$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa File: ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa (raw, json) Hash identifier: AOh07DbgB1r5xRxoN/hUqXyf7bfg35o7kJteLvrg0mA= Subject key identifier: 96:8F:AF:84:E4:76:16:7A:98:F6:68:EE:EA:8A:64:88:7B:97:28:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE06EC585FE2DDDF65AD20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:06:ec:58:5f:e2:dd:df:65:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d1b2f4ff-1a8c-4fc5-81b1-57e0ec986985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:82:21:40:75:4d:e8:ce:df:5f:67:89:83: 86:5f:29:00:2a:50:73:fb:a3:52:1c:f8:a1:56:91: 01:2c:f1:92:42:4d:d4:e4:fa:8f:98:56:7e:a9:31: 84:db:26:33:ba:3a:b4:68:40:74:05:31:50:51:34: 55:e8:4e:a7:a9:9a:c8:e4:77:a6:4b:4b:29:14:0b: d7:88:77:6c:45:fb:d0:70:29:1a:e7:82:83:ef:db: a8:7d:80:27:82:1a:97:0d:a1:76:93:f0:46:fa:b2: eb:63:a6:12:b5:41:d8:8e:4a:b7:eb:85:fa:c6:3a: 6c:2a:6b:c5:11:09:ce:30:40:ee:b3:f3:f2:66:d2: 64:40:aa:c1:6e:5d:fe:75:3b:03:59:b1:e8:bc:cf: d1:53:66:23:15:b9:f8:5b:2f:66:9e:ab:a2:84:60: 2a:e5:24:3d:73:84:ee:79:08:52:17:17:4b:02:2e: 49:c0:cd:17:a0:61:b9:81:ef:aa:52:cb:48:2a:33: 56:7c:2d:30:b8:db:e5:f2:e0:54:de:d5:c0:f8:33: 30:a0:2a:41:20:7d:99:da:0a:c2:69:38:10:12:62: 7a:4c:47:7f:96:42:fd:9c:63:f5:7a:62:6a:4c:df: d5:be:21:41:a9:5e:18:69:8f:1f:cc:d1:9b:81:17: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:AF:84:E4:76:16:7A:98:F6:68:EE:EA:8A:64:88:7B:97:28:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9d:18:f3:68:6c:26:09:d5:9c:69:80:41:79:70:a6:41:9a: 0e:5d:25:b4:2a:c8:9d:ab:eb:4a:54:ef:f9:82:09:2b:60:07: 34:02:52:79:36:83:fd:25:5f:8e:76:bb:4b:f0:27:8b:72:08: 94:51:9a:78:9d:27:05:c3:40:fa:94:0e:f3:8e:48:36:9d:4d: 67:8f:f2:48:86:ad:b7:af:37:06:be:5d:0b:e2:b7:31:48:02: 9c:e3:58:d3:a7:72:4c:a8:0b:db:5a:13:27:7a:7d:9e:ac:29: 44:96:d0:ed:f8:39:53:e1:70:e1:fa:4a:07:df:a4:30:7d:7b: a0:be:3e:46:5e:e9:a8:50:7b:8e:cf:14:45:98:72:4c:d8:44: 7d:ab:43:47:4d:2e:91:64:94:ce:e4:9b:83:d1:fb:35:5c:17: 60:61:c0:76:7b:5b:d8:3c:d6:7e:bc:74:d4:03:43:42:3a:ae: 7b:a4:e5:25:95:9f:af:42:11:09:bd:a9:0e:5f:8d:93:a7:4c: 02:fb:24:7a:64:df:c6:86:de:6c:0d:e5:74:e1:7d:16:6d:db: c0:34:90:56:d3:d7:b3:23:2c:eb:57:80:15:cd:17:14:e3:ec: 61:81:34:ac:23:6c:9f:6a:40:ee:7b:66:87:38:54:08:96:c3: c0:53:48:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgbsWF/i3d9lrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDFiMmY0ZmYtMWE4Yy00ZmM1LTgxYjEtNTdlMGVjOTg2OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8uCIUB1TejO319niYOGXykAKlBz+6NSHPih VpEBLPGSQk3U5PqPmFZ+qTGE2yYzujq0aEB0BTFQUTRV6E6nqZrI5HemS0spFAvX iHdsRfvQcCka54KD79uofYAnghqXDaF2k/BG+rLrY6YStUHYjkq364X6xjpsKmvF EQnOMEDus/PyZtJkQKrBbl3+dTsDWbHovM/RU2YjFbn4Wy9mnquihGAq5SQ9c4Tu eQhSFxdLAi5JwM0XoGG5ge+qUstIKjNWfC0wuNvl8uBU3tXA+DMwoCpBIH2Z2grC aTgQEmJ6TEd/lkL9nGP1emJqTN/VviFBqV4YaY8fzNGbgRe/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaPr4TkdhZ6mPZo7uqKZIh7lyiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM1ZDdlYmItNTEyZS0z M2U1LThiNTYtZTljN2MzNDM3MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHydGPNobCYJ1ZxpgEF5cKZBmg5dJbQqyJ2r60pU7/mCCStgBzQCUnk2 g/0lX452u0vwJ4tyCJRRmnidJwXDQPqUDvOOSDadTWeP8kiGrbevNwa+XQvitzFI ApzjWNOnckyoC9taEyd6fZ6sKUSW0O34OVPhcOH6SgffpDB9e6C+PkZe6ahQe47P FEWYckzYRH2rQ0dNLpFklM7km4PR+zVcF2BhwHZ7W9g81n68dNQDQ0I6rnuk5SWV n69CEQm9qQ5fjZOnTAL7JHpk38aG3mwN5XThfRZt28A0kFbT17MjLOtXgBXNFxTj 7GGBNKwjbJ9qQO57Zoc4VAiWw8BTSJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:55 2025 by rpki-client