$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/4a5d7c3b-79bc-36e2-9492-26f7f76acd3d.roa File: 4a5d7c3b-79bc-36e2-9492-26f7f76acd3d.roa (raw, json) Hash identifier: swUnyIRKaReGLnwdD6I9HltO+l+vboCx4dD+8Xeei8c= Subject key identifier: 31:BD:1A:67:D6:73:21:7E:20:BD:87:56:B4:5E:2C:63:60:3E:A1:AD Certificate issuer: /CN=257e95d7-c350-4589-9157-c04964a142fb Certificate serial: 010D0C9F4328584B7DECA7FAEC4F4C4899497A20 Authority key identifier: 9B:57:02:C6:90:97:37:10:37:38:C3:8A:BB:EE:45:65:4C:CF:21:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/4a5d7c3b-79bc-36e2-9492-26f7f76acd3d.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 23039 IP address blocks: 198.178.182.0/23 maxlen: 24 198.178.184.0/23 maxlen: 24 2620:85:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a7:fa:ec:4f:4c:48:99:49:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257e95d7-c350-4589-9157-c04964a142fb Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=a860008c-aa4d-4f60-9ff1-e6cffd1a5d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3c:d0:1f:78:b2:77:11:ea:ec:6c:8b:01:dc: ed:3a:48:97:15:0c:0a:a9:fb:5d:93:f6:2b:cb:b2: ad:c8:27:76:b0:38:5e:ad:20:01:43:bb:4d:4d:60: ab:68:df:d1:7e:ba:2a:0d:7d:1d:7e:93:a1:c6:52: 28:84:b9:de:99:81:a8:6b:78:02:a0:87:5d:e2:22: f4:1a:05:77:6a:7c:2c:db:ef:b2:83:7e:e3:8f:44: 59:a8:4c:90:03:97:11:1c:97:14:9b:0d:5f:98:72: 07:86:3e:c5:f1:d9:2f:15:4f:a9:69:c1:9d:cf:a9: 4b:aa:4d:c8:35:5b:7c:15:3d:02:8f:12:f6:9c:71: 8d:d2:f0:69:52:c0:63:c6:ee:1b:64:03:73:45:b5: b9:ec:87:18:8e:c8:dc:28:ae:0c:5b:bc:dd:00:7a: 87:c3:05:7e:cf:f1:46:a5:21:cf:1a:c9:09:98:71: 3a:cf:e5:d2:fc:76:9c:28:9c:52:e3:d7:b1:52:65: db:7d:64:c6:ae:b2:bb:0b:37:af:ff:50:8a:f3:dc: 87:ab:8d:8c:07:15:fb:98:b0:13:e3:2c:92:7a:63: 9f:d2:f2:da:16:d3:38:46:8a:06:e6:62:3d:36:69: 7a:e9:b6:ab:7f:1c:d3:aa:dd:eb:94:7d:7a:85:54: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:1A:67:D6:73:21:7E:20:BD:87:56:B4:5E:2C:63:60:3E:A1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/4a5d7c3b-79bc-36e2-9492-26f7f76acd3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.crl X509v3 Authority Key Identifier: keyid:9B:57:02:C6:90:97:37:10:37:38:C3:8A:BB:EE:45:65:4C:CF:21:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer sbgp-ipAddrBlock: critical IPv4: 198.178.182.0-198.178.185.255 IPv6: 2620:85:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:eb:59:2f:a3:d2:3f:05:d2:39:02:e4:19:33:95:84:32:b2: a2:69:8c:79:16:a2:43:29:b6:e5:06:75:82:f0:1d:a8:b5:6b: 