$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa File: 2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa (raw, json) Hash identifier: QlZLcIKwWFaV9AyUM+pfTv/fhk+Jb/fweFJ0mR+iWu8= Subject key identifier: CD:25:F8:E2:8A:73:14:83:62:E4:85:A0:8B:EE:A8:C5:54:10:4D:6B Certificate issuer: /CN=9b13d137-bc85-4935-b740-e59f0078def5 Certificate serial: 010D0C9F4328584B89177F286928A7E378B6B980 Authority key identifier: E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 40443 IP address blocks: 198.133.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7f:28:69:28:a7:e3:78:b6:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b13d137-bc85-4935-b740-e59f0078def5 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=7de9a112-7f35-40c1-946f-ce94aad171d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:d9:6e:1f:7d:3e:31:03:b5:0b:29:31:9b: a8:d7:80:d0:27:8e:ce:44:66:53:08:61:cc:b0:17: 68:1b:1a:f1:3b:85:38:1f:c1:55:fa:d8:02:f3:b2: fb:83:5f:c8:e4:92:c5:70:61:5e:2f:2d:d6:74:cb: 37:70:28:f5:41:57:2c:94:8c:dd:96:81:b4:d8:f2: af:b1:f6:99:b4:1e:7f:6b:b5:e7:6e:e3:e4:5a:d0: 2f:15:8c:ab:4b:b5:e8:0c:e1:13:99:cf:c9:02:87: 40:85:45:2b:8d:21:87:b5:64:74:9e:5d:60:ca:3b: 47:de:5d:88:ba:4a:ae:f6:62:29:67:56:0b:55:3c: 92:06:29:01:fa:00:1a:1c:fb:fd:9c:a5:d1:3b:1d: e8:03:3b:1a:31:10:b0:94:2a:ab:a2:64:8c:0e:9a: 2c:45:2b:74:94:d0:aa:25:e0:95:18:61:8e:77:6b: 87:ff:91:a1:84:91:ec:04:0d:89:a5:8d:88:14:a4: 72:25:b3:26:ee:86:ff:34:54:5a:e3:e3:03:76:90: 3d:62:82:c5:ae:65:0f:33:18:0a:f5:59:7a:52:8b: e3:1e:24:10:a7:9e:df:a9:87:7c:9c:05:17:0a:d7: 6e:e8:78:5a:e8:24:ab:52:07:20:fc:15:42:8b:b0: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:25:F8:E2:8A:73:14:83:62:E4:85:A0:8B:EE:A8:C5:54:10:4D:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl X509v3 Authority Key Identifier: keyid:E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer sbgp-ipAddrBlock: critical IPv4: 198.133.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bf:9b:9e:05:92:36:85:0b:e2:68:52:85:84:2d:6f:72:5e: 90:ae:e0:11:96:05:0d:22:eb:d2:6d:de:13:23:be:61:87:40: 65:b5:a0:cb:94:72:e6:6f:0d:c4:93:06:38:b1:63:83:4a:20: 67:60:d8:97:3b:2f:c1:10:b4:51:c8:88:55:a8:32:59:75:88: 28:f2:f1:9b:a3:f8:91:fb:be:d3:c1:aa:91:b0:14:57:c1:d6: 16:a6:64:bd:8f:6b:65:45:94:a4:a8:94:8d:df:00:83:b2:55: 7e:d2:76:26:ae:ff:1d:66:7a:2d:1a:1f:c8:ff:dd:5c:e2:81: 61:b9:14:89:6a:2e:3b:b1:f5:73:bf:42:15:ff:90:73:df:bb: 7b:da:e4:ed:d0:6b:21:96:d7:c3:63:ad:01:24:02:4e:55:a3: 8d:17:35:f9:6d:4f:01:cd:d7:f8:50:b3:38:6b:22:1e:95:65: 2f:1f:18:76:5d:dc:38:0e:28:23:7a:9a:0b:ed:f4:f4:d0:ce: 2f:00:7d:aa:f0:fd:68:35:0f:43:f5:3f:0b:3b:20:b5:6c:6a: b4:bf:a3:2d:1e:4e:5e:b3:23:25:1c:21:d9:7d:e6:09:d9:31: 31:fe:ba:8e:3f:5c:ef:18:6b:b3:66:8a:da:63:2b:e8:64:6d: 3f:c2:0e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF38oaSin43i2uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxM2QxMzctYmM4NS00OTM1LWI3NDAtZTU5ZjAwNzhk ZWY1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk N2RlOWExMTItN2YzNS00MGMxLTk0NmYtY2U5NGFhZDE3MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg3Zbh99PjEDtQspMZuo14DQJ47ORGZTCGHM sBdoGxrxO4U4H8FV+tgC87L7g1/I5JLFcGFeLy3WdMs3cCj1QVcslIzdloG02PKv sfaZtB5/a7XnbuPkWtAvFYyrS7XoDOETmc/JAodAhUUrjSGHtWR0nl1gyjtH3l2I ukqu9mIpZ1YLVTySBikB+gAaHPv9nKXROx3oAzsaMRCwlCqromSMDposRSt0lNCq JeCVGGGOd2uH/5GhhJHsBA2JpY2IFKRyJbMm7ob/NFRa4+MDdpA9YoLFrmUPMxgK 9Vl6UovjHiQQp57fqYd8nAUXCtdu6Hha6CSrUgcg/BVCi7DNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0l+OKKcxSDYuSFoIvuqMVUEE1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjEz ZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlmMDA3OGRlZjUvMmI0ZGM1YTktZDIzOS0z ZjQ0LTgzYmMtOTA2NmE1MTk0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIxM2QxMzctYmM4NS00OTM1LWI3 NDAtZTU5ZjAwNzhkZWY1LzliMTNkMTM3LWJjODUtNDkzNS1iNzQwLWU1OWYwMDc4 ZGVmNS5jcmwwHwYDVR0jBBgwFoAU4NQR1rs6X3q3iAaKYkcCM+IWTlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjEzZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlm MDA3OGRlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW/m54FkjaFC+JoUoWELW9yXpCu4BGWBQ0i69Jt3hMjvmGHQGW1oMuU cuZvDcSTBjixY4NKIGdg2Jc7L8EQtFHIiFWoMll1iCjy8Zuj+JH7vtPBqpGwFFfB 1hamZL2Pa2VFlKSolI3fAIOyVX7Sdiau/x1mei0aH8j/3VzigWG5FIlqLjux9XO/ QhX/kHPfu3va5O3QayGW18NjrQEkAk5Vo40XNfltTwHN1/hQszhrIh6VZS8fGHZd 3DgOKCN6mgvt9PTQzi8Afarw/Wg1D0P1Pws7ILVsarS/oy0eTl6zIyUcIdl95gnZ MTH+uo4/XO8Ya7NmitpjK+hkbT/CDm0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:23 2025 by rpki-client