$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa File: 6a37db04-c374-339b-a7c3-989e21aa23f4.roa (raw, json) Hash identifier: PkdPhRjDZjT8ZStsYjg9L3VffVqcUkpt7XypcJviJcU= Subject key identifier: 75:61:5C:C0:A6:03:42:68:BA:82:DC:E9:11:CF:7A:07:89:B8:9B:CD Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584AD3A0F60F686BF41A0666C080 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 399668 IP address blocks: 172.98.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f6:0f:68:6b:f4:1a:06:66:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=4b6ae80a-82a4-4198-bdb7-32ffbb758f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:ba:fe:90:16:a2:4c:16:48:fe:45:f3:91: fe:73:aa:2a:a6:3f:6d:3c:d8:e4:33:e2:9b:de:8b: 84:05:3e:11:94:8a:4d:02:a8:a8:17:6f:08:41:e2: 05:c5:da:8f:ef:a3:e1:97:e0:d4:f7:6d:75:33:7a: 90:9f:e6:d3:fc:78:74:b3:79:05:a2:f7:89:73:c7: bd:65:2a:73:c2:4f:0f:76:a6:35:8a:23:af:22:ef: 4b:79:b6:e0:31:91:6c:80:88:97:c8:a2:a4:b2:a1: fb:b6:c0:98:fc:b6:c7:e2:a2:b0:7b:18:d9:80:c8: 89:3d:7b:04:a7:84:a9:09:70:c0:c8:70:d4:1d:47: e8:38:5b:51:be:c1:6d:5a:5a:00:00:88:12:5e:d3: e4:90:36:b0:4d:0f:67:ca:ad:88:b6:3c:49:a3:41: ca:5f:dc:48:45:6e:21:15:61:44:54:1c:bf:c4:f9: b5:de:68:ee:ba:59:6a:f6:36:ce:d9:b9:30:7f:4e: b2:43:29:6a:33:55:47:1d:61:ff:3f:e3:66:57:4e: 3a:8c:0a:79:45:51:07:74:53:6d:31:f0:48:7e:2d: 35:6a:d8:fb:be:2e:d5:4c:3f:31:ad:8e:be:60:fb: f6:ac:21:7a:98:03:60:bb:2c:a0:d5:db:9b:cb:7e: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:5C:C0:A6:03:42:68:BA:82:DC:E9:11:CF:7A:07:89:B8:9B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 172.98.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3c:4c:3c:f3:91:37:ac:83:70:99:c5:eb:70:64:5f:4d:32: 78:5e:07:cb:41:ee:b7:12:b9:34:e3:a7:39:5c:68:41:b6:87: b4:4c:ab:60:e2:f7:57:d7:4c:23:f9:98:79:0c:64:6e:99:37: 47:e0:16:b9:33:68:dc:cf:3b:f1:68:2c:e0:50:97:cb:c9:8c: 49:33:88:30:7e:97:90:68:bf:4c:6b:96:72:7a:9e:3c:8c:f7: 1e:c5:b8:c6:08:fb:8e:36:93:26:3f:41:4f:73:c1:b9:15:f4: 5d:bc:3e:e2:c0:a3:3a:2e:15:d7:a8:35:72:a0:b1:c0:9a:46: 4a:24:9f:00:51:12:66:e2:3d:1e:74:49:38:79:c9:74:2b:3a: 04:69:65:24:20:ff:f5:9c:bd:04:07:73:45:30:f1:98:e8:8d: b5:74:76:9d:42:ca:3c:34:c4:a7:5e:4a:f6:87:0c:10:ad:64: 53:df:21:40:46:af:5f:6f:0a:f8:26:cd:bc:c0:03:57:dc:80: 5f:1f:39:a5:62:67:16:57:c4:31:f4:1e:b2:07:2c:69:31:85: 87:43:c4:09:9d:71:f3:49:b5:84:ef:91:af:c9:6b:b7:24:27: 77:c8:53:67:5d:1c:f1:ef:7f:92:e6:37:c8:ec:77:78:3d:1c: 03:cb:c3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPYPaGv0GgZmwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NGI2YWU4MGEtODJhNC00MTk4LWJkYjctMzJmZmJiNzU4ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVu6/pAWokwWSP5F85H+c6oqpj9tPNjkM+Kb 3ouEBT4RlIpNAqioF28IQeIFxdqP76Phl+DU9211M3qQn+bT/Hh0s3kFoveJc8e9 ZSpzwk8PdqY1iiOvIu9LebbgMZFsgIiXyKKksqH7tsCY/LbH4qKwexjZgMiJPXsE p4SpCXDAyHDUHUfoOFtRvsFtWloAAIgSXtPkkDawTQ9nyq2ItjxJo0HKX9xIRW4h FWFEVBy/xPm13mjuullq9jbO2bkwf06yQylqM1VHHWH/P+NmV046jAp5RVEHdFNt MfBIfi01atj7vi7VTD8xrY6+YPv2rCF6mANguyyg1duby34QVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVhXMCmA0JouoLc6RHPegeJuJvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvNmEzN2RiMDQtYzM3NC0z MzliLWE3YzMtOTg5ZTIxYWEyM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY8TDzzkTesg3CZxetwZF9NMnheB8tB7rcSuTTjpzlcaEG2h7RMq2Di 91fXTCP5mHkMZG6ZN0fgFrkzaNzPO/FoLOBQl8vJjEkziDB+l5Bov0xrlnJ6njyM 9x7FuMYI+442kyY/QU9zwbkV9F28PuLAozouFdeoNXKgscCaRkoknwBREmbiPR50 STh5yXQrOgRpZSQg//WcvQQHc0Uw8ZjojbV0dp1Cyjw0xKdeSvaHDBCtZFPfIUBG r19vCvgmzbzAA1fcgF8fOaViZxZXxDH0HrIHLGkxhYdDxAmdcfNJtYTvka/Ja7ck J3fIU2ddHPHvf5LmN8jsd3g9HAPLw+w= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:54 2025 by rpki-client