$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/e0c4dd72-f9f7-39e4-9943-f82bc1044077.roa File: e0c4dd72-f9f7-39e4-9943-f82bc1044077.roa (raw, json) Hash identifier: QdSunh3GT7/CiJH3LOW4B9daNIMr2Fl+zeHckf8Jpxk= Subject key identifier: BE:87:3D:B1:85:54:56:22:69:6E:F9:AF:B6:4A:00:82:0E:9E:93:B4 Certificate issuer: /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc Certificate serial: 010D0C9F4328584AECC14A68CBEC10022F1049A0 Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/e0c4dd72-f9f7-39e4-9943-f82bc1044077.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26548 IP address blocks: 199.175.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4a:68:cb:ec:10:02:2f:10:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c861d546-d62c-440e-93c0-ccd3c19d8c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:0c:1c:0d:91:79:0c:d7:2f:b1:ac:ce:49: 5d:6c:88:df:9f:a7:46:bc:e0:eb:58:eb:bb:88:7c: 58:60:c0:1e:35:29:2c:d5:e5:09:93:98:36:cd:02: 4e:66:16:65:51:76:cb:de:b0:4a:58:3b:41:70:ce: 21:af:d6:f7:07:4a:66:69:25:6e:a5:b6:87:73:84: 48:0e:f4:3e:9d:49:26:e9:67:a2:56:54:7b:8d:32: 92:ac:a1:d8:26:e8:6f:2e:eb:d0:a2:d9:86:6f:4d: 65:e7:d8:a5:10:cf:4a:62:7a:a2:f5:20:64:b7:75: cd:66:d1:13:e2:fc:f5:d8:ae:5f:bc:b7:b0:bc:49: eb:6f:01:05:27:1e:b8:59:ae:32:fe:94:d7:21:14: cd:25:14:86:86:0f:a3:25:60:07:4b:ec:e1:35:45: eb:dc:df:dc:b5:bd:22:ef:d2:92:47:0e:8b:b7:ee: b7:63:af:b4:44:2f:48:7c:96:29:ff:3b:72:18:46: 9f:df:79:23:46:55:f8:b7:e1:2c:56:c5:c1:9c:0d: ca:1d:24:be:46:ee:58:02:af:78:76:2e:a9:b8:50: 41:ed:a7:15:32:86:79:76:37:95:88:5b:9b:cd:b8: b8:80:33:46:e6:7e:19:f1:d6:38:52:6e:50:80:9b: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:87:3D:B1:85:54:56:22:69:6E:F9:AF:B6:4A:00:82:0E:9E:93:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/e0c4dd72-f9f7-39e4-9943-f82bc1044077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl X509v3 Authority Key Identifier: keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer sbgp-ipAddrBlock: critical IPv4: 199.175.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:25:6f:46:71:dd:39:20:62:f9:8e:73:55:af:1b:13:9d:8b: e3:bc:3f:97:31:bd:bc:2c:e6:c3:2c:9e:6b:eb:48:e0:47:ba: 84:7e:68:dc:e5:39:28:a5:ec:91:a2:f5:eb:62:5f:28:51:8d: 92:39:fc:84:77:11:bb:06:ba:67:77:82:bf:0c:02:07:3f:99: 07:56:13:19:64:53:fd:28:6b:3c:5e:f1:35:da:13:09:77:96: 8a:9d:98:bb:cb:69:38:19:1d:0c:88:7d:07:38:24:c4:c2:54: 55:1f:72:48:97:0b:ce:6b:74:90:2a:15:ec:32:45:ec:48:83: 4e:00:2c:d3:fb:97:ab:8c:f7:81:7b:ed:21:2d:00:6f:e9:2a: f0:7a:c3:ad:45:aa:04:e9:5a:0f:87:ac:9d:bd:f8:27:1d:7f: 76:76:54:d5:9c:18:3a:e7:14:28:ec:20:4e:59:fc:77:b5:05: 82:68:94:e3:1e:36:1f:03:75:5f:c8:c3:7a:6e:5a:21:6b:b0: cf:c6:c0:d4:16:f9:ce:cc:e6:13:7e:da:3f:fc:b8:ff:b9:00: 1a:02:b1:94:c6:b4:d0:6f:27:ba:20:fb:48:df:0e:59:a9:0b: 48:2a:b5:46:be:79:cf:4a:43:6d:89:a8:b4:dc:af:53:59:2c: 7b:0c:61:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUpoy+wQAi8QSaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5NmRlNDMtMTllZS00OGFjLThhMmYtYWNkOWVkMWNh ZmZjMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yzg2MWQ1NDYtZDYyYy00NDBlLTkzYzAtY2NkM2MxOWQ4Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRQMHA2ReQzXL7GszkldbIjfn6dGvODrWOu7 iHxYYMAeNSks1eUJk5g2zQJOZhZlUXbL3rBKWDtBcM4hr9b3B0pmaSVupbaHc4RI DvQ+nUkm6WeiVlR7jTKSrKHYJuhvLuvQotmGb01l59ilEM9KYnqi9SBkt3XNZtET 4vz12K5fvLewvEnrbwEFJx64Wa4y/pTXIRTNJRSGhg+jJWAHS+zhNUXr3N/ctb0i 79KSRw6Lt+63Y6+0RC9IfJYp/ztyGEaf33kjRlX4t+EsVsXBnA3KHSS+Ru5YAq94 di6puFBB7acVMoZ5djeViFubzbi4gDNG5n4Z8dY4Um5QgJv3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6HPbGFVFYiaW75r7ZKAIIOnpO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYjk2 ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5ZWQxY2FmZmMvZTBjNGRkNzItZjlmNy0z OWU0LTk5NDMtZjgyYmMxMDQ0MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWI5NmRlNDMtMTllZS00OGFjLThh MmYtYWNkOWVkMWNhZmZjL2FiOTZkZTQzLTE5ZWUtNDhhYy04YTJmLWFjZDllZDFj YWZmYy5jcmwwHwYDVR0jBBgwFoAUO8+DdRkuAYOzoP0kIZAh8WLHaJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYjk2ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5 ZWQxY2FmZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx69iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHElb0Zx3TkgYvmOc1WvGxOdi+O8P5cxvbws5sMsnmvrSOBHuoR+aNzl OSil7JGi9etiXyhRjZI5/IR3EbsGumd3gr8MAgc/mQdWExlkU/0oazxe8TXaEwl3 loqdmLvLaTgZHQyIfQc4JMTCVFUfckiXC85rdJAqFewyRexIg04ALNP7l6uM94F7 7SEtAG/pKvB6w61FqgTpWg+HrJ29+Ccdf3Z2VNWcGDrnFCjsIE5Z/He1BYJolOMe Nh8DdV/Iw3puWiFrsM/GwNQW+c7M5hN+2j/8uP+5ABoCsZTGtNBvJ7og+0jfDlmp C0gqtUa+ec9KQ22JqLTcr1NZLHsMYUE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:42:51 2025 by rpki-client