$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aefcd1ff-12d3-32bd-abe7-d66e0b0a8e89.roa File: aefcd1ff-12d3-32bd-abe7-d66e0b0a8e89.roa (raw, json) Hash identifier: Kqs6q0hEHXpiMnNPdYaXAo0eH5+UR0lKWr3x/oReO7Q= Subject key identifier: 18:62:85:FF:6D:77:A5:37:09:6F:10:53:33:84:6F:C6:74:DE:60:8B Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC77FA8A8BB6F73D02000 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aefcd1ff-12d3-32bd-abe7-d66e0b0a8e89.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11164 IP address blocks: 198.71.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c7:7f:a8:a8:bb:6f:73:d0:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cb4ddc4b-8c64-4eec-9b49-13c6379d75ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:38:53:15:3a:96:90:0a:8e:e1:fb:b0:9a: 13:68:82:a3:83:b6:47:4b:eb:73:88:dd:59:00:63: 07:50:71:5f:7e:45:75:ac:27:56:48:b1:f9:f4:91: f4:dd:f3:28:04:cc:98:50:39:35:c5:fe:1c:4c:59: 6f:ce:20:29:52:e5:45:bd:7b:df:67:66:91:c5:8f: b8:f5:f7:88:81:8c:7c:e6:04:4b:66:f9:b2:40:6e: 09:c9:3d:86:3d:74:22:05:54:57:40:5b:dc:4d:e6: 27:57:70:53:81:8b:b1:ba:67:d9:49:07:91:a6:20: a9:08:a9:c9:c1:1a:0b:c3:65:6d:ed:6a:f0:2e:a1: 26:fd:3f:a2:ee:2a:09:92:d8:bc:e7:ce:f1:c5:e9: 2e:19:73:57:67:60:47:04:5f:6c:45:2b:ba:ed:4c: 00:95:cd:0f:e9:93:25:cd:4e:85:0b:57:82:8f:68: d4:37:eb:ed:c3:a8:a9:f5:1f:5c:61:43:8f:86:27: d2:03:2d:c8:65:a3:a2:97:97:fc:3a:96:9b:c1:81: 90:48:62:09:20:91:61:ae:60:f9:bf:1f:69:2e:d4: f3:5c:c8:37:3a:b7:a2:04:65:93:23:ad:f0:ee:11: 41:c4:3b:fe:25:20:3f:cb:4a:83:b9:5b:8e:d0:9b: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:85:FF:6D:77:A5:37:09:6F:10:53:33:84:6F:C6:74:DE:60:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aefcd1ff-12d3-32bd-abe7-d66e0b0a8e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 198.71.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:32:0b:fe:27:6c:f6:44:65:fc:75:a3:46:81:2d:2d:7b:46: 7b:d7:ce:53:be:1b:37:8f:dd:50:23:a1:7e:06:5a:3c:7d:92: 34:23:7f:e2:06:b7:f3:69:b7:e5:42:1e:8f:a8:1d:b5:d6:76: 25:e0:04:fa:7a:91:ba:4a:78:95:0b:4f:86:9c:92:9d:7c:f3: a2:74:bc:90:f2:02:71:11:43:49:87:ee:81:dc:0e:cb:63:bd: 13:6c:e7:9f:64:d3:30:9a:1a:e3:42:c5:83:8c:86:0b:8a:9d: d8:1b:79:5f:99:de:e2:ed:41:d6:b1:b7:e2:b8:0e:dd:51:28: fd:58:ee:0b:64:52:0b:c6:79:17:95:1d:56:d4:cb:f4:95:ab: 31:c7:e5:93:3f:7f:69:59:cd:f0:32:eb:2f:44:77:0a:68:a9: fe:5e:8c:c2:5a:93:59:c7:aa:d3:9b:37:87:a6:f7:15:7a:88: 4a:0c:95:a5:4c:dc:66:06:e8:8e:d6:03:af:28:56:74:27:4f: 13:33:a3:7d:4e:2c:38:45:6c:59:93:a2:00:79:8f:e3:31:a5: 7a:84:ec:9e:72:91:f1:f7:ff:88:2a:d2:b8:39:aa:d8:fb:4f: 5e:86:b6:3e:d4:ab:3b:1e:db:2e:58:69:59:38:50:3d:8a:25: 73:e2:61:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMd/qKi7b3PQIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2I0ZGRjNGItOGM2NC00ZWVjLTliNDktMTNjNjM3OWQ3NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3I4UxU6lpAKjuH7sJoTaIKjg7ZHS+tziN1Z AGMHUHFffkV1rCdWSLH59JH03fMoBMyYUDk1xf4cTFlvziApUuVFvXvfZ2aRxY+4 9feIgYx85gRLZvmyQG4JyT2GPXQiBVRXQFvcTeYnV3BTgYuxumfZSQeRpiCpCKnJ wRoLw2Vt7WrwLqEm/T+i7ioJkti8587xxekuGXNXZ2BHBF9sRSu67UwAlc0P6ZMl zU6FC1eCj2jUN+vtw6ip9R9cYUOPhifSAy3IZaOil5f8OpabwYGQSGIJIJFhrmD5 vx9pLtTzXMg3OreiBGWTI63w7hFBxDv+JSA/y0qDuVuO0JtzBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhihf9td6U3CW8QUzOEb8Z03mCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWVmY2QxZmYtMTJkMy0z MmJkLWFiZTctZDY2ZTBiMGE4ZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkcvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwyC/4nbPZEZfx1o0aBLS17RnvXzlO+GzeP3VAjoX4GWjx9kjQjf+IG t/Npt+VCHo+oHbXWdiXgBPp6kbpKeJULT4ackp1886J0vJDyAnERQ0mH7oHcDstj vRNs559k0zCaGuNCxYOMhguKndgbeV+Z3uLtQdaxt+K4Dt1RKP1Y7gtkUgvGeReV HVbUy/SVqzHH5ZM/f2lZzfAy6y9Edwpoqf5ejMJak1nHqtObN4em9xV6iEoMlaVM 3GYG6I7WA68oVnQnTxMzo31OLDhFbFmTogB5j+MxpXqE7J5ykfH3/4gq0rg5qtj7 T16Gtj7Uqzse2y5YaVk4UD2KJXPiYd0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:09 2025 by rpki-client