$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa File: eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json) Hash identifier: zLXS8F6jDdCt2ZKkvlzdt7KfBVFzwrk3cyjVSO2JlPI= Subject key identifier: 2B:24:B0:C4:1F:C3:20:D9:8D:45:A6:30:78:FB:1E:2E:FF:A0:F3:79 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584B84E77D74819CE8AAA8049D80 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7d:74:81:9c:e8:aa:a8:04:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=97b91d43-e70d-4ead-9b78-5458cebf992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:95:5b:12:17:f1:49:10:ea:e2:85:8d:e5: f3:12:36:88:39:aa:77:bb:13:d9:78:97:81:11:e2: b0:3d:a7:a9:75:39:5a:b5:a8:0d:ca:2f:42:59:bd: ce:e6:02:16:18:37:a2:1b:6c:b4:38:56:92:c4:c9: f1:11:78:45:e2:f8:36:a8:ea:ce:9d:3b:07:94:66: 3a:64:b4:d2:60:67:85:79:db:8c:8c:78:00:4d:60: 32:ae:d5:8d:67:96:64:bc:48:6f:d9:64:e1:6e:d3: 56:7f:fe:59:04:4c:e4:b2:6f:3b:f2:e5:ea:4c:2c: 8a:03:d5:33:56:d2:e6:57:5e:bc:4d:3f:ea:08:7e: 30:26:dd:ef:e3:7c:1a:b5:68:6a:36:d3:ad:b1:f6: 3a:c8:45:b7:fb:b5:da:52:15:2c:39:8f:03:d5:bb: 1c:98:ac:6b:f6:f8:e2:84:31:9a:07:1f:90:25:37: 65:38:e8:8b:ca:1f:6d:82:23:ea:49:1a:4c:a1:d7: 85:b5:17:89:12:c1:ef:34:70:03:60:96:67:54:91: 95:ac:bb:51:e8:cc:82:54:ff:17:1e:c6:dd:79:3b: f8:bb:47:79:15:e5:92:d8:eb:2f:74:79:af:ca:81: 03:a1:ec:c2:4d:f0:08:f4:4e:ce:e2:87:42:74:35: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:B0:C4:1F:C3:20:D9:8D:45:A6:30:78:FB:1E:2E:FF:A0:F3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:24:90:62:b1:5e:5f:51:c1:81:94:5d:04:0d:ed:d4:f5:f7: 7e:f5:38:8d:b2:26:58:61:e8:60:b4:8c:41:2f:37:47:2f:11: 06:3c:ea:09:4a:8c:cb:84:45:d5:21:8b:ae:37:4a:aa:2e:d1: d8:42:b7:2d:a3:4a:d9:ff:66:90:53:4d:81:77:9c:b6:d9:21: a9:cf:20:4d:5c:85:70:42:67:e0:33:73:52:91:60:42:8e:0e: 80:dc:97:79:e5:70:3a:ce:95:5e:38:60:e1:9e:2b:a3:6b:ae: cd:f1:f0:d3:37:ce:0e:a0:77:a5:73:53:13:a6:5c:12:32:8f: 23:e9:1f:6b:b9:1c:97:49:c1:d7:b1:dd:09:3a:85:52:b0:71: 02:4a:d4:0f:f8:9c:e9:ee:45:64:2b:3e:3e:16:c1:7a:ee:c9: 1f:3b:82:11:9b:f4:2e:ef:2e:af:28:86:79:72:f9:b7:93:2e: a0:aa:42:f7:e7:9b:84:8c:87:d3:5c:dc:df:dc:3b:ad:06:db: 7b:74:e1:11:8c:5c:fb:d8:b7:78:79:45:51:8f:c1:30:a7:79: a0:bf:3c:07:61:02:c3:fd:4b:5e:dc:b3:bc:ff:14:b3:0b:35: a4:38:04:f3:fa:37:06:75:72:dc:72:2a:fd:0b:01:a4:d5:4f: b0:06:60:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE5310gZzoqqgEnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTdiOTFkNDMtZTcwZC00ZWFkLTliNzgtNTQ1OGNlYmY5OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6SVWxIX8UkQ6uKFjeXzEjaIOap3uxPZeJeB EeKwPaepdTlatagNyi9CWb3O5gIWGDeiG2y0OFaSxMnxEXhF4vg2qOrOnTsHlGY6 ZLTSYGeFeduMjHgATWAyrtWNZ5ZkvEhv2WThbtNWf/5ZBEzksm878uXqTCyKA9Uz VtLmV168TT/qCH4wJt3v43watWhqNtOtsfY6yEW3+7XaUhUsOY8D1bscmKxr9vji hDGaBx+QJTdlOOiLyh9tgiPqSRpModeFtReJEsHvNHADYJZnVJGVrLtR6MyCVP8X HsbdeTv4u0d5FeWS2OsvdHmvyoEDoezCTfAI9E7O4odCdDVPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsksMQfwyDZjUWmMHj7Hi7/oPN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvZWI0ZjNkZGEtZmMxZS0z ZTJiLThlYWUtNTc2ZWYzOTZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwkkGKxXl9RwYGUXQQN7dT19371OI2yJlhh6GC0jEEvN0cvEQY86glK jMuERdUhi643Sqou0dhCty2jStn/ZpBTTYF3nLbZIanPIE1chXBCZ+Azc1KRYEKO DoDcl3nlcDrOlV44YOGeK6Nrrs3x8NM3zg6gd6VzUxOmXBIyjyPpH2u5HJdJwdex 3Qk6hVKwcQJK1A/4nOnuRWQrPj4WwXruyR87ghGb9C7vLq8ohnly+beTLqCqQvfn m4SMh9Nc3N/cO60G23t04RGMXPvYt3h5RVGPwTCneaC/PAdhAsP9S17cs7z/FLML NaQ4BPP6NwZ1ctxyKv0LAaTVT7AGYOU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:21 2025 by rpki-client