$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa File: 3e196079-8695-30ec-97ad-a014098a62f1.roa (raw, json) Hash identifier: /LX8Gexsny8K9K1N3zLCCEDFYfSy5miwUAOyF12RZKk= Subject key identifier: 12:B1:D1:97:98:6E:2E:2B:46:EE:CD:13:22:BD:2E:D0:75:0F:67:05 Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584B2E5C49E73851BE3708F4BE00 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 400519 IP address blocks: 198.22.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:49:e7:38:51:be:37:08:f4:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=97fe5749-4b04-48d8-92b5-0074e7820692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:06:9b:7c:5b:99:3c:c2:57:44:9e:5a:54: b0:4a:98:90:03:ac:f9:57:aa:d7:f3:99:f6:96:ae: cf:ce:49:cb:c8:4c:7d:52:10:60:1d:aa:91:ba:8c: fb:1a:62:aa:6c:d6:1a:d7:19:ef:77:9c:ff:80:c1: b4:4a:f1:8d:86:ec:3d:a9:12:ca:9b:99:cc:7f:93: 4c:6a:38:bd:d2:68:89:4a:05:85:18:77:b5:43:1b: c7:cb:48:e0:bf:91:fc:cd:8f:11:16:74:cf:ce:14: 38:54:49:9a:0a:33:98:c0:e0:d4:d5:90:8c:20:a4: 43:79:09:71:80:ec:a5:02:c7:b3:ef:39:74:8d:0e: 6d:81:41:62:28:fe:f9:8c:44:a4:07:fd:12:d9:c4: 1d:8f:a6:97:87:a3:f8:a4:f0:4a:11:de:5d:25:d8: 7f:b6:b0:78:ea:8a:1e:a4:a8:c3:6f:5c:7b:e4:50: 1d:1d:4b:c7:18:34:a2:48:33:a9:9e:e0:ca:aa:a7: 15:c2:58:b3:dc:40:57:37:0f:30:af:4a:a4:7a:fa: fa:fe:86:ed:39:e7:dd:32:6c:de:60:1e:79:41:62: b9:fd:ae:05:56:13:23:a5:13:29:99:13:59:4b:50: 95:b9:fb:cf:1f:a2:02:b8:de:af:6d:a0:c9:1d:50: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:D1:97:98:6E:2E:2B:46:EE:CD:13:22:BD:2E:D0:75:0F:67:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 198.22.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a9:80:0b:f6:86:ea:de:64:b2:9b:af:8f:f2:b2:6f:9d:c5: 9a:6a:b0:ef:62:72:7f:9c:5c:b2:25:73:2c:50:66:9d:10:d2: 17:38:1e:34:83:ba:56:09:06:6a:aa:c4:04:f5:6b:38:7e:c3: 42:cc:36:37:fa:93:f1:8a:0a:ce:89:1d:a9:b7:9e:6d:68:ce: c0:a4:fb:f2:ef:65:4c:20:2f:eb:54:35:f1:9a:9f:c0:2d:b1: df:44:33:3b:26:4d:15:6e:36:cc:ef:46:7c:40:37:95:38:55: f2:37:3c:80:52:2f:7b:a1:e3:32:88:4a:1a:a6:b0:8a:a3:da: d7:77:8b:19:5d:43:da:8f:ab:59:a7:7a:85:41:39:24:5a:9c: fa:32:c6:29:e4:49:be:d9:35:74:97:a2:f1:06:76:98:2a:03: c2:68:d8:c1:6f:31:49:15:82:27:7c:0e:fc:ac:46:5c:a2:aa: 26:e0:59:24:fc:14:53:a4:30:6d:d3:bb:1d:25:36:b7:4b:97: 94:45:df:8b:cd:24:78:07:3b:05:e3:62:a4:3a:04:31:af:d5: ba:af:5b:23:d1:4d:0e:cb:78:84:c7:55:10:0e:45:36:58:61: 6c:61:2e:bc:bb:87:2b:50:e0:15:0d:86:04:28:0b:a6:0e:10: b5:6d:99:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEnnOFG+Nwj0vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OTdmZTU3NDktNGIwNC00OGQ4LTkyYjUtMDA3NGU3ODIwNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKQGm3xbmTzCV0SeWlSwSpiQA6z5V6rX85n2 lq7PzknLyEx9UhBgHaqRuoz7GmKqbNYa1xnvd5z/gMG0SvGNhuw9qRLKm5nMf5NM aji90miJSgWFGHe1QxvHy0jgv5H8zY8RFnTPzhQ4VEmaCjOYwODU1ZCMIKRDeQlx gOylAsez7zl0jQ5tgUFiKP75jESkB/0S2cQdj6aXh6P4pPBKEd5dJdh/trB46ooe pKjDb1x75FAdHUvHGDSiSDOpnuDKqqcVwliz3EBXNw8wr0qkevr6/obtOefdMmze YB55QWK5/a4FVhMjpRMpmRNZS1CVufvPH6ICuN6vbaDJHVCV3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKx0ZeYbi4rRu7NEyK9LtB1D2cFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvM2UxOTYwNzktODY5NS0z MGVjLTk3YWQtYTAxNDA5OGE2MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+pgAv2hureZLKbr4/ysm+dxZpqsO9icn+cXLIlcyxQZp0Q0hc4HjSD ulYJBmqqxAT1azh+w0LMNjf6k/GKCs6JHam3nm1ozsCk+/LvZUwgL+tUNfGan8At sd9EMzsmTRVuNszvRnxAN5U4VfI3PIBSL3uh4zKIShqmsIqj2td3ixldQ9qPq1mn eoVBOSRanPoyxinkSb7ZNXSXovEGdpgqA8Jo2MFvMUkVgid8DvysRlyiqibgWST8 FFOkMG3Tux0lNrdLl5RF34vNJHgHOwXjYqQ6BDGv1bqvWyPRTQ7LeITHVRAORTZY YWxhLry7hytQ4BUNhgQoC6YOELVtmUg= -----END CERTIFICATE-----Generated at Fri Oct 17 11:31:41 2025 by rpki-client