$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa File: dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json) Hash identifier: BlEatKJz4XFI65C1ZkEd9zNRIaywUzMw8qpmaGGrp4g= Subject key identifier: C7:CA:AE:B3:ED:BB:63:BF:CD:01:88:7F:56:F8:C6:EC:35:3F:98:C6 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6631F19C91ED03CEFA3CF980 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 198.89.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f1:9c:91:ed:03:ce:fa:3c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=86cf492b-5aab-4d9b-9c32-4b3e821dc8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:b0:ed:5b:03:a6:99:fb:de:7b:10:fe:ca: 62:f3:14:c8:82:71:9f:3c:c3:48:02:74:32:2e:05: 21:dd:fc:0e:11:ab:57:46:47:a1:58:93:a8:95:3d: ff:76:1a:e4:74:62:b3:48:81:aa:11:5b:57:15:d8: a3:1f:72:1b:69:95:b0:e8:8d:82:c1:be:9c:0a:0c: d1:5e:52:22:f8:7e:50:f4:10:ed:e8:bf:19:d7:42: 27:77:e5:14:9d:74:78:a3:47:7f:05:ea:91:04:b8: 94:03:ca:db:39:7b:e3:f8:05:dd:c4:6f:fe:cc:ce: 1f:cb:4c:2d:30:7d:05:61:eb:a9:2e:31:7b:5f:e5: 9b:fd:fd:63:d8:24:a0:06:c9:7b:13:7e:df:3d:1a: aa:8d:3e:a7:46:d6:4e:33:aa:ec:7e:b7:7e:46:77: 87:47:1f:e8:6a:23:df:b6:ed:3d:4e:f4:40:8e:01: 5c:e5:21:53:43:f4:cf:d1:cc:6c:b2:7f:b5:4f:5f: ef:26:9f:1b:57:3a:fb:d0:88:85:c7:e7:f9:fa:f7: 32:50:d1:6b:5c:b6:a6:c9:e1:6a:3b:78:dc:e0:e6: 69:ad:33:f5:c3:05:62:27:08:6c:58:f6:61:86:29: 20:c9:b7:ef:4f:8d:20:36:e1:e3:17:69:9e:0b:ed: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CA:AE:B3:ED:BB:63:BF:CD:01:88:7F:56:F8:C6:EC:35:3F:98:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 198.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c4:1b:6c:ae:e9:aa:4a:0c:fb:b1:2c:1f:6d:e4:48:f3:8d: 6b:7f:7e:36:f7:bd:18:c9:f4:fd:27:08:23:b9:0b:67:47:04: 54:bd:ac:bd:e6:b7:12:d1:d3:99:d7:e0:d1:0e:4f:12:a0:a3: bb:a9:dd:3f:4c:24:bd:f6:d6:94:f2:12:c6:7f:c2:9d:9e:c2: bb:93:1c:9b:87:16:5a:43:83:b1:9b:71:24:c9:e0:cf:1a:c0: 53:46:aa:5f:ee:6e:86:b5:37:c5:1d:76:35:81:4e:33:f8:96: c1:2b:b3:ae:18:48:ce:37:90:73:40:ba:5c:a4:53:9f:4e:bb: 5b:0f:d1:dc:2d:b7:7b:87:c7:a4:96:ab:1c:3a:5a:ac:a9:e4: 4c:1d:b9:54:74:8b:9e:44:9f:8a:23:ac:09:d0:c1:96:0a:e6: a7:33:b9:5a:2b:e2:dd:1e:ed:a6:05:be:0b:5f:8f:40:d4:5c: d8:ec:5d:b2:b0:eb:34:ff:eb:59:1f:01:8b:5a:30:3d:de:11: ea:0b:42:5f:97:cc:ba:60:9f:86:00:00:92:90:92:f1:21:3c: f0:39:0c:95:53:31:09:53:e9:ff:ae:1a:44:69:de:51:ec:e8: d1:26:66:95:fa:e2:60:dc:ca:fc:e5:48:66:ca:f1:7c:d9:92: 9e:ad:49:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfGcke0Dzvo8+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ODZjZjQ5MmItNWFhYi00ZDliLTljMzItNGIzZTgyMWRjOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3iw7VsDppn73nsQ/spi8xTIgnGfPMNIAnQy LgUh3fwOEatXRkehWJOolT3/dhrkdGKzSIGqEVtXFdijH3IbaZWw6I2Cwb6cCgzR XlIi+H5Q9BDt6L8Z10Ind+UUnXR4o0d/BeqRBLiUA8rbOXvj+AXdxG/+zM4fy0wt MH0FYeupLjF7X+Wb/f1j2CSgBsl7E37fPRqqjT6nRtZOM6rsfrd+RneHRx/oaiPf tu09TvRAjgFc5SFTQ/TP0cxssn+1T1/vJp8bVzr70IiFx+f5+vcyUNFrXLamyeFq O3jc4OZprTP1wwViJwhsWPZhhikgybfvT40gNuHjF2meC+2PHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfKrrPtu2O/zQGIf1b4xuw1P5jGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZGRlZDhlNjEtMjY1NC0z NjdjLThiZjItYjdjODIwYzEwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3EG2yu6apKDPuxLB9t5EjzjWt/fjb3vRjJ9P0nCCO5C2dHBFS9rL3m txLR05nX4NEOTxKgo7up3T9MJL321pTyEsZ/wp2ewruTHJuHFlpDg7GbcSTJ4M8a wFNGql/uboa1N8UddjWBTjP4lsErs64YSM43kHNAulykU59Ou1sP0dwtt3uHx6SW qxw6Wqyp5EwduVR0i55En4ojrAnQwZYK5qczuVor4t0e7aYFvgtfj0DUXNjsXbKw 6zT/61kfAYtaMD3eEeoLQl+XzLpgn4YAAJKQkvEhPPA5DJVTMQlT6f+uGkRp3lHs 6NEmZpX64mDcyvzlSGbK8XzZkp6tSaY= -----END CERTIFICATE-----Generated at Sun Oct 19 01:04:37 2025 by rpki-client