$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa File: 6ea45e95-c5f3-3500-8d82-13c5eed02757.roa (raw, json) Hash identifier: wlJfb2y9pUHQVp5ztfyFT1agvvYw+fyLRTOoKvf4FDA= Subject key identifier: E1:55:99:53:E8:AA:F2:6F:D5:8B:FB:5C:2B:F4:CD:60:90:91:B3:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE8913F3D2A3C541481F07D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7342 IP address blocks: 198.49.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3f:3d:2a:3c:54:14:81:f0:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=c13a9a13-a56b-444b-94fe-76660a409765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:fa:c4:b5:51:03:c1:74:6d:fa:d5:60:bd: 34:f7:01:d3:f1:38:0e:e7:d5:57:f2:20:b1:bd:e5: 09:f0:ca:27:87:51:e2:88:8a:0c:00:33:8c:cc:e9: 64:29:5e:7c:c8:60:77:66:9c:3b:35:7d:fa:73:36: 32:c5:1b:fd:a5:fa:a8:d2:ff:1e:64:95:db:f8:43: 30:ea:6a:f9:28:a4:6a:b6:71:3a:bb:b7:5e:c1:af: fb:cc:66:73:a7:87:06:ea:7b:16:59:84:84:09:1c: 25:2a:65:5e:54:cf:7a:63:9d:f4:dc:6e:6e:93:36: 7e:fb:f9:88:75:36:a0:07:d1:1a:32:79:b8:5a:49: 68:56:9d:ea:1c:28:72:12:ee:f3:34:a9:ec:63:a0: f8:2b:9d:95:56:d9:21:91:dd:15:f8:27:a2:63:5f: c6:1b:9b:90:16:84:5f:a6:bb:b5:70:b6:2d:1a:84: e6:cf:ef:c3:b7:4c:0d:c1:66:37:89:ea:61:b1:b6: 32:65:19:04:78:c2:9c:0b:ef:54:68:4a:0f:83:82: 1c:e3:ec:53:f6:77:74:3b:e9:a7:6d:e9:91:a8:08: 3f:8f:09:5e:df:2e:91:5f:ce:be:d2:46:c1:70:98: 60:6d:7b:55:1a:42:49:81:e2:bb:41:cd:74:b8:61: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:99:53:E8:AA:F2:6F:D5:8B:FB:5C:2B:F4:CD:60:90:91:B3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea45e95-c5f3-3500-8d82-13c5eed02757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.49.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:59:4a:19:ca:61:7e:79:1b:b2:b7:ef:29:d4:fa:cd:94:f0: b9:93:d2:2d:b2:ac:94:03:fc:e2:f2:52:7c:ab:52:21:a0:d5: a5:e2:c9:6a:c1:fa:c2:61:fb:b0:3b:ab:66:ea:18:1d:b7:d9: 0b:69:34:42:1d:69:b0:8f:63:be:43:73:50:c9:66:2f:c7:69: fd:ce:b1:4d:28:87:68:0e:e9:fd:d7:fa:af:20:bb:73:73:1f: ee:2e:e6:6a:c7:d2:91:e7:d9:a6:fa:d9:8e:f7:b9:f1:7d:e0: c6:4e:1e:8c:03:ce:38:42:12:54:b4:de:5a:39:60:68:8d:7e: 53:74:36:d8:ef:d3:d2:6f:b0:60:e4:37:77:9a:07:1a:c2:44: 34:89:d4:84:3f:9e:53:f9:df:70:99:b6:19:b4:fa:46:88:26: 8a:9e:f9:d2:35:ea:58:04:8d:6a:d3:13:3f:32:aa:e1:de:4a: cc:39:fe:f1:19:12:da:24:97:59:0f:e6:8c:e7:8a:f1:5a:10: b3:38:b9:ff:39:eb:6b:b6:70:5a:6a:15:5a:1a:25:15:41:3c: 89:0a:fa:f6:84:20:12:52:9c:3c:f1:5a:ed:e0:59:23:52:5f: 01:33:ea:5f:1d:a8:0c:78:36:c3:3e:34:3f:68:10:84:b3:07: ae:e8:4f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokT89KjxUFIHwfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YzEzYTlhMTMtYTU2Yi00NDRiLTk0ZmUtNzY2NjBhNDA5NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNT6xLVRA8F0bfrVYL009wHT8TgO59VX8iCx veUJ8Monh1HiiIoMADOMzOlkKV58yGB3Zpw7NX36czYyxRv9pfqo0v8eZJXb+EMw 6mr5KKRqtnE6u7dewa/7zGZzp4cG6nsWWYSECRwlKmVeVM96Y5303G5ukzZ++/mI dTagB9EaMnm4WkloVp3qHChyEu7zNKnsY6D4K52VVtkhkd0V+CeiY1/GG5uQFoRf pru1cLYtGoTmz+/Dt0wNwWY3iephsbYyZRkEeMKcC+9UaEoPg4Ic4+xT9nd0O+mn bemRqAg/jwle3y6RX86+0kbBcJhgbXtVGkJJgeK7Qc10uGFV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFVmVPoqvJv1Yv7XCv0zWCQkbN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmVhNDVlOTUtYzVmMy0z NTAwLThkODItMTNjNWVlZDAyNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9ZShnKYX55G7K37ynU+s2U8LmT0i2yrJQD/OLyUnyrUiGg1aXiyWrB +sJh+7A7q2bqGB232QtpNEIdabCPY75Dc1DJZi/Haf3OsU0oh2gO6f3X+q8gu3Nz H+4u5mrH0pHn2ab62Y73ufF94MZOHowDzjhCElS03lo5YGiNflN0Ntjv09JvsGDk N3eaBxrCRDSJ1IQ/nlP533CZthm0+kaIJoqe+dI16lgEjWrTEz8yquHeSsw5/vEZ Etokl1kP5oznivFaELM4uf8562u2cFpqFVoaJRVBPIkK+vaEIBJSnDzxWu3gWSNS XwEz6l8dqAx4NsM+ND9oEISzB67oT80= -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:08 2025 by rpki-client