$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa File: a872c634-efde-3fa0-ad81-f82aaeee1307.roa (raw, json) Hash identifier: iO0GLTQ+f2Pes3sVAfx3OkDNCZBOwI1YAHjsTgNlfHQ= Subject key identifier: BB:B8:F7:B2:1C:C1:9A:B0:72:5F:92:C6:A7:21:1F:A2:6A:7A:58:81 Certificate issuer: /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0 Certificate serial: 010D0C9F4328584AECC14954562212D40535BCC0 Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 400133 IP address blocks: 198.145.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:49:54:56:22:12:d4:05:35:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=addfb66a-c80e-45fd-b216-71d087eaeb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:03:7a:f9:84:f3:40:91:a7:96:35:a9:5b: 83:dc:db:40:f2:ba:80:5e:0b:07:9a:2b:ad:31:c2: cf:6b:08:f1:73:8f:4d:f1:76:25:5b:bc:5c:e3:02: 4b:79:48:19:87:d5:ba:41:1a:ce:a0:1c:19:42:d4: 21:d5:87:82:92:6b:a0:3e:bf:b6:4d:1b:ce:f8:09: ad:5e:03:2f:7d:23:01:92:ed:a0:1f:ec:bc:e7:a9: dc:de:0f:78:32:10:56:2b:d5:ab:31:f0:fa:73:a5: 4a:da:93:93:da:4a:3d:fb:57:f4:27:4b:2e:de:3b: e8:c5:18:8b:c0:ab:cc:e6:28:6d:e7:a2:9b:44:25: c5:fb:2e:79:cb:ae:7b:fa:b8:92:35:49:d6:30:2d: 0b:ec:57:36:c0:d8:ad:76:f7:55:d0:7e:af:77:14: 74:7d:93:76:f7:02:6f:80:c7:d5:e8:65:ba:2f:7a: 53:f3:70:56:34:f1:90:4d:e9:73:e9:0c:d6:c4:e3: c9:8e:4f:21:98:68:20:0a:5d:f1:00:5b:d6:d1:af: 50:0a:ee:a4:df:f6:ea:2d:6b:b4:91:3f:33:d3:4f: 6f:3f:91:29:8e:14:e3:de:30:93:64:8c:b9:17:b4: 6d:cf:c4:59:1b:7a:8a:1f:2e:31:10:64:18:ee:75: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:F7:B2:1C:C1:9A:B0:72:5F:92:C6:A7:21:1F:A2:6A:7A:58:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl X509v3 Authority Key Identifier: keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer sbgp-ipAddrBlock: critical IPv4: 198.145.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ab:bb:12:49:ae:11:91:cb:70:ab:a3:c2:40:d3:2f:3d:c7: ec:3c:ac:bb:20:a7:0c:85:1d:01:bb:69:d3:ce:1c:7b:ed:b5: 03:36:f1:81:6a:c9:a6:35:4e:b0:54:34:27:6d:d8:f5:a2:20: ec:17:7a:51:4f:ad:15:5d:97:e5:79:8d:28:2c:2b:43:80:cd: 76:9f:34:7e:48:13:de:49:ad:a1:a9:07:9d:4b:ad:b8:e0:25: 55:75:56:27:2b:be:df:5a:a6:b7:e6:09:7d:8f:ff:23:93:01: ca:fb:e3:fc:df:cb:9e:d9:fc:c2:73:43:79:50:a5:15:1e:e9: 95:2d:77:3b:78:1f:83:b9:08:c4:20:49:2b:e5:92:e7:ec:1a: e6:f2:9c:53:c8:55:7b:f3:62:ff:6f:2f:e0:f9:28:f7:73:c6: 1e:6c:2e:e9:cb:26:c0:df:01:71:da:ba:8f:c6:4b:df:13:b2: c5:10:98:f9:b5:4a:36:93:ea:1f:39:8d:e5:3a:e4:d9:bc:6a: 19:37:3c:0d:6b:37:ac:3c:63:0b:f1:20:52:3c:cc:77:1f:ef: ce:4a:2e:e3:62:ad:3d:18:01:6a:e3:00:9e:f7:5d:b3:38:17: 18:1d:38:77:83:dc:f7:34:df:1f:da:a5:27:89:c5:5f:92:13: d6:33:03:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUlUViIS1AU1vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGExODQ2ZWQtZWY4NC00ZWFiLWJmYmItMWU5NGI2MzAy Y2EwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWRkZmI2NmEtYzgwZS00NWZkLWIyMTYtNzFkMDg3ZWFlYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46cDevmE80CRp5Y1qVuD3NtA8rqAXgsHmiut McLPawjxc49N8XYlW7xc4wJLeUgZh9W6QRrOoBwZQtQh1YeCkmugPr+2TRvO+Amt XgMvfSMBku2gH+y856nc3g94MhBWK9WrMfD6c6VK2pOT2ko9+1f0J0su3jvoxRiL wKvM5iht56KbRCXF+y55y657+riSNUnWMC0L7Fc2wNitdvdV0H6vdxR0fZN29wJv gMfV6GW6L3pT83BWNPGQTelz6QzWxOPJjk8hmGggCl3xAFvW0a9QCu6k3/bqLWu0 kT8z009vP5EpjhTj3jCTZIy5F7Rtz8RZG3qKHy4xEGQY7nUzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu497IcwZqwcl+SxqchH6JqeliBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4 NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0YjYzMDJjYTAvYTg3MmM2MzQtZWZkZS0z ZmEwLWFkODEtZjgyYWFlZWUxMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGExODQ2ZWQtZWY4NC00ZWFiLWJm YmItMWU5NGI2MzAyY2EwLzBhMTg0NmVkLWVmODQtNGVhYi1iZmJiLTFlOTRiNjMw MmNhMC5jcmwwHwYDVR0jBBgwFoAUWLdnJaxOOUf4VE9sLyDBBmhmIYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0 YjYzMDJjYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmruxJJrhGRy3Cro8JA0y89x+w8rLsgpwyFHQG7adPOHHvttQM28YFq yaY1TrBUNCdt2PWiIOwXelFPrRVdl+V5jSgsK0OAzXafNH5IE95JraGpB51Lrbjg JVV1Vicrvt9aprfmCX2P/yOTAcr74/zfy57Z/MJzQ3lQpRUe6ZUtdzt4H4O5CMQg SSvlkufsGubynFPIVXvzYv9vL+D5KPdzxh5sLunLJsDfAXHauo/GS98TssUQmPm1 SjaT6h85jeU65Nm8ahk3PA1rN6w8YwvxIFI8zHcf785KLuNirT0YAWrjAJ73XbM4 FxgdOHeD3Pc03x/apSeJxV+SE9YzA8A= -----END CERTIFICATE-----Generated at Thu Aug 21 10:29:33 2025 by rpki-client