$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa File: 41de201d-f0c9-3b01-828a-2888d2923ae3.roa (raw, json) Hash identifier: QIXDXgWzYWL2XG2GpQt8wOCG9WYU00+/ZVgNm+uiPCo= Subject key identifier: D0:29:77:5C:94:E0:74:63:EB:F0:43:88:4F:8A:F0:CD:68:9A:B9:DE Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584B0A1167AA6EB0C512A8F6DAE8 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 55101 IP address blocks: 198.97.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:67:aa:6e:b0:c5:12:a8:f6:da:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=82d5eb9a-a194-4f58-86e4-8a33fd7ffa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:0d:3d:b7:43:a2:bf:b0:ce:81:28:3e:85: cd:24:f1:d5:d9:cf:a8:7d:04:1e:fa:72:dc:03:f6: bf:a9:53:82:ea:36:d3:8f:6f:33:29:71:ba:c2:cd: 40:ec:0c:4c:75:e6:18:41:18:f4:61:77:b5:cd:70: 74:a0:4f:92:57:1e:d3:30:0e:4d:1d:c7:72:99:9c: f2:4f:e2:c4:72:18:d3:13:3a:b0:17:74:d0:9b:0d: 23:ee:c0:8c:02:7b:d6:d0:f5:74:b2:03:a1:40:72: 14:41:d8:53:e1:71:aa:35:79:fd:1a:47:6b:16:4d: c4:49:c3:62:bc:8b:a6:82:49:80:9d:97:31:15:6f: 2f:01:aa:c7:ad:2f:34:ed:bb:52:dd:a2:69:f1:e4: 79:50:65:be:a6:a1:3b:b9:dc:a2:c7:45:94:f0:b8: 4f:3c:57:f1:aa:31:e3:fe:04:23:cc:e9:25:1a:94: 13:45:f4:0f:83:cb:2d:c7:37:6b:6a:bf:bd:18:2e: f2:ff:b3:84:88:54:9b:aa:fa:d4:77:74:85:5e:7e: c4:a8:c9:9b:30:a0:a7:49:8c:50:0d:a4:2c:d3:57: a5:0c:47:cf:12:4b:05:6e:37:be:d9:40:dd:0e:a1: 64:84:c3:54:de:a8:e5:96:4c:75:a6:f1:dc:28:0b: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:77:5C:94:E0:74:63:EB:F0:43:88:4F:8A:F0:CD:68:9A:B9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:13:ab:0c:c6:8b:06:46:d6:7f:1e:9b:43:0a:a5:95:51:0c: 68:11:48:80:85:1e:c4:35:6f:d7:a2:82:0d:8d:36:58:4b:a3: d9:84:bd:a8:49:ec:fb:6f:4c:a6:d1:6e:f4:44:27:27:97:6e: 37:4c:c4:dc:af:d7:00:65:52:22:0a:f9:a7:9c:ad:b9:c7:54: 57:18:13:93:bd:73:86:98:6d:ea:ce:f0:08:52:e1:bf:a8:59: ab:02:4a:7b:8b:e4:e6:23:db:8b:89:3b:64:b9:e6:4b:1c:cc: cf:d0:77:61:bc:8e:df:f2:a8:2d:70:e7:53:a2:44:c4:66:dc: 08:e6:7a:dd:b2:2a:6b:2c:53:75:73:ed:67:9f:d3:6c:fc:0b: c4:8f:f9:9c:68:55:c8:ac:8d:1d:2f:8d:d1:29:a6:92:55:27: 92:f3:b6:89:a9:34:ca:eb:c4:88:3f:80:0f:a2:65:5e:59:57: 54:c3:c5:f1:c9:08:43:84:2b:3f:a2:3b:a8:74:21:25:cb:e6: da:8f:47:4b:80:89:dd:48:c0:69:76:76:4a:0a:9b:65:65:d3: b4:8a:ce:81:77:22:79:c3:b5:6f:e4:37:df:07:8f:f2:51:9b: 93:66:7d:1d:ef:30:89:10:cd:48:ee:37:b3:75:72:c4:cb:e2: 97:e7:ab:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWeqbrDFEqj22ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ODJkNWViOWEtYTE5NC00ZjU4LTg2ZTQtOGEzM2ZkN2ZmYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopsNPbdDor+wzoEoPoXNJPHV2c+ofQQe+nLc A/a/qVOC6jbTj28zKXG6ws1A7AxMdeYYQRj0YXe1zXB0oE+SVx7TMA5NHcdymZzy T+LEchjTEzqwF3TQmw0j7sCMAnvW0PV0sgOhQHIUQdhT4XGqNXn9GkdrFk3EScNi vIumgkmAnZcxFW8vAarHrS807btS3aJp8eR5UGW+pqE7udyix0WU8LhPPFfxqjHj /gQjzOklGpQTRfQPg8stxzdrar+9GC7y/7OEiFSbqvrUd3SFXn7EqMmbMKCnSYxQ DaQs01elDEfPEksFbje+2UDdDqFkhMNU3qjllkx1pvHcKAvBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNApd1yU4HRj6/BDiE+K8M1omrneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvNDFkZTIwMWQtZjBjOS0z YjAxLTgyOGEtMjg4OGQyOTIzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoTqwzGiwZG1n8em0MKpZVRDGgRSICFHsQ1b9eigg2NNlhLo9mEvahJ 7PtvTKbRbvREJyeXbjdMxNyv1wBlUiIK+aecrbnHVFcYE5O9c4aYberO8AhS4b+o WasCSnuL5OYj24uJO2S55ksczM/Qd2G8jt/yqC1w51OiRMRm3Ajmet2yKmssU3Vz 7Wef02z8C8SP+ZxoVcisjR0vjdEpppJVJ5LztompNMrrxIg/gA+iZV5ZV1TDxfHJ CEOEKz+iO6h0ISXL5tqPR0uAid1IwGl2dkoKm2Vl07SKzoF3InnDtW/kN98Hj/JR m5NmfR3vMIkQzUjuN7N1csTL4pfnq+4= -----END CERTIFICATE-----Generated at Fri Sep 5 02:35:18 2025 by rpki-client