$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa File: d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa (raw, json) Hash identifier: a7wcm92963zKa8bgp92FcJ647llDaCJWlD7ebDYe0mc= Subject key identifier: BC:48:16:1B:4D:8B:C1:F6:38:B6:D9:9F:D3:83:C4:4A:8A:B4:31:85 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584B0A11679C576F999CB53D2230 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 55101 IP address blocks: 198.97.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:67:9c:57:6f:99:9c:b5:3d:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=fc0ae199-07a9-46ea-bd1e-ca6173eeddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:67:0e:6a:2e:4c:8e:1e:ce:af:e5:25:65: 94:41:cb:77:e5:b9:cd:e4:e0:04:67:59:35:4c:3b: 49:6e:dd:8f:34:01:6d:9a:04:9c:3c:92:c1:ee:a1: 3a:d6:ae:52:52:4b:79:01:82:b6:73:05:da:29:fd: 9e:ae:12:db:df:30:11:ce:a7:ae:1d:1a:0a:eb:a5: 8a:1d:76:f4:33:19:d1:22:fb:94:ad:bd:2b:f0:76: e4:60:98:9a:42:aa:0d:29:61:11:91:8a:94:9b:76: 23:eb:ad:05:65:82:d0:db:7d:24:28:1e:8e:3e:93: 40:98:a8:23:3d:f3:22:40:8e:a2:be:bb:51:67:7c: ed:97:2c:ae:46:9e:92:7a:d5:60:8a:54:6b:8f:03: a6:ed:1c:46:44:13:09:3e:98:53:51:5d:bd:8a:dc: 0a:8e:52:25:47:b2:a3:28:0b:f2:04:fb:4f:b1:fb: 49:27:e8:48:c0:47:9a:98:60:48:da:34:68:ea:6c: a8:a6:db:99:17:94:68:6c:24:e2:44:e6:ef:78:a7: 26:10:a5:15:e1:3b:35:ab:a3:53:2a:bc:bd:89:2e: 07:5e:b3:8f:64:f2:76:66:89:a0:9c:79:e6:7f:f8: 2e:b5:b9:c1:20:5e:df:22:c5:78:24:81:88:dd:90: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:16:1B:4D:8B:C1:F6:38:B6:D9:9F:D3:83:C4:4A:8A:B4:31:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fe:6e:87:be:dd:a2:fb:33:f9:60:39:fb:fa:06:05:05:46: 4e:de:30:40:d6:ee:cf:86:1b:fe:8f:2c:11:7c:35:10:7b:e7: a1:8a:c3:ee:62:29:5f:5b:06:19:6b:e7:37:8f:9d:6b:c6:94: 4c:fa:9c:c8:17:e0:e4:bf:2a:0f:3d:25:fe:ac:be:84:30:2a: ac:ca:ff:bb:84:12:c8:bf:2e:69:1b:e0:ce:93:2d:29:98:f2: 02:27:af:90:d0:bc:2b:65:00:41:77:42:27:64:f6:a6:62:91: f8:0a:67:dd:e6:14:9a:aa:fc:d0:d7:90:89:32:52:53:59:ca: d3:77:fe:7a:c3:31:bc:0a:9b:aa:b4:07:c8:10:21:89:43:d9: 9c:4a:4e:d6:39:d0:6a:d4:1c:04:f1:71:b6:25:bd:5f:c7:67: d7:06:c4:2f:78:17:9b:2b:66:d7:ec:7e:3b:eb:b2:16:e6:1e: 8f:c2:15:78:e3:3a:64:5c:19:23:e6:70:4c:d6:5d:42:78:66: fa:e4:ac:f9:d0:9a:9c:f1:07:22:90:c8:67:e9:7a:b0:ab:71: 76:1f:22:c4:ce:04:e7:9e:44:8a:7e:ed:fe:85:ef:86:2e:b2: 4a:e4:ce:c1:dd:2e:db:b1:cf:9d:94:0c:0c:01:eb:c5:56:5d: 5c:37:fa:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWecV2+ZnLU9IjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZmMwYWUxOTktMDdhOS00NmVhLWJkMWUtY2E2MTczZWVkZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK9nDmouTI4ezq/lJWWUQct35bnN5OAEZ1k1 TDtJbt2PNAFtmgScPJLB7qE61q5SUkt5AYK2cwXaKf2erhLb3zARzqeuHRoK66WK HXb0MxnRIvuUrb0r8HbkYJiaQqoNKWERkYqUm3Yj660FZYLQ230kKB6OPpNAmKgj PfMiQI6ivrtRZ3ztlyyuRp6SetVgilRrjwOm7RxGRBMJPphTUV29itwKjlIlR7Kj KAvyBPtPsftJJ+hIwEeamGBI2jRo6myoptuZF5RobCTiRObveKcmEKUV4Ts1q6NT Kry9iS4HXrOPZPJ2ZomgnHnmf/gutbnBIF7fIsV4JIGI3ZC+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxIFhtNi8H2OLbZn9ODxEqKtDGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvZDdkMTljNmEtYWNkMy0z NjIyLThjZjYtYzBlMDFmY2UxYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP+boe+3aL7M/lgOfv6BgUFRk7eMEDW7s+GG/6PLBF8NRB756GKw+5i KV9bBhlr5zePnWvGlEz6nMgX4OS/Kg89Jf6svoQwKqzK/7uEEsi/Lmkb4M6TLSmY 8gInr5DQvCtlAEF3Qidk9qZikfgKZ93mFJqq/NDXkIkyUlNZytN3/nrDMbwKm6q0 B8gQIYlD2ZxKTtY50GrUHATxcbYlvV/HZ9cGxC94F5srZtfsfjvrshbmHo/CFXjj OmRcGSPmcEzWXUJ4ZvrkrPnQmpzxByKQyGfperCrcXYfIsTOBOeeRIp+7f6F74Yu skrkzsHdLtuxz52UDAwB68VWXVw3+ls= -----END CERTIFICATE-----Generated at Fri Sep 5 02:26:13 2025 by rpki-client