$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/f2ca29c5-6b8c-3cea-a21f-9c3b123c60f4.roa File: f2ca29c5-6b8c-3cea-a21f-9c3b123c60f4.roa (raw, json) Hash identifier: 8A2XRVRCYNwd0NLOoSAY8eLSHmw1pHcFB30lzjRswEA= Subject key identifier: 68:FF:09:27:0D:58:83:B2:F9:F2:F9:E6:34:10:A6:5B:06:44:E5:BD Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584AE891464EAB83AFF0404B8960 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/f2ca29c5-6b8c-3cea-a21f-9c3b123c60f4.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 6922 IP address blocks: 198.216.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:46:4e:ab:83:af:f0:40:4b:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=718939a2-659e-4980-960a-5707a4de6c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:7f:03:3d:65:41:1b:93:65:60:c4:1c:c6: 54:fa:b8:8a:44:50:e8:44:86:55:29:01:d3:07:51: c9:5d:91:3a:8f:4e:6e:12:9a:7c:37:da:6e:48:59: c1:2c:71:0d:3c:89:76:94:b8:54:43:54:34:05:a5: 97:c6:6d:3b:15:4e:38:19:65:fc:23:62:1d:b4:05: 34:aa:07:b2:b5:dc:33:91:c7:65:fb:78:1e:a2:45: b1:66:af:2e:b4:7f:9d:4f:ca:3b:3d:ab:c4:68:d0: af:7c:77:b3:79:ff:d7:16:9d:e9:5f:7c:ba:8d:75: 55:d1:be:75:53:26:d6:b6:0d:a1:ab:51:34:e9:e5: 04:9d:9b:42:69:0c:fc:c2:78:25:3f:77:6d:0c:74: aa:d3:a0:8e:04:83:ba:9f:2f:2f:51:60:0d:42:3d: f2:34:a2:18:39:e8:7b:81:89:98:80:28:50:aa:35: e0:4f:92:73:4f:66:f5:d9:6d:82:9b:8e:0d:49:33: ed:e1:0d:7c:68:ab:d7:07:eb:a5:f4:c3:bb:2b:6f: 12:0a:ec:71:53:67:33:14:1b:db:0b:dd:ec:8b:09: 60:83:b8:69:ad:d3:c1:0a:28:6b:66:c6:06:f9:ef: 3f:50:cb:6c:b0:33:f9:60:42:ef:15:98:1b:14:37: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:09:27:0D:58:83:B2:F9:F2:F9:E6:34:10:A6:5B:06:44:E5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/f2ca29c5-6b8c-3cea-a21f-9c3b123c60f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 198.216.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:30:48:e6:4d:1e:21:b6:21:48:da:54:59:e6:1e:e9:24:97: 1e:6f:50:b9:c5:e1:5b:a9:e1:ba:d9:bd:84:f6:72:0e:ab:19: 33:1f:ef:a2:e8:58:61:74:2f:d4:29:f4:ca:4c:61:e5:fb:4a: 04:2b:78:3c:d8:ad:db:f5:f7:90:a4:bd:84:59:1d:b2:61:50: 7e:d2:aa:e4:b6:26:c0:e7:1c:c3:1d:06:78:c0:3b:da:2d:89: 09:1e:ad:12:29:d8:6d:fa:72:12:87:21:cc:b3:11:79:a0:bc: a9:27:fd:6f:ba:cf:80:b9:a7:1a:39:a3:63:8a:a9:70:73:44: a5:0d:f6:28:06:02:d0:bd:b9:fd:de:21:95:0a:0a:45:39:4c: f1:02:39:36:55:a2:95:96:af:8e:9c:23:e7:fd:b7:12:52:a4: 93:4b:40:f6:f1:b7:0b:79:d3:4c:0d:88:b4:12:3c:fc:13:d6: 42:2c:64:f4:8c:2c:b9:61:39:42:8b:de:02:39:61:27:d0:57: 80:1b:f5:2b:0c:76:a1:3a:b5:99:06:99:95:89:f5:ad:d6:dd: 5e:25:23:af:91:c4:88:58:2f:e8:76:2f:3e:8f:39:2f:28:0b: d0:eb:ed:0e:ef:2b:b5:9b:d4:15:a4:1a:0e:6b:84:b2:f9:0e: 86:15:6b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUZOq4Ov8EBLiWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzE4OTM5YTItNjU5ZS00OTgwLTk2MGEtNTcwN2E0ZGU2YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgZ/Az1lQRuTZWDEHMZU+riKRFDoRIZVKQHT B1HJXZE6j05uEpp8N9puSFnBLHENPIl2lLhUQ1Q0BaWXxm07FU44GWX8I2IdtAU0 qgeytdwzkcdl+3geokWxZq8utH+dT8o7PavEaNCvfHezef/XFp3pX3y6jXVV0b51 UybWtg2hq1E06eUEnZtCaQz8wnglP3dtDHSq06COBIO6ny8vUWANQj3yNKIYOeh7 gYmYgChQqjXgT5JzT2b12W2Cm44NSTPt4Q18aKvXB+ul9MO7K28SCuxxU2czFBvb C93siwlgg7hprdPBCihrZsYG+e8/UMtssDP5YELvFZgbFDd12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj/CScNWIOy+fL55jQQplsGROW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvZjJjYTI5YzUtNmI4Yy0z Y2VhLWEyMWYtOWMzYjEyM2M2MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxthbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcwSOZNHiG2IUjaVFnmHukklx5vULnF4Vup4brZvYT2cg6rGTMf76Lo WGF0L9Qp9MpMYeX7SgQreDzYrdv195CkvYRZHbJhUH7SquS2JsDnHMMdBnjAO9ot iQkerRIp2G36chKHIcyzEXmgvKkn/W+6z4C5pxo5o2OKqXBzRKUN9igGAtC9uf3e IZUKCkU5TPECOTZVopWWr46cI+f9txJSpJNLQPbxtwt500wNiLQSPPwT1kIsZPSM LLlhOUKL3gI5YSfQV4Ab9SsMdqE6tZkGmZWJ9a3W3V4lI6+RxIhYL+h2Lz6POS8o C9Dr7Q7vK7Wb1BWkGg5rhLL5DoYVa2E= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:23 2025 by rpki-client