$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d3a1ba40-21c8-3fa1-85de-07f1d3342eb3.roa File: d3a1ba40-21c8-3fa1-85de-07f1d3342eb3.roa (raw, json) Hash identifier: CFfv/sqZ33kzYMH813adXnPYR+NSQBaU0kiBZk/pgoQ= Subject key identifier: 46:0F:69:B8:4B:BE:DC:F9:E4:CE:A0:0F:6B:9F:CC:75:34:70:8B:30 Certificate issuer: /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Certificate serial: 010D0C9F4328584B0E414C6671EBA90AC4C62400 Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d3a1ba40-21c8-3fa1-85de-07f1d3342eb3.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 396065 IP address blocks: 205.157.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4c:66:71:eb:a9:0a:c4:c6:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5573a3c7-9dee-4e07-8383-35f73b19ad67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:65:e5:26:2b:39:7b:df:eb:7a:84:a9:23: d0:82:7b:74:92:7d:16:fd:48:cc:dc:8a:4f:1e:8b: 17:c0:1d:0e:a3:fd:ce:08:79:b1:98:a7:aa:f1:df: b4:95:d6:41:8d:51:01:ca:f2:e6:49:fd:14:e0:a7: 1e:61:b9:2d:f6:e5:f8:a2:90:cc:a5:07:2e:a7:68: a8:f4:c8:5d:d4:05:04:3f:84:a5:22:72:e4:1c:2d: 1d:91:af:a8:6a:09:ce:0f:74:e2:5f:2a:d7:65:79: a3:b4:48:6a:22:22:b7:68:23:bc:2a:b7:d8:41:05: f4:f7:9f:5d:56:06:34:36:68:92:5d:4e:86:c8:7d: 49:87:ee:e7:f2:4e:15:3c:5e:6f:2b:82:9d:cb:8a: 2b:ce:55:5b:6f:8b:9d:13:fe:42:a0:56:93:d7:63: f1:01:c6:36:75:bc:61:70:b9:ae:8a:78:ae:d5:ea: e7:08:c0:f2:58:ee:77:6b:2c:06:3a:5f:9e:ad:91: ff:57:14:e8:46:ec:c2:e7:6b:ee:58:06:c6:34:c7: aa:3c:07:a9:63:92:b5:3e:b2:55:23:95:f2:d0:4b: 0b:be:28:20:66:e3:e9:01:73:c9:f7:fc:ee:d6:c9: 08:af:1a:93:79:cd:3d:c2:ce:08:6d:7e:d4:cd:f2: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:69:B8:4B:BE:DC:F9:E4:CE:A0:0F:6B:9F:CC:75:34:70:8B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d3a1ba40-21c8-3fa1-85de-07f1d3342eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl X509v3 Authority Key Identifier: keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer sbgp-ipAddrBlock: critical IPv4: 205.157.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0c:75:e1:68:22:a2:90:3c:9e:4c:a5:e8:c8:fa:63:b9:13: ec:d1:16:6d:0a:15:eb:ba:cc:6f:9e:91:04:88:9c:de:b7:14: 3b:b7:b0:06:4f:70:1f:d2:90:f8:71:d2:19:39:2e:af:86:46: b7:c8:86:7f:b8:6b:fe:fe:19:8c:11:ea:8f:31:43:40:5c:95: ea:c3:16:fe:dd:af:9d:a4:97:34:bb:48:89:fd:93:0b:44:63: 66:ea:0e:a8:11:07:04:8c:19:42:f0:dc:bf:b0:2d:74:a9:6b: 1a:e6:9c:cb:aa:5c:2e:9c:fd:63:5c:ec:5b:e4:1e:56:ce:b9: 13:51:60:cf:6d:f3:1f:8d:4b:2d:78:bb:ff:78:97:13:d0:34: 95:a0:3f:1d:c3:47:93:06:ec:34:e9:89:2d:fc:95:2d:8e:e8: 02:8a:e1:25:d6:97:d0:92:75:3e:c4:77:f0:41:f1:37:71:0d: 8c:af:2b:2a:f0:20:f5:da:8f:5c:74:c2:fb:8e:66:de:ac:b9: 06:fc:93:70:9f:1b:3c:f2:0b:29:ff:fe:3b:01:51:9d:ea:00: 32:f5:bb:7f:5f:96:f9:17:4b:6d:a7:1b:a0:92:ca:63:7e:41: 73:ee:e4:35:eb:0f:92:ce:74:f8:01:6d:a7:9b:bc:ac:1f:6f: e9:7b:66:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQUxmceupCsTGJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw MjNjMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTU3M2EzYzctOWRlZS00ZTA3LTgzODMtMzVmNzNiMTlhZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G9l5SYrOXvf63qEqSPQgnt0kn0W/UjM3IpP HosXwB0Oo/3OCHmxmKeq8d+0ldZBjVEByvLmSf0U4KceYbkt9uX4opDMpQcup2io 9Mhd1AUEP4SlInLkHC0dka+oagnOD3TiXyrXZXmjtEhqIiK3aCO8KrfYQQX0959d VgY0NmiSXU6GyH1Jh+7n8k4VPF5vK4Kdy4orzlVbb4udE/5CoFaT12PxAcY2dbxh cLmuiniu1ernCMDyWO53aywGOl+erZH/VxToRuzC52vuWAbGNMeqPAepY5K1PrJV I5Xy0EsLviggZuPpAXPJ9/zu1skIrxqTec09ws4IbX7UzfJEVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYPabhLvtz55M6gD2ufzHU0cIswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvZDNhMWJhNDAtMjFjOC0z ZmExLTg1ZGUtMDdmMWQzMzQyZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy Y2MxYzAyM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZ3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMMdeFoIqKQPJ5MpejI+mO5E+zRFm0KFeu6zG+ekQSInN63FDu3sAZP cB/SkPhx0hk5Lq+GRrfIhn+4a/7+GYwR6o8xQ0BclerDFv7dr52klzS7SIn9kwtE Y2bqDqgRBwSMGULw3L+wLXSpaxrmnMuqXC6c/WNc7FvkHlbOuRNRYM9t8x+NSy14 u/94lxPQNJWgPx3DR5MG7DTpiS38lS2O6AKK4SXWl9CSdT7Ed/BB8TdxDYyvKyrw IPXaj1x0wvuOZt6suQb8k3CfGzzyCyn//jsBUZ3qADL1u39flvkXS22nG6CSymN+ QXPu5DXrD5LOdPgBbaebvKwfb+l7Znw= -----END CERTIFICATE-----Generated at Sun Oct 19 10:58:34 2025 by rpki-client