$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa File: 4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa (raw, json) Hash identifier: qswsDrNSP4UHXQvrP/hWY+GSbqNm4eI1Q5VxNdhdi2U= Subject key identifier: 9E:D5:9A:D1:52:CC:F9:76:6A:C0:A2:0A:58:11:4E:B6:DA:E6:C8:3B Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584B0A1167B887DFCF3C02FF5DB0 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 55101 IP address blocks: 198.97.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:67:b8:87:df:cf:3c:02:ff:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=2ac22999-9543-45c1-95c0-089dc820dc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:47:87:8e:61:56:4a:f0:c0:67:27:fb:0b: 60:71:a0:77:35:88:50:fb:54:77:3d:bb:2b:0a:67: 8e:c5:9c:49:91:fa:dd:95:20:79:b3:20:23:6e:a6: 2a:cf:ba:a7:97:df:dd:18:0d:98:17:c8:4d:61:57: dd:8f:5c:9b:d0:55:d4:ec:23:c5:b5:8a:e4:f5:d0: a4:02:79:0d:f2:60:e1:be:9d:f6:98:bb:89:3c:c9: 38:5c:95:7f:40:08:28:c8:55:5a:f3:14:6e:02:00: 33:27:7c:1a:40:25:44:65:9e:51:4b:09:35:22:6d: 5b:b7:97:99:d5:2d:0a:1c:1e:d9:60:8e:9c:a3:6b: 60:a9:59:d3:77:ee:c2:62:ba:44:11:bf:88:45:22: da:95:39:8b:c7:af:48:bb:50:f4:92:d2:55:40:40: 19:21:a0:a3:5d:5f:06:bd:99:bc:71:e4:fe:d8:24: bb:7b:ed:03:ce:73:1c:cd:2a:f0:26:1b:8e:78:2c: a5:dc:60:02:4d:fa:fd:92:b3:54:bb:a4:85:69:bf: 34:f6:a8:f8:29:05:9b:32:54:4a:14:93:88:80:c6: 3f:de:e5:3f:0e:a9:dc:5f:7d:00:9c:d9:82:51:68: 59:ad:28:74:2b:16:64:27:92:61:90:38:06:86:9c: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D5:9A:D1:52:CC:F9:76:6A:C0:A2:0A:58:11:4E:B6:DA:E6:C8:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:42:db:6c:7f:c8:81:77:f4:c5:f8:68:05:c4:42:66:8c:4b: d2:30:80:dd:8e:ed:63:5f:6a:3f:fe:43:74:5d:c5:75:b7:0a: fa:e6:c5:48:80:33:15:8c:e4:cb:3d:14:fb:7b:8b:38:33:15: 13:26:c4:84:68:aa:71:6c:19:3a:58:3e:50:93:d1:fe:54:f9: b2:cc:ab:70:b6:f9:4a:b9:fd:70:0e:0e:1c:44:16:0e:d0:89: db:da:96:71:8c:80:60:b4:a1:9b:94:71:4c:c5:b1:2a:64:9d: 8c:bc:42:8d:0d:7a:33:54:38:9f:c4:d7:3c:f9:98:3c:0d:0f: e5:7a:7c:57:02:31:5d:ad:3a:6a:7f:bc:a6:10:9b:4b:f3:0c: 95:7b:1b:72:cd:75:19:ba:b4:e7:99:4c:5e:b9:ce:6c:81:10: 70:b2:5d:cf:25:ad:f8:b3:0e:fc:88:25:24:71:63:37:71:9a: b0:56:a1:71:32:98:18:38:09:75:53:af:f8:16:4c:be:c1:58: 03:c4:48:bf:2a:1b:88:d2:30:72:4d:5c:cd:6e:1d:35:48:5b: a6:9a:16:a9:e5:a0:2b:7d:13:00:04:92:a3:e1:d2:7d:bd:17: 7e:8f:13:f4:59:55:1f:c9:0c:2c:c1:93:3d:80:1c:87:04:35: dc:3f:b7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWe4h9/PPAL/XbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MmFjMjI5OTktOTU0My00NWMxLTk1YzAtMDg5ZGM4MjBkYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDxHh45hVkrwwGcn+wtgcaB3NYhQ+1R3Pbsr CmeOxZxJkfrdlSB5syAjbqYqz7qnl9/dGA2YF8hNYVfdj1yb0FXU7CPFtYrk9dCk AnkN8mDhvp32mLuJPMk4XJV/QAgoyFVa8xRuAgAzJ3waQCVEZZ5RSwk1Im1bt5eZ 1S0KHB7ZYI6co2tgqVnTd+7CYrpEEb+IRSLalTmLx69Iu1D0ktJVQEAZIaCjXV8G vZm8ceT+2CS7e+0DznMczSrwJhuOeCyl3GACTfr9krNUu6SFab809qj4KQWbMlRK FJOIgMY/3uU/DqncX30AnNmCUWhZrSh0KxZkJ5JhkDgGhpwpjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7VmtFSzPl2asCiClgRTrba5sg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvNGJhZDJlZDUtNGFmNi0z NTk3LWFiM2QtZWU4ZWQwMmEwNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5C22x/yIF39MX4aAXEQmaMS9IwgN2O7WNfaj/+Q3RdxXW3CvrmxUiA MxWM5Ms9FPt7izgzFRMmxIRoqnFsGTpYPlCT0f5U+bLMq3C2+Uq5/XAODhxEFg7Q idvalnGMgGC0oZuUcUzFsSpknYy8Qo0NejNUOJ/E1zz5mDwND+V6fFcCMV2tOmp/ vKYQm0vzDJV7G3LNdRm6tOeZTF65zmyBEHCyXc8lrfizDvyIJSRxYzdxmrBWoXEy mBg4CXVTr/gWTL7BWAPESL8qG4jSMHJNXM1uHTVIW6aaFqnloCt9EwAEkqPh0n29 F36PE/RZVR/JDCzBkz2AHIcENdw/t9s= -----END CERTIFICATE-----Generated at Fri Sep 5 04:20:10 2025 by rpki-client