$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa File: f1590f32-a39a-331e-88e9-b1ae0894683b.roa (raw, json) Hash identifier: s+5X22zA2gYwg+glptbG9qb83a62jnUvsjfHBJ4hH6Y= Subject key identifier: B7:0E:E4:85:0D:E1:C8:04:ED:58:E5:E1:E2:0A:84:8A:A6:F5:00:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD4A93B8CF9D3D7AE0CA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4a:93:b8:cf:9d:3d:7a:e0:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=20e03457-f0e2-40e1-995a-6720648864ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:c8:b1:44:07:94:90:64:20:49:ce:70:32: e1:b7:e8:4d:c0:f0:61:3c:b2:7e:0f:1a:0d:cb:24: bb:10:74:b1:60:a7:99:e0:a1:b1:c7:ea:e3:95:38: 3b:77:78:9e:22:c2:ef:02:a3:21:ca:04:c2:18:7e: 68:22:9d:7b:8a:c6:49:45:10:ff:af:a2:e3:80:ab: e6:3b:47:34:94:4b:97:23:22:7a:47:0a:f5:c0:b1: b3:1a:94:01:96:3e:2d:56:23:63:83:97:3e:1e:b5: d5:8e:89:05:d9:47:e9:a6:70:c6:f9:51:98:c5:7a: 59:90:09:4a:4b:0f:49:e0:ff:6e:b7:6c:67:6d:4c: cf:03:66:74:d7:73:7d:bb:60:4d:36:e0:11:d4:a6: 36:ac:d6:6b:d0:38:31:69:7f:63:2e:f3:d2:79:60: e8:5e:93:70:52:24:e8:3b:01:ab:b6:0b:73:56:2a: b0:a8:2b:7a:05:6b:b5:25:45:7b:6c:c5:6d:0e:3e: 4d:32:66:47:5d:c2:52:4c:20:75:34:5a:60:87:be: 6a:99:6e:dd:b0:a4:2b:eb:ce:59:2d:f0:6a:2d:c0: 20:a6:fa:1c:91:d3:7d:2a:73:a2:3a:d5:7e:39:96: e5:d4:87:88:6a:7e:06:f3:97:86:3e:54:b2:6d:c4: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0E:E4:85:0D:E1:C8:04:ED:58:E5:E1:E2:0A:84:8A:A6:F5:00:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:e2:ca:fe:c1:77:6d:66:18:96:ec:fd:49:e2:29:9d:7d:3f: 76:3a:bf:ba:6b:e0:ec:37:7a:55:46:83:f8:f4:ec:64:32:d7: 86:bd:2a:f1:8e:76:24:1e:19:94:18:5a:29:de:c2:34:43:95: 8a:9e:45:d5:6a:9e:2d:8f:36:9e:40:5a:85:f5:2f:59:bd:ca: d6:c3:a5:3c:0c:30:1a:55:6f:19:fe:80:13:d9:16:03:aa:41: 69:47:0c:0a:aa:d1:3a:e3:a4:bf:c0:50:ef:8c:53:01:fb:a5: c2:3b:e7:88:93:39:0f:e5:bc:80:c1:56:32:3b:e9:65:5c:16: af:8d:2c:4c:45:32:b7:0f:0e:f1:1d:d1:fc:92:fb:dd:7f:ee: 8d:bc:df:b2:64:1a:a4:78:b8:e2:a8:bd:ff:9e:39:b3:d3:21: 90:31:5b:a2:e2:81:68:37:1b:85:cf:c7:bf:48:9d:6e:97:a9: 22:43:5e:19:06:17:32:8b:4a:4c:fe:f0:39:ef:57:27:af:29: 12:73:5c:50:18:c3:9b:03:d1:eb:9f:b6:01:b0:09:12:e1:40: 94:21:49:38:4a:01:8a:cf:92:85:02:4f:01:7a:72:8b:66:ac: 2b:22:ae:f0:bb:8f:fc:96:87:d4:44:91:20:99:8e:f7:f2:75: 5e:de:2d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUqTuM+dPXrgygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjBlMDM0NTctZjBlMi00MGUxLTk5NWEtNjcyMDY0ODg2NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcLIsUQHlJBkIEnOcDLht+hNwPBhPLJ+DxoN yyS7EHSxYKeZ4KGxx+rjlTg7d3ieIsLvAqMhygTCGH5oIp17isZJRRD/r6LjgKvm O0c0lEuXIyJ6Rwr1wLGzGpQBlj4tViNjg5c+HrXVjokF2UfppnDG+VGYxXpZkAlK Sw9J4P9ut2xnbUzPA2Z013N9u2BNNuAR1KY2rNZr0DgxaX9jLvPSeWDoXpNwUiTo OwGrtgtzViqwqCt6BWu1JUV7bMVtDj5NMmZHXcJSTCB1NFpgh75qmW7dsKQr685Z LfBqLcAgpvockdN9KnOiOtV+OZbl1IeIan4G85eGPlSybcRJPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcO5IUN4cgE7Vjl4eIKhIqm9QA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjE1OTBmMzItYTM5YS0z MzFlLTg4ZTktYjFhZTA4OTQ2ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMniyv7Bd21mGJbs/UniKZ19P3Y6v7pr4Ow3elVGg/j07GQy14a9KvGO diQeGZQYWinewjRDlYqeRdVqni2PNp5AWoX1L1m9ytbDpTwMMBpVbxn+gBPZFgOq QWlHDAqq0TrjpL/AUO+MUwH7pcI754iTOQ/lvIDBVjI76WVcFq+NLExFMrcPDvEd 0fyS+91/7o2837JkGqR4uOKovf+eObPTIZAxW6LigWg3G4XPx79InW6XqSJDXhkG FzKLSkz+8DnvVyevKRJzXFAYw5sD0euftgGwCRLhQJQhSThKAYrPkoUCTwF6cotm rCsirvC7j/yWh9REkSCZjvfydV7eLco= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:27 2025 by rpki-client