$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa File: 4b403672-80b4-3084-a82e-caf0c8c6e539.roa (raw, json) Hash identifier: XliVkvYPmW4JINgY5bvS6kUoHMfWPpaciCmZZBmnK0Q= Subject key identifier: EE:FF:D7:5C:3F:E1:09:86:1D:72:5B:D4:03:1E:28:94:02:7A:32:32 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584B2A2C4BD844D592ED4C9CFA00 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 32913 IP address blocks: 198.135.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4b:d8:44:d5:92:ed:4c:9c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=fd04e648-beec-457f-8821-8f13388ca870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:ca:6e:b0:b3:cb:a7:bb:1b:4a:57:75:ee: 63:35:4d:3a:38:10:ea:77:b5:d6:e1:23:73:fb:57: 19:63:58:49:0b:90:d3:ca:16:b1:25:1c:a8:d7:b7: 00:f2:bb:39:8c:51:e3:55:a6:9f:b7:66:82:a3:2f: a7:ea:2e:e5:55:d1:e7:8f:91:dc:e6:12:00:4a:06: 5d:11:2f:87:26:c6:0c:f0:e1:da:d2:92:91:73:4e: 54:c1:4f:6e:cd:de:13:26:f4:5b:4c:fd:c4:f0:07: 64:a7:b4:6b:ce:3f:b0:c9:2c:37:91:c6:4c:d8:b1: 02:c1:b6:d0:b2:15:1f:85:9e:4d:25:59:0b:5f:89: 4f:50:af:f3:cd:7c:0a:35:06:55:1a:aa:b0:80:13: 09:c4:f6:7c:f3:d9:8f:0d:02:56:1c:13:1a:0d:b5: f6:40:78:5b:c0:7a:c2:00:f9:74:fb:b5:59:74:2e: f4:00:4f:55:6c:ef:3e:4c:db:43:c8:13:12:e8:cb: aa:ee:5d:15:f5:fc:3c:4f:21:13:e6:c5:f2:e9:ec: f7:8d:1c:9a:9d:a4:7f:fa:7a:57:11:7c:f7:9c:3b: d7:07:71:31:4f:7d:1c:fd:0e:3d:f4:4e:dd:be:3e: 66:88:b4:5e:5d:0d:15:98:6d:1f:7d:c0:bf:52:4e: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:D7:5C:3F:E1:09:86:1D:72:5B:D4:03:1E:28:94:02:7A:32:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 198.135.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b5:05:ee:f6:0e:80:81:0e:1c:f6:05:75:67:91:ed:84:83: cc:ea:d6:c5:f7:38:69:70:61:67:2b:48:3d:48:93:17:df:8b: 33:04:ac:ca:76:35:da:eb:bf:1f:97:ae:cc:cc:ca:2a:cd:02: 22:66:ae:78:e6:d0:75:08:ac:70:66:f9:f9:fd:d6:53:7b:c7: f2:85:a7:e8:41:34:38:52:d8:d7:ae:a0:e9:fe:a8:20:4c:49: 20:9e:2a:6e:b0:4a:fc:91:8c:57:c1:30:64:8e:ce:20:21:0f: 8d:c3:37:e1:59:eb:ee:c9:06:23:43:50:30:cd:59:2c:ec:79: 3d:8f:4c:da:b3:e7:c3:cd:ea:ca:69:95:9f:1c:03:1a:75:45: d7:6c:0d:83:fb:04:80:6c:36:c3:67:04:7c:b7:33:28:92:b2: 35:1e:93:26:bc:a3:73:58:2a:18:9b:b4:4b:68:7b:64:b0:04: 05:90:8f:da:12:e5:15:88:f3:2c:7a:53:a4:8f:51:3d:b0:dc: 77:d2:c1:55:4b:8f:4a:20:9c:74:53:55:a5:d9:c9:18:ce:e9: 55:a1:6f:20:22:4a:97:41:e2:14:0a:a7:3a:a0:fe:53:4a:6f: 36:b2:67:35:e4:8f:92:4b:ac:d1:48:db:ac:b3:cc:2e:b8:ed: 66:d9:2b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEvYRNWS7Uyc+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmQwNGU2NDgtYmVlYy00NTdmLTg4MjEtOGYxMzM4OGNhODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgLKbrCzy6e7G0pXde5jNU06OBDqd7XW4SNz +1cZY1hJC5DTyhaxJRyo17cA8rs5jFHjVaaft2aCoy+n6i7lVdHnj5Hc5hIASgZd ES+HJsYM8OHa0pKRc05UwU9uzd4TJvRbTP3E8Adkp7Rrzj+wySw3kcZM2LECwbbQ shUfhZ5NJVkLX4lPUK/zzXwKNQZVGqqwgBMJxPZ889mPDQJWHBMaDbX2QHhbwHrC APl0+7VZdC70AE9VbO8+TNtDyBMS6Muq7l0V9fw8TyET5sXy6ez3jRyanaR/+npX EXz3nDvXB3ExT30c/Q499E7dvj5miLReXQ0VmG0ffcC/Uk7WyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7/11w/4QmGHXJb1AMeKJQCejIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvNGI0MDM2NzItODBiNC0z MDg0LWE4MmUtY2FmMGM4YzZlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoeyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF21Be72DoCBDhz2BXVnke2Eg8zq1sX3OGlwYWcrSD1IkxffizMErMp2 Ndrrvx+XrszMyirNAiJmrnjm0HUIrHBm+fn91lN7x/KFp+hBNDhS2NeuoOn+qCBM SSCeKm6wSvyRjFfBMGSOziAhD43DN+FZ6+7JBiNDUDDNWSzseT2PTNqz58PN6spp lZ8cAxp1RddsDYP7BIBsNsNnBHy3MyiSsjUekya8o3NYKhibtEtoe2SwBAWQj9oS 5RWI8yx6U6SPUT2w3HfSwVVLj0ognHRTVaXZyRjO6VWhbyAiSpdB4hQKpzqg/lNK bzayZzXkj5JLrNFI26yzzC647WbZK4w= -----END CERTIFICATE-----Generated at Tue Sep 16 08:52:48 2025 by rpki-client