$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa File: 5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa (raw, json) Hash identifier: 5axzLiizR+x+FdMc2VlJeLIlcmh3MSuOxg46A6PAD0o= Subject key identifier: 88:F3:AA:66:00:EB:3A:21:4C:D2:EF:46:9B:3C:97:0B:5E:1E:34:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD4B7BBF698DEF11C36980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4b:7b:bf:69:8d:ef:11:c3:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a8e1ad52-31f3-486d-8656-ccc97f8ec91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:ca:9f:33:7f:d5:68:68:77:03:d9:5b:a9: b7:2e:bb:0f:46:0c:d3:de:3f:5b:e3:a9:9a:c7:51: 95:c7:45:81:e9:98:51:8d:21:f8:d0:85:e9:bf:75: 9a:ea:2e:86:78:6b:d4:aa:72:57:36:43:ce:59:f2: 9c:9f:f8:96:29:16:6d:d2:c3:a8:e2:5b:09:5d:34: 90:ef:37:2b:3c:d6:80:da:90:81:ec:2f:a9:82:18: 61:4f:e4:47:b0:fb:2b:a2:65:06:f6:18:73:72:ba: e7:4d:65:5d:29:f8:29:ee:fa:58:7a:75:01:f3:67: 73:37:99:89:f4:47:a9:37:29:e5:31:5c:d2:a8:58: cc:2e:07:b4:15:85:c6:62:28:b3:2f:37:23:67:3a: f3:02:93:91:13:3b:e1:be:62:ec:c4:f1:8a:01:c8: 51:6f:60:bd:84:67:17:f4:7a:77:73:af:2e:3e:12: 3c:3c:1c:5b:22:fc:51:10:20:19:4f:eb:48:76:f0: cc:57:02:90:d9:88:8e:ad:c0:11:31:04:00:b3:b6: 9e:c6:53:d4:b8:40:0b:ce:ee:be:7d:ad:a5:b0:a1: 32:88:a3:35:03:8a:be:60:f3:f1:db:1a:8e:67:4d: da:6a:55:9d:e5:89:c5:87:db:62:d1:07:e1:96:16: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F3:AA:66:00:EB:3A:21:4C:D2:EF:46:9B:3C:97:0B:5E:1E:34:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:ab:71:8b:fa:73:fa:b9:76:e1:b6:83:ad:e7:48:ea:7f: e2:b0:b1:64:32:20:3a:51:c6:6a:35:07:47:bb:3c:70:25:34: b9:d3:a7:26:17:69:c4:91:5f:75:68:84:c5:83:d1:9c:df:c3: 86:ea:d0:bb:6e:e7:62:fc:7f:42:f0:e0:bf:9e:17:7d:e4:bf: e4:94:d1:dd:09:23:1f:11:73:13:d8:58:cf:7c:fa:69:3e:30: c3:af:dd:b6:d2:8e:5e:01:d5:78:eb:dd:d0:c4:32:12:e8:dd: 64:48:46:12:4f:2e:a7:06:4f:26:54:2c:3b:e1:b0:48:e6:2e: cc:0d:2d:df:3a:19:74:70:2d:88:c6:36:17:ca:24:83:99:4b: 9b:03:c6:8e:d1:2e:42:d1:60:93:04:21:5c:29:62:5c:11:58: ba:87:50:d3:01:9f:68:76:8e:d6:6b:b9:97:3c:8c:65:39:e3: 2d:18:2d:db:49:38:4a:df:af:47:37:f7:30:92:78:86:f8:e2: 74:fc:e4:5b:2a:9c:57:fa:97:a1:42:ff:50:45:16:6a:0e:ea: 85:e4:9d:5b:04:a6:4e:5b:71:2d:ae:c8:14:06:b0:08:92:09: c5:24:06:bc:93:03:0d:2c:cc:ab:5a:17:a8:f7:5d:61:a6:0a: fc:ee:9d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUt7v2mN7xHDaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YThlMWFkNTItMzFmMy00ODZkLTg2NTYtY2NjOTdmOGVjOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLKnzN/1WhodwPZW6m3LrsPRgzT3j9b46ma x1GVx0WB6ZhRjSH40IXpv3Wa6i6GeGvUqnJXNkPOWfKcn/iWKRZt0sOo4lsJXTSQ 7zcrPNaA2pCB7C+pghhhT+RHsPsromUG9hhzcrrnTWVdKfgp7vpYenUB82dzN5mJ 9EepNynlMVzSqFjMLge0FYXGYiizLzcjZzrzApOREzvhvmLsxPGKAchRb2C9hGcX 9Hp3c68uPhI8PBxbIvxRECAZT+tIdvDMVwKQ2YiOrcARMQQAs7aexlPUuEALzu6+ fa2lsKEyiKM1A4q+YPPx2xqOZ03aalWd5YnFh9ti0QfhlhbPXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjzqmYA6zohTNLvRps8lwteHjTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWU2ZDI0YTgtYjFlYy0z OGMxLWI5MDQtYmY4NTYyYjhiZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcLq3GL+nP6uXbhtoOt50jqf+KwsWQyIDpRxmo1B0e7PHAlNLnTpyYX acSRX3VohMWD0Zzfw4bq0Ltu52L8f0Lw4L+eF33kv+SU0d0JIx8RcxPYWM98+mk+ MMOv3bbSjl4B1Xjr3dDEMhLo3WRIRhJPLqcGTyZULDvhsEjmLswNLd86GXRwLYjG NhfKJIOZS5sDxo7RLkLRYJMEIVwpYlwRWLqHUNMBn2h2jtZruZc8jGU54y0YLdtJ OErfr0c39zCSeIb44nT85FsqnFf6l6FC/1BFFmoO6oXknVsEpk5bcS2uyBQGsAiS CcUkBryTAw0szKtaF6j3XWGmCvzunXY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:25 2025 by rpki-client