$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa File: c43498db-1a52-317c-a01f-d3f059ca3df1.roa (raw, json) Hash identifier: nAfNgrFJbuj2tm6OHeGf5bdmeFkrO69BGL3tuI01iAE= Subject key identifier: F4:53:96:12:3F:9A:35:F7:5B:B1:B1:56:FC:C3:59:D8:D3:0F:65:EF Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Certificate serial: 010D0C9F4328584B3F1C66E45D47330CE5B97A80 Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 20473 IP address blocks: 199.255.148.0/24 maxlen: 24 2602:fd1e::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:66:e4:5d:47:33:0c:e5:b9:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=97d33eca-3cae-4b60-8228-b0bdd12bfc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:49:ca:b4:ae:50:b8:b0:a0:02:0a:b0:76: 01:9c:68:b4:6e:fb:12:09:eb:93:46:8c:8c:3e:60: cf:34:b9:87:97:ec:f4:30:62:2b:b6:ee:b8:25:25: ca:b4:74:c4:d1:02:9f:eb:8b:e7:e1:b0:b2:93:a1: b5:cb:92:4c:18:84:5f:c8:d2:44:e7:49:f8:02:6d: 90:73:c9:05:79:cc:e1:12:33:fc:a1:df:d1:44:8c: 56:99:01:1a:9d:ff:10:c7:24:d6:c0:2a:95:79:93: fd:0d:cd:5f:0e:d7:3d:59:ae:4f:5e:4b:9c:bd:6b: b1:22:94:72:af:8c:f2:41:2b:f7:ea:88:35:20:85: 89:76:95:9e:8b:ac:ff:38:a2:95:da:b8:7a:d8:a9: c3:85:ed:bd:dc:ab:2d:8e:01:ca:70:84:96:bb:ed: b0:30:fc:3b:eb:3e:88:36:9f:28:98:22:8c:5b:b0: aa:b0:01:ee:11:00:bc:15:ee:45:ea:44:ad:85:e5: a3:47:ad:73:6e:c1:2a:93:c6:66:07:38:c1:99:e2: 1f:fd:6a:4d:81:e3:68:cf:aa:ef:af:09:61:51:d6: b1:00:92:37:83:71:52:08:67:c9:54:54:ae:5b:df: fc:10:43:0c:c4:de:ff:70:45:57:1f:6c:99:37:c3: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:96:12:3F:9A:35:F7:5B:B1:B1:56:FC:C3:59:D8:D3:0F:65:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl X509v3 Authority Key Identifier: keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer sbgp-ipAddrBlock: critical IPv4: 199.255.148.0/24 IPv6: 2602:fd1e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ad:c9:01:ac:4d:49:07:2d:6f:bf:75:f2:0b:48:2d:a3:1e: bd:e5:20:5a:5d:1a:91:18:00:54:af:0c:88:c0:c4:35:48:fb: 78:5c:b2:06:24:c1:ba:ae:f8:a3:87:c5:09:3e:de:c8:94:e4: 11:e1:a6:1c:30:69:39:70:4b:0b:97:49:dd:8c:67:62:af:e5: 0d:68:52:8d:9e:73:1a:79:eb:16:29:1e:d5:40:00:df:b9:4e: 79:0c:d1:38:f5:c6:e6:0b:2b:e3:fd:e0:fc:34:6f:c1:5b:0b: a6:3b:4c:a2:b0:52:01:d3:82:79:12:8d:d5:a6:0f:83:89:45: 6f:9d:87:7a:4b:96:be:d5:b9:6c:2b:94:cf:66:01:ac:57:42: 19:1a:29:72:16:bf:d7:a8:0d:30:6d:25:9d:0f:0b:aa:47:75: e1:55:4f:b1:93:9f:d5:78:19:49:e8:4e:6b:e2:b1:b5:64:92: 7b:74:54:5c:b3:8b:4b:41:8a:6c:cc:11:8b:db:d9:ad:d4:7a: c0:8b:89:b0:e8:75:75:7a:16:2d:55:8b:31:ed:33:45:79:4a: 7c:f0:76:5c:29:d2:4d:2d:9a:a8:42:71:3e:38:f8:b3:6a:d5: c9:41:c7:06:3c:1f:fc:74:61:45:2f:f9:c3:cd:64:6e:75:03: ce:95:7b:97 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs/HGbkXUczDOW5eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NiNmE5OGEtMDlmNC00ZTI5LTk0MDYtYmMwY2IxNjYx ZGZjMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk OTdkMzNlY2EtM2NhZS00YjYwLTgyMjgtYjBiZGQxMmJmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNlJyrSuULiwoAIKsHYBnGi0bvsSCeuTRoyM PmDPNLmHl+z0MGIrtu64JSXKtHTE0QKf64vn4bCyk6G1y5JMGIRfyNJE50n4Am2Q c8kFeczhEjP8od/RRIxWmQEanf8QxyTWwCqVeZP9Dc1fDtc9Wa5PXkucvWuxIpRy r4zyQSv36og1IIWJdpWei6z/OKKV2rh62KnDhe293KstjgHKcISWu+2wMPw76z6I Np8omCKMW7CqsAHuEQC8Fe5F6kStheWjR61zbsEqk8ZmBzjBmeIf/WpNgeNoz6rv rwlhUdaxAJI3g3FSCGfJVFSuW9/8EEMMxN7/cEVXH2yZN8O45wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPRTlhI/mjX3W7GxVvzDWdjTD2XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2 YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2NjFkZmMvYzQzNDk4ZGItMWE1Mi0z MTdjLWEwMWYtZDNmMDU5Y2EzZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2NiNmE5OGEtMDlmNC00ZTI5LTk0 MDYtYmMwY2IxNjYxZGZjL2NjYjZhOThhLTA5ZjQtNGUyOS05NDA2LWJjMGNiMTY2 MWRmYy5jcmwwHwYDVR0jBBgwFoAUWNuLitfSv3HYwgdcEp2ETtuQbc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBj YjE2NjFkZmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx/+UMA4E AgACMAgDBgQmAv0eADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTrckBrE1JBy1vv3XyC0gtox695SBaXRqR GABUrwyIwMQ1SPt4XLIGJMG6rvijh8UJPt7IlOQR4aYcMGk5cEsLl0ndjGdir+UN aFKNnnMaeesWKR7VQADfuU55DNE49cbmCyvj/eD8NG/BWwumO0yisFIB04J5Eo3V pg+DiUVvnYd6S5a+1blsK5TPZgGsV0IZGilyFr/XqA0wbSWdDwuqR3XhVU+xk5/V eBlJ6E5r4rG1ZJJ7dFRcs4tLQYpszBGL29mt1HrAi4mw6HV1ehYtVYsx7TNFeUp8 8HZcKdJNLZqoQnE+OPizatXJQccGPB/8dGFFL/nDzWRudQPOlXuX -----END CERTIFICATE-----Generated at Mon Oct 13 22:09:12 2025 by rpki-client