8f:76:ed:26:20:22:05:96:ef:59:12:ed:a9:25:c1:08:f9:dc: 2a:52:77:d0:ed:af:6d:69:ba:c6:b0:3d:9f:62:f0:1c:aa:1c: df:0c:2b:8c:f8:cf:60:3f:86:a5:fd:a2:59:71:02:f0:61:36: b4:88:3b:e9:d4:e7:9d:a5:b9:ec:39:e8:b6:38:7b:56:2c:15: 22:84:6b:c3:40:cc:68:0c:d7:db:6e:ad:cd:07:92:ab:5f:fa: 41:43:f2:a8:83:37:38:5e:ee:18:18:2d:f8:3d:7c:7f:fb:48: 97:96:fc:f8:16:3a:e0:a9:14:dd:82:0e:50:18:a9:7e:3a:94: 8c:37:b9:35:ce:1b:bc:a3:2b:39:a6:64:54:29:87:2e:30:56: 03:c0:8a:cf:84:3f:d1:fd:d5:2b:16:8e:58:df:fe:cc:bf:1d: 2e:af:f0:c6:e9:e2:57:9c:7c:d2:83:81:0b:d4:af:5e:11:f2: d8:78:2e:3c:12:28:01:b7:5b:57:36:1c:c0:f3:32:05:39:3f: 2d:fe:cd:31:7d:cd:35:09:29:39:c4:2f:19:b9:15:f1:05:40: d6:91:5b:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt97Kf67E9MSJlJeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU3ZTk1ZDctYzM1MC00NTg5LTkxNTctYzA0OTY0YTE0 MmZiMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YTg2MDAwOGMtYWE0ZC00ZjYwLTlmZjEtZTZjZmZkMWE1ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jzQH3iydxHq7GyLAdztOkiXFQwKqftdk/Yr y7KtyCd2sDherSABQ7tNTWCraN/RfroqDX0dfpOhxlIohLnemYGoa3gCoIdd4iL0 GgV3anws2++yg37jj0RZqEyQA5cRHJcUmw1fmHIHhj7F8dkvFU+pacGdz6lLqk3I NVt8FT0CjxL2nHGN0vBpUsBjxu4bZANzRbW57IcYjsjcKK4MW7zdAHqHwwV+z/FG pSHPGskJmHE6z+XS/HacKJxS49exUmXbfWTGrrK7Czev/1CK89yHq42MBxX7mLAT 4yySemOf0vLaFtM4RooG5mI9Nml66barfxzTqt3rlH16hVTvAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDG9GmfWcyF+IL2HVrReLGNgPqGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTdl OTVkNy1jMzUwLTQ1ODktOTE1Ny1jMDQ5NjRhMTQyZmIvNGE1ZDdjM2ItNzliYy0z NmUyLTk0OTItMjZmN2Y3NmFjZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjU3ZTk1ZDctYzM1MC00NTg5LTkx NTctYzA0OTY0YTE0MmZiLzI1N2U5NWQ3LWMzNTAtNDU4OS05MTU3LWMwNDk2NGEx NDJmYi5jcmwwHwYDVR0jBBgwFoAUm1cCxpCXNxA3OMOKu+5FZUzPIWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTdlOTVkNy1jMzUwLTQ1ODktOTE1Ny1jMDQ5 NjRhMTQyZmIuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHGsrYD BAHGsrgwDwQCAAIwCQMHACYgAIXAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDA61kvo9I/BdI5AuQZM5WE MrKiaYx5FqJDKbblBnWC8B2otWuPdu0mICIFlu9ZEu2pJcEI+dwqUnfQ7a9tabrG sD2fYvAcqhzfDCuM+M9gP4al/aJZcQLwYTa0iDvp1OedpbnsOei2OHtWLBUihGvD QMxoDNfbbq3NB5KrX/pBQ/Kogzc4Xu4YGC34PXx/+0iXlvz4FjrgqRTdgg5QGKl+ OpSMN7k1zhu8oys5pmRUKYcuMFYDwIrPhD/R/dUrFo5Y3/7Mvx0ur/DG6eJXnHzS g4EL1K9eEfLYeC48EigBt1tXNhzA8zIFOT8t/s0xfc01CSk5xC8ZuRXxBUDWkVvs -----END CERTIFICATE-----Generated at Mon Oct 20 22:28:11 2025 by rpki-client