$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa File: fbbcd23d-cbc1-37eb-a377-92c166bee287.roa (raw, json) Hash identifier: yMZygpPREAPzrZERX1Oh5E23PaliDJPVJcfWDBgmC/8= Subject key identifier: 99:43:0A:DF:EA:50:14:47:A8:82:6F:F1:D9:3E:02:90:57:F4:7E:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE07B714CD1C604EB15F6E Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:07:b7:14:cd:1c:60:4e:b1:5f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=723d499a-afc0-485e-aeab-262a204ce4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:e2:9e:4b:65:db:86:87:c0:db:97:79:6d: 9f:51:84:91:55:67:64:50:36:7a:58:0a:ca:f5:cc: c9:15:f0:7f:07:15:a7:f2:a9:db:64:9f:7f:a6:0a: 93:53:06:99:b2:5f:09:bb:63:41:0e:fa:e7:93:b0: d5:de:cc:30:66:9c:16:09:d7:4c:3f:90:98:fa:d3: 70:fb:52:43:d0:8a:02:8c:97:50:6c:d2:f4:c9:fa: b5:70:10:e9:d0:7e:b0:01:e5:d9:9d:f1:75:60:57: 46:c5:b9:49:85:b1:37:10:b3:f2:ff:f0:79:b9:1c: c1:6e:64:3e:a6:92:03:db:74:07:b6:6f:19:73:a7: d4:a0:98:07:10:ea:2a:94:10:8c:5e:85:b1:99:77: a8:cf:52:e4:40:3f:89:8c:e3:aa:76:a8:85:9d:29: 8c:c3:90:61:54:bc:13:c9:dc:46:39:20:46:64:5e: 97:8d:08:55:1b:ef:70:41:98:85:db:7c:d1:54:7b: 42:6d:97:dd:df:45:eb:b1:7d:1f:56:15:c8:4c:a7: 6d:ae:f9:0c:58:3b:e9:b8:78:f0:0f:f5:ba:e0:3b: 9f:e5:82:e0:02:d7:74:dd:17:4d:83:a2:09:b6:e8: 62:41:8d:60:10:af:31:eb:a6:e1:82:64:d7:11:f9: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:43:0A:DF:EA:50:14:47:A8:82:6F:F1:D9:3E:02:90:57:F4:7E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ec:63:fc:d8:32:f3:8a:c8:47:01:6e:6c:83:7b:42:6f:88: c7:dd:e9:ef:f6:c4:fa:7e:94:0b:11:ff:3d:9d:d1:ab:8e:9c: 5c:30:82:63:79:49:fa:ae:8a:cd:63:fc:9a:5a:e2:c1:a3:5d: 5f:49:8d:10:71:3a:cc:cb:12:f8:a2:68:fd:42:67:b7:9d:fa: 9f:0a:8d:11:a3:0a:42:1d:d6:b2:eb:34:39:8e:a4:eb:ab:8c: fe:96:d1:7f:16:50:30:b6:b1:d3:f8:07:27:62:6d:0a:2d:49: 58:85:40:27:24:b1:47:fc:8e:bf:2f:d1:d3:51:d5:cf:57:06: 03:66:91:66:b3:6e:2c:6d:eb:d1:47:a0:07:d7:f1:ac:67:92: 97:8f:6c:7d:61:c4:88:b4:6b:0c:67:66:0b:de:6e:ff:34:4e: 22:d6:53:c4:5b:a5:c7:71:57:f0:55:85:e0:ef:e7:c1:0f:cb: 4b:44:c3:75:62:ee:35:60:95:29:62:cd:8c:31:59:b1:cf:9b: 12:39:75:16:21:cf:54:89:60:2e:2f:d5:4a:cb:7d:bf:1a:b1: 62:c3:7f:ab:45:8a:06:cb:58:cc:00:be:b8:8c:bb:c5:1a:30: ba:26:a7:a6:fa:1a:b1:c9:af:5c:a3:6b:f6:63:73:c3:b7:2f: f3:9c:e4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzge3FM0cYE6xX24wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzIzZDQ5OWEtYWZjMC00ODVlLWFlYWItMjYyYTIwNGNlNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve/inktl24aHwNuXeW2fUYSRVWdkUDZ6WArK 9czJFfB/BxWn8qnbZJ9/pgqTUwaZsl8Ju2NBDvrnk7DV3swwZpwWCddMP5CY+tNw +1JD0IoCjJdQbNL0yfq1cBDp0H6wAeXZnfF1YFdGxblJhbE3ELPy//B5uRzBbmQ+ ppID23QHtm8Zc6fUoJgHEOoqlBCMXoWxmXeoz1LkQD+JjOOqdqiFnSmMw5BhVLwT ydxGOSBGZF6XjQhVG+9wQZiF23zRVHtCbZfd30XrsX0fVhXITKdtrvkMWDvpuHjw D/W64Duf5YLgAtd03RdNg6IJtuhiQY1gEK8x66bhgmTXEfnlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlDCt/qUBRHqIJv8dk+ApBX9H7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJiY2QyM2QtY2JjMS0z N2ViLWEzNzctOTJjMTY2YmVlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzsY/zYMvOKyEcBbmyDe0JviMfd6e/2xPp+lAsR/z2d0auOnFwwgmN5 Sfquis1j/Jpa4sGjXV9JjRBxOszLEviiaP1CZ7ed+p8KjRGjCkId1rLrNDmOpOur jP6W0X8WUDC2sdP4BydibQotSViFQCcksUf8jr8v0dNR1c9XBgNmkWazbixt69FH oAfX8axnkpePbH1hxIi0awxnZgvebv80TiLWU8RbpcdxV/BVheDv58EPy0tEw3Vi 7jVglSlizYwxWbHPmxI5dRYhz1SJYC4v1UrLfb8asWLDf6tFigbLWMwAvriMu8Ua MLomp6b6GrHJr1yja/Zjc8O3L/Oc5IE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:55 2025 by rpki-client