$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa File: e9372a00-f021-34bf-9340-b56939c57a53.roa (raw, json) Hash identifier: a7W2vGb+TdlXQHFK8EOpYxseD8Sv3+/jS8BJrapvpVI= Subject key identifier: C1:06:F5:D5:AC:6B:50:FF:D1:5B:F9:88:E8:C3:1C:32:1D:BE:FA:00 Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584B0E4165F9F268E540E4875B80 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 401772 IP address blocks: 198.29.31.0/24 maxlen: 24 2602:f9e7:10::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:65:f9:f2:68:e5:40:e4:87:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=05fc72ee-f1eb-4d27-a140-a62f55db7737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:7c:de:07:c1:c5:61:16:54:3c:60:6f:23: ea:9b:23:74:80:2a:2a:49:a6:00:98:b5:ce:03:dc: 8a:a8:d8:a0:df:6c:e7:a6:bd:d9:d3:ed:75:e5:fa: ff:79:e2:73:7c:b0:f0:7f:9b:b5:14:61:be:27:64: ba:ed:a5:0e:4b:b7:c2:bc:11:06:01:3d:d3:0d:65: fe:45:cb:3e:ce:63:c3:48:e9:6c:5f:f7:0c:db:5f: 57:ae:e9:8c:df:04:24:f6:33:58:cd:ce:ac:05:6e: 10:7e:c9:e2:d4:ab:6d:54:d4:cf:e9:7a:1c:06:a6: 63:9f:e7:c8:66:ed:d8:ce:9a:6a:3d:2e:10:1e:a5: 37:41:7e:bc:9b:1b:0f:6e:92:bb:3a:84:d4:36:81: 13:6a:cd:9f:f0:e6:3e:d5:bf:44:57:0a:4e:15:f8: a4:35:a0:9b:32:37:aa:fb:20:e2:e5:7c:db:4a:b2: a6:c3:f8:4a:d7:47:1e:0c:3c:eb:dd:da:9c:e0:65: 67:03:9e:7f:00:43:c8:d6:bf:0d:26:53:ef:cd:19: a1:99:3a:0d:bd:e9:e0:27:2a:13:6a:92:0d:42:f7: 60:fa:5d:94:19:1d:ad:f9:d2:2c:74:a6:20:3e:15: d5:71:1f:b5:93:b6:5f:7e:94:44:c7:ad:b2:b3:8f: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:06:F5:D5:AC:6B:50:FF:D1:5B:F9:88:E8:C3:1C:32:1D:BE:FA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.31.0/24 IPv6: 2602:f9e7:10::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e8:21:cb:fa:46:15:32:3c:85:20:c0:f7:81:08:3f:3f:00: 62:45:2b:da:9d:e7:6b:d4:fb:0f:65:6e:d3:72:92:8a:8d:f4: d0:80:f0:ae:93:91:8f:c6:7f:1d:df:b4:1c:6d:9f:e3:a0:13: 1b:7e:24:d9:3b:1b:0e:97:59:12:2b:25:d3:80:c5:d6:6c:41: 95:68:fd:7f:22:ec:0f:78:4a:07:d4:73:a8:1f:b5:48:1a:bf: 02:e4:8f:7d:0d:92:22:53:30:40:cd:69:a7:9b:57:0c:0e:d4: 2c:dd:02:ca:19:9e:09:c9:38:73:a3:71:2a:e9:b0:0f:7e:77: 28:76:51:df:e8:d5:58:ca:ec:40:83:0a:f5:a1:6b:1c:10:85: a7:0c:0e:ba:08:a3:e5:a4:37:23:83:17:ad:4a:fc:dc:9a:de: 5a:59:e4:27:00:b3:c6:3d:1b:c3:70:91:12:40:f7:94:ca:f2: d7:56:ac:38:af:2c:d5:75:42:21:b3:c8:8f:f0:75:4c:97:2c: d3:a8:97:6c:25:6e:ac:65:b0:f2:b9:43:0c:ac:0e:53:ee:dc: b4:72:cc:55:6d:7b:78:0c:02:88:dc:24:cd:ed:87:0a:7a:4b: 44:da:e4:e8:fd:59:27:36:e0:b1:98:7e:5d:1f:65:ce:a1:72: dd:99:71:84 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsOQWX58mjlQOSHW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDVmYzcyZWUtZjFlYi00ZDI3LWExNDAtYTYyZjU1ZGI3NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1583gfBxWEWVDxgbyPqmyN0gCoqSaYAmLXO A9yKqNig32znpr3Z0+115fr/eeJzfLDwf5u1FGG+J2S67aUOS7fCvBEGAT3TDWX+ Rcs+zmPDSOlsX/cM219XrumM3wQk9jNYzc6sBW4Qfsni1KttVNTP6XocBqZjn+fI Zu3YzppqPS4QHqU3QX68mxsPbpK7OoTUNoETas2f8OY+1b9EVwpOFfikNaCbMjeq +yDi5XzbSrKmw/hK10ceDDzr3dqc4GVnA55/AEPI1r8NJlPvzRmhmToNvengJyoT apINQvdg+l2UGR2t+dIsdKYgPhXVcR+1k7ZffpREx62ys4+g8wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMEG9dWsa1D/0Vv5iOjDHDIdvvoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZTkzNzJhMDAtZjAyMS0z NGJmLTkzNDAtYjU2OTM5YzU3YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxh0fMA8E AgACMAkDBwMmAvnnABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADughy/pGFTI8hSDA94EIPz8AYkUr2p3n a9T7D2Vu03KSio300IDwrpORj8Z/Hd+0HG2f46ATG34k2TsbDpdZEisl04DF1mxB lWj9fyLsD3hKB9RzqB+1SBq/AuSPfQ2SIlMwQM1pp5tXDA7ULN0CyhmeCck4c6Nx KumwD353KHZR3+jVWMrsQIMK9aFrHBCFpwwOugij5aQ3I4MXrUr83JreWlnkJwCz xj0bw3CREkD3lMry11asOK8s1XVCIbPIj/B1TJcs06iXbCVurGWw8rlDDKwOU+7c tHLMVW17eAwCiNwkze2HCnpLRNrk6P1ZJzbgsZh+XR9lzqFy3ZlxhA== -----END CERTIFICATE-----Generated at Fri Sep 5 02:56:58 2025 by rpki-client