$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa File: 1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa (raw, json) Hash identifier: lmjX2h3E7JmfvAjqa3YHoqD/zcj/kIiNlIs6rg6KWIE= Subject key identifier: 9F:F1:A4:39:0B:3A:94:91:A6:D4:06:62:57:EC:68:DF:02:E0:09:2B Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584B36BC471E7E6C0994CB9C9720 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 198.97.212.0/24 maxlen: 24 198.97.213.0/24 maxlen: 24 198.97.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:47:1e:7e:6c:09:94:cb:9c:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=a6c1b263-f27e-448f-aec3-474bbc98a076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:19:c2:e5:a8:d0:f1:39:bd:1d:58:a7:42: 41:c9:da:09:a1:04:19:d8:54:7d:c9:4c:4a:b0:e3: 87:10:bb:9d:60:98:63:39:3b:bf:a9:3d:69:5f:ce: 0a:a7:2a:d0:2a:87:65:26:6c:69:7a:90:a3:bb:5c: 13:67:84:8d:1f:de:81:6e:55:79:5d:a1:fa:a2:d0: 2e:04:1f:22:7d:cf:69:33:51:a7:d9:af:4a:b4:b3: 41:3e:2f:2e:15:83:72:0f:ab:0e:73:7e:20:1e:d2: 4a:ce:65:6b:bc:4c:58:f9:76:bc:7a:4a:ee:3a:a4: f0:7b:52:0a:14:8c:92:e8:09:c1:24:dc:e1:61:8d: 5e:e6:26:ad:bb:be:03:65:98:0f:df:ba:c9:98:9c: c9:4e:33:2c:33:4d:08:c7:b2:9c:af:63:70:f9:f4: be:2f:49:e5:25:b7:4b:2f:c5:bf:58:81:6b:13:8b: 06:22:53:e5:3a:9d:75:59:fd:5c:7b:c5:4a:a1:82: d1:d9:68:96:3e:a8:7b:0b:6e:a3:9a:fc:4d:89:53: 02:75:b8:a4:10:89:9b:f0:35:fd:14:c4:04:b8:fc: b5:60:06:58:bf:7a:5a:f3:49:d1:4d:e1:ea:41:31: 8f:8e:df:59:43:b7:34:f5:53:12:cd:32:88:83:15: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:A4:39:0B:3A:94:91:A6:D4:06:62:57:EC:68:DF:02:E0:09:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0-198.97.214.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:3b:00:b8:6f:b0:1c:6a:25:87:6d:3b:72:87:e6:d4:73:fa: eb:d8:28:5f:9c:b5:ad:cd:8f:dd:9d:c1:cc:40:f1:7c:b3:24: 6b:e9:b3:2c:ff:7e:aa:db:08:10:fe:58:9c:56:12:13:a2:72: e5:66:67:61:ac:b6:ad:ac:16:0f:bf:e8:b9:17:a6:5f:a5:31: de:20:f6:45:d6:c9:3b:74:95:59:57:16:df:aa:f4:ad:04:93: 68:5e:f0:e5:14:32:db:c1:08:92:f5:81:4f:48:5d:92:c6:70: ce:48:8a:1c:58:64:ca:88:98:6a:ef:61:e7:51:73:4c:70:e8: e3:56:3e:58:17:94:06:7e:cb:0f:a9:99:2c:ea:45:14:13:a8: b4:ec:fb:6e:03:e0:44:e5:51:d4:e9:80:4e:ae:35:66:64:46: 6e:26:9d:f0:77:b2:2f:8c:22:dc:21:b4:6a:f8:38:7f:10:28: a6:c3:fb:64:ef:93:a3:d5:e2:a4:9e:2b:db:dc:8a:6c:b1:d1: 05:c8:88:b3:87:66:bb:6d:d9:f9:64:28:87:e4:27:ae:f2:2e: 26:e3:4b:b1:bc:df:61:be:b0:d3:28:a0:63:43:51:aa:60:e9: 39:a7:46:ce:6d:2b:ef:5d:16:24:cd:a7:d5:8c:56:0a:c5:12: 95:38:a6:5f -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs2vEcefmwJlMuclyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk YTZjMWIyNjMtZjI3ZS00NDhmLWFlYzMtNDc0YmJjOThhMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAZwuWo0PE5vR1Yp0JBydoJoQQZ2FR9yUxK sOOHELudYJhjOTu/qT1pX84KpyrQKodlJmxpepCju1wTZ4SNH96BblV5XaH6otAu BB8ifc9pM1Gn2a9KtLNBPi8uFYNyD6sOc34gHtJKzmVrvExY+Xa8ekruOqTwe1IK FIyS6AnBJNzhYY1e5iatu74DZZgP37rJmJzJTjMsM00Ix7Kcr2Nw+fS+L0nlJbdL L8W/WIFrE4sGIlPlOp11Wf1ce8VKoYLR2WiWPqh7C26jmvxNiVMCdbikEImb8DX9 FMQEuPy1YAZYv3pa80nRTeHqQTGPjt9ZQ7c09VMSzTKIgxVPyQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJ/xpDkLOpSRptQGYlfsaN8C4AkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvMWNiMmY3NzctYzdiZi0z Yjk4LWE5NTUtZmU2Y2Q2N2E5OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALGYdQD BADGYdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEA1jsAuG+wHGolh207cofm1HP669goX5y1rc2P3Z3BzEDx fLMka+mzLP9+qtsIEP5YnFYSE6Jy5WZnYay2rawWD7/ouRemX6Ux3iD2RdbJO3SV WVcW36r0rQSTaF7w5RQy28EIkvWBT0hdksZwzkiKHFhkyoiYau9h51FzTHDo41Y+ WBeUBn7LD6mZLOpFFBOotOz7bgPgROVR1OmATq41ZmRGbiad8HeyL4wi3CG0avg4 fxAopsP7ZO+To9XipJ4r29yKbLHRBciIs4dmu23Z+WQoh+QnrvIuJuNLsbzfYb6w 0yigY0NRqmDpOadGzm0r710WJM2n1YxWCsUSlTimXw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:25 2025 by rpki-client