$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a75a217b-6cf1-381f-b6d9-deec303c985d.roa File: a75a217b-6cf1-381f-b6d9-deec303c985d.roa (raw, json) Hash identifier: FOgz60BEusGeKtfVLDNs5aB6J6FBZ3gS8HrOXbCXpC4= Subject key identifier: 72:C3:49:3D:40:27:1A:FE:B5:D5:F0:39:BF:17:80:AD:50:AE:F9:3A Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584B699C60843AC35A80BFC5B100 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a75a217b-6cf1-381f-b6d9-deec303c985d.roa Signing time: Sat 04 Oct 2025 18:22:39 +0000 ROA not before: Sat 04 Oct 2025 18:22:39 +0000 ROA not after: Fri 02 Jan 2026 19:22:39 +0000 asID: 30456 IP address blocks: 198.135.185.0/24 maxlen: 24 2602:2d1::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:9c:60:84:3a:c3:5a:80:bf:c5:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Oct 4 18:22:39 2025 GMT Not After : Jan 2 19:22:39 2026 GMT Subject: CN=1c2a1373-d687-4ae3-a5c3-74f70fe0f3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:9c:f8:05:7a:92:77:86:5d:4a:40:fe:e2: fb:f7:b8:47:09:94:f2:28:f5:42:d1:6e:da:a4:42: 85:ad:c2:bd:9e:21:67:22:87:a3:0c:7e:51:f3:62: f4:52:fc:be:f2:bd:93:27:3d:fa:a4:07:99:90:1b: 77:da:78:fb:d4:84:7d:cf:d7:7f:74:08:a4:6f:d4: b1:c1:a5:51:fa:68:33:e5:e7:b8:90:94:b8:59:07: 1c:45:34:0f:cb:99:9b:e2:2e:75:cd:00:fc:7e:5d: 33:2f:f3:33:61:99:70:54:69:42:1b:e7:e7:b2:ee: 02:2f:a5:16:12:c3:49:68:42:99:7f:69:11:f2:7f: 89:2c:7e:a2:53:a7:8d:b7:0d:49:2d:9d:bd:6f:61: de:85:86:83:0e:65:1c:6a:fd:4f:3f:b6:b2:a3:48: e5:21:0e:16:b8:e3:c2:c2:6c:4f:15:22:5c:ec:ed: f0:72:02:12:98:bb:1a:bf:14:ea:91:35:cc:f2:40: 51:13:8a:cd:dc:1e:8c:64:73:38:79:b5:f5:99:8f: f5:dc:f2:53:70:20:6e:ef:87:89:36:14:d9:cf:34: f6:3b:cd:dd:a8:94:29:1c:7f:ba:2e:99:df:90:47: 46:22:4a:78:36:64:59:b6:24:09:0a:61:3b:d2:33: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:49:3D:40:27:1A:FE:B5:D5:F0:39:BF:17:80:AD:50:AE:F9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a75a217b-6cf1-381f-b6d9-deec303c985d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 198.135.185.0/24 IPv6: 2602:2d1::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:58:47:db:6c:c1:bd:41:e0:eb:ea:6f:db:f7:3a:c3:5b:82: fe:b7:9b:70:80:29:57:06:17:44:9a:d2:c7:60:b6:56:48:4c: 41:74:cd:e1:4c:68:16:62:dc:a6:31:d8:72:f2:d9:70:d0:89: 27:97:59:53:ec:9d:98:c5:03:39:a0:fb:0e:76:f4:de:2e:9a: 6b:e8:f0:d8:23:f7:8b:47:54:69:46:5b:c9:a6:aa:bd:9d:29: cb:81:97:00:0b:6d:cc:42:2b:9c:08:47:42:7b:34:4c:b3:44: a7:78:75:bd:e1:6c:04:1a:99:30:70:e1:2c:ca:aa:b7:06:54: f0:5b:13:12:be:06:ab:d8:2c:d6:74:3e:e6:cf:71:fd:e7:88: f3:c7:f8:2a:44:c0:df:e3:0f:9c:e1:7d:79:73:09:95:20:e1: 7b:56:a7:9d:0c:92:d4:93:a9:f0:81:bd:2c:c6:89:bd:5e:57: 06:bd:81:08:e2:c4:ea:31:11:80:11:97:ba:22:bb:13:a4:cd: fe:ae:9d:73:d0:d7:05:60:da:64:7f:c2:31:fc:4f:0f:75:09: 6a:95:06:a6:da:d4:f4:2c:ed:f4:ba:61:1d:d5:e0:2c:9d:fc: 77:16:6e:d6:2c:f8:03:84:96:da:f8:b3:d8:90:b7:d4:27:f7: cd:5f:56:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtpnGCEOsNagL/FsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI1MTAwNDE4MjIzOVoXDTI2MDEwMjE5MjIzOVowLzEtMCsGA1UEAxMk MWMyYTEzNzMtZDY4Ny00YWUzLWE1YzMtNzRmNzBmZTBmM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeqc+AV6kneGXUpA/uL797hHCZTyKPVC0W7a pEKFrcK9niFnIoejDH5R82L0Uvy+8r2TJz36pAeZkBt32nj71IR9z9d/dAikb9Sx waVR+mgz5ee4kJS4WQccRTQPy5mb4i51zQD8fl0zL/MzYZlwVGlCG+fnsu4CL6UW EsNJaEKZf2kR8n+JLH6iU6eNtw1JLZ29b2HehYaDDmUcav1PP7ayo0jlIQ4WuOPC wmxPFSJc7O3wcgISmLsavxTqkTXM8kBRE4rN3B6MZHM4ebX1mY/13PJTcCBu74eJ NhTZzzT2O83dqJQpHH+6LpnfkEdGIkp4NmRZtiQJCmE70jMSdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHLDST1AJxr+tdXwOb8XgK1Qrvk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvYTc1YTIxN2ItNmNmMS0z ODFmLWI2ZDktZGVlYzMwM2M5ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxoe5MA4E AgACMAgDBgImAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbWEfbbMG9QeDr6m/b9zrDW4L+t5twgClX BhdEmtLHYLZWSExBdM3hTGgWYtymMdhy8tlw0Iknl1lT7J2YxQM5oPsOdvTeLppr 6PDYI/eLR1RpRlvJpqq9nSnLgZcAC23MQiucCEdCezRMs0SneHW94WwEGpkwcOEs yqq3BlTwWxMSvgar2CzWdD7mz3H954jzx/gqRMDf4w+c4X15cwmVIOF7VqedDJLU k6nwgb0sxom9XlcGvYEI4sTqMRGAEZe6IrsTpM3+rp1z0NcFYNpkf8Ix/E8PdQlq lQam2tT0LO30umEd1eAsnfx3Fm7WLPgDhJba+LPYkLfUJ/fNX1YF -----END CERTIFICATE-----Generated at Tue Oct 28 04:09:06 2025 by rpki-client