9DFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:04:ff:0a:cf:65:03:b1:a9:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=310d78cd-42da-4e3e-8a5a-417119556235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:d6:26:02:3e:66:2f:5c:5b:b9:34:bd:c4: 08:b4:1f:7e:24:6c:31:38:4f:79:3b:bb:4c:d8:84: 57:10:58:40:8b:d4:9d:40:f4:d7:50:0a:52:f5:93: b6:e5:32:44:3c:97:21:1f:62:8b:40:f9:f4:26:42: e5:09:95:9e:84:1d:6d:67:45:a3:9d:61:d7:21:ea: 1d:23:b6:ad:37:09:5e:f3:87:29:aa:3f:ff:bf:ad: 53:b0:b9:ed:06:ff:ec:44:3a:dc:50:b1:26:be:ee: e1:15:66:c2:4c:9b:31:1c:db:3b:ff:ea:3f:c8:ce: af:52:64:05:5e:3e:b8:d7:99:31:8b:fa:f1:51:eb: 47:ef:6c:ab:38:5a:36:84:35:8e:82:f9:40:8a:e2: a4:4b:ee:21:a7:b1:94:0a:97:69:0a:71:91:30:56: 76:64:d9:0d:44:24:8d:69:cf:48:cb:e9:c9:05:b6: 8d:47:82:a3:38:39:c1:c2:88:c4:4f:ee:c4:4d:70: b5:c8:79:da:6d:40:8f:4f:c0:b1:cd:fa:c9:33:9b: 17:72:ad:42:e0:24:8a:3f:4e:e2:66:00:be:53:6f: 60:33:f0:43:3d:56:17:ae:57:98:1e:1e:cb:e9:09: 94:1c:1a:aa:d0:af:82:76:99:df:f7:0a:27:cb:9a: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:16:3B:09:4A:27:2A:99:80:9D:11:F9:4F:12:96:4D:5C:EE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:99:76:3e:f3:52:ff:e6:c0:af:e0:61:fc:96:48:39:3a:09: de:6e:b7:77:b9:7a:da:9e:25:c7:eb:c5:1a:3b:17:05:0c:ba: 96:e4:11:6c:c9:3f:6b:7d:68:e4:a4:50:23:e6:ab:f2:48:ec: 80:be:e2:2c:a3:e6:e8:13:7a:61:51:63:67:d6:6d:bb:a3:f4: 17:e3:d5:a9:25:b7:52:4a:41:de:70:f5:91:6f:fc:36:cb:24: 86:68:c1:e6:b1:ed:9b:c7:bb:00:93:2d:a4:0e:07:31:e7:d7: a2:e7:25:99:08:6d:9d:96:5e:c4:8a:4a:f2:08:8b:54:40:02: 44:8f:6c:03:f8:58:46:db:8c:c1:59:bb:85:b9:ab:8b:6d:fc: 60:61:0a:31:7f:5d:4f:c4:a9:d5:f9:11:5e:ee:3b:87:5b:9b: c6:28:de:92:a8:58:0e:64:b8:08:27:8d:38:2d:e7:15:e6:7b: 49:44:f5:83:fe:a0:1c:8e:b6:34:57:81:cd:ee:47:aa:ce:25: ae:91:39:ca:7b:00:92:40:b8:4a:97:28:41:c1:ae:d3:9e:7f: 57:fa:69:d5:35:1c:93:df:12:7f:f8:e3:8b:56:84:73:72:be: de:72:43:2a:fa:17:a3:6e:f2:4a:dd:b8:6f:71:8e:3b:94:22: f6:b7:f3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgT/Cs9lA7Gp38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzEwZDc4Y2QtNDJkYS00ZTNlLThhNWEtNDE3MTE5NTU2MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tPWJgI+Zi9cW7k0vcQItB9+JGwxOE95O7tM 2IRXEFhAi9SdQPTXUApS9ZO25TJEPJchH2KLQPn0JkLlCZWehB1tZ0WjnWHXIeod I7atNwle84cpqj//v61TsLntBv/sRDrcULEmvu7hFWbCTJsxHNs7/+o/yM6vUmQF Xj6415kxi/rxUetH72yrOFo2hDWOgvlAiuKkS+4hp7GUCpdpCnGRMFZ2ZNkNRCSN ac9Iy+nJBbaNR4KjODnBwojET+7ETXC1yHnabUCPT8CxzfrJM5sXcq1C4CSKP07i ZgC+U29gM/BDPVYXrleYHh7L6QmUHBqq0K+Cdpnf9wony5rhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOFjsJSicqmYCdEflPEpZNXO6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE5NDcwNjctMzMyYS0z MDJjLTkwZTYtYTlmNjAxMDdhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyZdj7zUv/mwK/gYfyWSDk6Cd5ut3e5etqeJcfrxRo7FwUMupbkEWzJ P2t9aOSkUCPmq/JI7IC+4iyj5ugTemFRY2fWbbuj9Bfj1aklt1JKQd5w9ZFv/DbL JIZoweax7ZvHuwCTLaQOBzHn16LnJZkIbZ2WXsSKSvIIi1RAAkSPbAP4WEbbjMFZ u4W5q4tt/GBhCjF/XU/EqdX5EV7uO4dbm8Yo3pKoWA5kuAgnjTgt5xXme0lE9YP+ oByOtjRXgc3uR6rOJa6ROcp7AJJAuEqXKEHBrtOef1f6adU1HJPfEn/444tWhHNy vt5yQyr6F6Nu8krduG9xjjuUIva383A= -----END CERTIFICATE-----Generated at Sun Oct 26 10:01:41 2025 by rpki-client