$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa File: 79f5998a-9c67-3633-9ae6-274922dd2fed.roa (raw, json) Hash identifier: loniRmVkWVtSv4U1ZD9uHTWjTIff9p1UQCm3TI3H3F4= Subject key identifier: 4F:09:3C:D7:B7:7B:96:6F:2E:E1:7B:42:2B:CD:FD:C1:0E:CF:3F:C0 Certificate issuer: /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Certificate serial: 010D0C9F4328584B047C219F31C65A844B211A80 Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 198.51.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:21:9f:31:c6:5a:84:4b:21:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=fc14a6ad-eae7-4e85-9482-12bc2c792fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:6c:1e:1a:d2:7a:00:47:98:3c:75:9b:f2: 24:2b:9f:98:b3:62:2a:c1:f4:1a:15:a6:83:64:07: 80:03:2b:af:5e:eb:83:cd:30:8f:28:24:9e:d1:4b: 3f:44:fc:ed:ac:ac:47:45:f9:5d:14:7d:33:30:3b: fd:53:a5:a0:ad:01:e3:7b:aa:53:1d:0b:9e:7e:32: da:f4:2a:2e:ee:05:5b:f2:09:98:03:ad:fe:16:70: 86:9e:ea:f6:87:94:f9:cc:a6:cf:b9:d1:20:67:8e: 5a:cd:6c:9c:f1:12:95:22:45:06:18:95:b6:31:5d: 60:dc:23:a7:da:41:b4:4c:ef:ab:6b:8e:5c:de:e7: 4c:15:05:b8:f1:63:49:34:ad:53:4f:51:7b:21:d9: d7:1e:9c:c4:f4:0e:d3:49:00:ec:c5:21:1d:ad:14: 98:8d:e4:52:00:c1:ce:9b:a1:33:97:f6:3c:f0:28: 6e:9f:a5:d4:9f:83:10:a1:59:92:6f:bd:26:d0:0b: ce:a8:d3:93:30:3f:a2:32:0a:dc:de:89:27:88:ba: 0a:15:a9:9d:a0:e5:33:d1:a0:cd:21:0c:ba:2a:c9: 75:ea:38:7a:ec:d8:e9:27:f4:aa:06:54:4f:b1:e5: b7:67:20:b5:9c:da:9d:8b:6d:46:a7:1c:04:88:b8: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:3C:D7:B7:7B:96:6F:2E:E1:7B:42:2B:CD:FD:C1:0E:CF:3F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl X509v3 Authority Key Identifier: keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer sbgp-ipAddrBlock: critical IPv4: 198.51.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ca:4a:5f:00:c1:23:f4:fb:be:0a:32:4c:59:ff:b6:58:27: 26:cf:ca:79:1f:bf:31:57:8f:06:a9:75:2b:c9:e1:66:9e:ba: e2:7a:1c:59:91:4c:ec:2f:4b:09:c3:80:18:55:0f:fe:7a:96: 79:af:27:1c:94:70:72:8c:06:88:4a:34:93:9a:78:38:e1:d3: f1:1d:d3:38:e2:e9:a6:f5:4f:df:f2:80:a0:2a:04:71:ce:e7: 79:b1:d6:7e:95:78:23:57:fd:ae:cd:82:82:51:7b:90:fc:fa: f4:21:2d:a6:ec:cd:e7:39:68:75:6c:8e:61:33:6c:ac:c4:98: f6:7d:eb:93:c4:ca:1c:0d:cd:a8:94:06:2e:e2:37:1b:36:dd: 99:b4:88:bf:f8:08:50:1d:7b:ba:75:e2:d5:78:57:71:c2:63: 8e:79:77:b1:f8:a4:f4:7c:e8:aa:f3:cc:87:47:8b:cf:9c:de: 80:25:b0:61:d2:90:50:f1:6d:00:9a:ba:f3:ce:a8:67:37:fa: cb:60:b7:49:e0:af:47:36:9a:1e:4a:dc:20:4d:69:24:28:02: 46:d9:ca:b7:fb:54:f0:61:47:4d:6e:e6:fd:dd:75:26:20:5b: e7:0e:1d:98:ac:e2:6b:9e:14:5f:ff:92:0c:c0:28:fc:86:2b: d9:89:ea:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfCGfMcZahEshGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzYjA0YTMtYjdjMS00YTAzLTk0MjctYzFmMDNkODEw ZDM4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmMxNGE2YWQtZWFlNy00ZTg1LTk0ODItMTJiYzJjNzkyZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdsHhrSegBHmDx1m/IkK5+Ys2IqwfQaFaaD ZAeAAyuvXuuDzTCPKCSe0Us/RPztrKxHRfldFH0zMDv9U6WgrQHje6pTHQuefjLa 9Cou7gVb8gmYA63+FnCGnur2h5T5zKbPudEgZ45azWyc8RKVIkUGGJW2MV1g3COn 2kG0TO+ra45c3udMFQW48WNJNK1TT1F7IdnXHpzE9A7TSQDsxSEdrRSYjeRSAMHO m6Ezl/Y88Chun6XUn4MQoVmSb70m0AvOqNOTMD+iMgrc3okniLoKFamdoOUz0aDN IQy6Ksl16jh67NjpJ/SqBlRPseW3ZyC1nNqdi21GpxwEiLgqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8JPNe3e5ZvLuF7QivN/cEOzz/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZjNi MDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYwM2Q4MTBkMzgvNzlmNTk5OGEtOWM2Ny0z NjMzLTlhZTYtMjc0OTIyZGQyZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmYzYjA0YTMtYjdjMS00YTAzLTk0 MjctYzFmMDNkODEwZDM4L2ZmM2IwNGEzLWI3YzEtNGEwMy05NDI3LWMxZjAzZDgx MGQzOC5jcmwwHwYDVR0jBBgwFoAUSeUP+OY4sjhthGnSv2dCtv0jCVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mZjNiMDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYw M2Q4MTBkMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjO/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbKSl8AwSP0+74KMkxZ/7ZYJybPynkfvzFXjwapdSvJ4WaeuuJ6HFmR TOwvSwnDgBhVD/56lnmvJxyUcHKMBohKNJOaeDjh0/Ed0zji6ab1T9/ygKAqBHHO 53mx1n6VeCNX/a7NgoJRe5D8+vQhLabszec5aHVsjmEzbKzEmPZ965PEyhwNzaiU Bi7iNxs23Zm0iL/4CFAde7p14tV4V3HCY455d7H4pPR86KrzzIdHi8+c3oAlsGHS kFDxbQCauvPOqGc3+stgt0ngr0c2mh5K3CBNaSQoAkbZyrf7VPBhR01u5v3ddSYg W+cOHZis4mueFF//kgzAKPyGK9mJ6rk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:25:58 2025 by rpki-client