$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa File: a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa (raw, json) Hash identifier: +Og4kPkmj+exYWE6fOHIVxXkXkuUHrDi4Xf4spgaK8g= Subject key identifier: C4:4B:D0:FE:3C:AE:67:DE:1E:18:58:8A:81:1E:AF:C9:0B:D7:39:23 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584B2CF718455712F0A29650A400 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 62246 IP address blocks: 199.188.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:18:45:57:12:f0:a2:96:50:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=088949f7-bec2-404d-b9c3-c5692d2dc666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:14:4d:d0:a5:fd:36:31:c8:85:12:fe:66: a8:1a:76:67:cb:f8:78:20:a8:d8:db:62:75:0a:64: 74:49:7f:bf:15:35:de:01:39:d0:84:68:9c:27:4f: b8:31:3e:50:0e:f7:fe:4a:f0:0b:36:c3:87:6d:5c: 1d:41:95:ba:fc:13:56:f8:bd:9d:25:9e:cf:73:cc: 14:82:b4:4f:44:2e:2b:7c:0f:d7:fd:de:1d:2d:51: 10:d8:4c:df:ab:17:da:40:24:35:96:0e:75:71:d3: 18:cc:64:a2:72:f9:71:a6:40:5e:ca:e4:d0:0c:cf: 84:30:39:24:01:cb:30:a1:eb:66:17:1c:96:0d:2d: 50:0b:93:61:4f:25:09:f9:cd:e4:1c:6d:3f:ac:cd: d0:44:5f:68:64:a7:81:5a:6f:49:51:1d:62:be:68: ba:a8:0c:7a:58:f6:6e:5f:ae:4f:2c:ee:e0:f5:c2: 1b:d9:c0:50:03:35:9f:40:c1:65:97:d6:01:49:14: 68:81:44:53:7a:66:e1:22:09:e3:84:05:cf:bc:0f: 3b:bb:6d:ea:06:85:73:da:ab:63:11:77:ce:f6:21: a4:55:75:98:19:3b:7d:de:1d:46:9a:e1:65:d8:5a: a7:47:4b:68:e1:41:c1:fd:88:c1:fd:01:98:06:75: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:D0:FE:3C:AE:67:DE:1E:18:58:8A:81:1E:AF:C9:0B:D7:39:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d2:be:27:34:07:d7:4e:1d:97:16:ce:9e:a6:66:8b:a5:e3: 2f:5f:a0:3d:46:7c:e3:5a:57:82:f2:bf:a6:fc:44:aa:19:ac: 2a:33:99:a8:1a:37:c2:62:7c:ba:ec:d4:dc:9f:87:7a:c4:0a: 01:ac:78:d8:d3:3a:2f:9c:6d:5b:b2:5e:4a:b6:40:4e:ef:b2: eb:29:3f:0b:14:1f:61:88:d1:b6:8e:8a:35:ba:8c:eb:28:82: 71:56:50:b7:00:bd:36:b8:7b:bb:5e:f9:9a:87:e2:f0:fe:29: 6b:4e:68:01:36:13:e2:6a:df:52:fb:7c:c1:76:4f:10:5e:10: 69:46:59:b7:df:f1:cb:29:96:b6:c3:fa:56:5e:32:c3:a3:5a: cc:47:8e:93:dd:8e:84:9c:cf:83:62:8d:f2:ec:16:91:9f:62: d4:0c:21:d3:8e:3c:c8:ec:ff:b2:a9:72:51:f4:49:a4:2e:0a: 14:8a:80:57:0f:8c:46:60:1d:7d:03:b1:9d:2a:d8:d1:d3:24: 30:a9:29:25:4e:22:b0:fb:2d:2b:4f:cb:c3:15:7c:7c:d6:4e: 2f:db:fc:7b:64:4e:e1:7d:f6:e6:8f:50:18:b5:de:9b:a9:a8: 0b:7c:e6:5d:ed:b4:66:73:43:3a:95:ba:9f:3e:b7:23:e0:3d: 03:7e:7b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xhFVxLwopZQpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDg4OTQ5ZjctYmVjMi00MDRkLWI5YzMtYzU2OTJkMmRjNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacUTdCl/TYxyIUS/maoGnZny/h4IKjY22J1 CmR0SX+/FTXeATnQhGicJ0+4MT5QDvf+SvALNsOHbVwdQZW6/BNW+L2dJZ7Pc8wU grRPRC4rfA/X/d4dLVEQ2EzfqxfaQCQ1lg51cdMYzGSicvlxpkBeyuTQDM+EMDkk AcswoetmFxyWDS1QC5NhTyUJ+c3kHG0/rM3QRF9oZKeBWm9JUR1ivmi6qAx6WPZu X65PLO7g9cIb2cBQAzWfQMFll9YBSRRogURTembhIgnjhAXPvA87u23qBoVz2qtj EXfO9iGkVXWYGTt93h1GmuFl2FqnR0to4UHB/YjB/QGYBnWjCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRL0P48rmfeHhhYioEer8kL1zkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvYTVjNGI2NDctZDAyYi0z NmE1LWFhYWYtYzBhZjI3YWQxNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnSvic0B9dOHZcWzp6mZoul4y9foD1GfONaV4Lyv6b8RKoZrCozmaga N8JifLrs1Nyfh3rECgGseNjTOi+cbVuyXkq2QE7vsuspPwsUH2GI0baOijW6jOso gnFWULcAvTa4e7te+ZqH4vD+KWtOaAE2E+Jq31L7fMF2TxBeEGlGWbff8csplrbD +lZeMsOjWsxHjpPdjoScz4NijfLsFpGfYtQMIdOOPMjs/7KpclH0SaQuChSKgFcP jEZgHX0DsZ0q2NHTJDCpKSVOIrD7LStPy8MVfHzWTi/b/HtkTuF99uaPUBi13pup qAt85l3ttGZzQzqVup8+tyPgPQN+ezQ= -----END CERTIFICATE-----Generated at Wed Oct 15 02:08:04 2025 by rpki-client