$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa File: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json) Hash identifier: CJ4w9+Bi75XYMYxlfGHwsCmIlr3VjAJdi8AXsLJDPMg= Subject key identifier: 45:E8:F6:6A:C8:50:5B:E8:63:D2:6A:31:6D:8C:01:72:DA:7D:52:74 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584B328C42F1EE2D19697F7C55D0 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 992 IP address blocks: 198.169.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:42:f1:ee:2d:19:69:7f:7c:55:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=604070da-0148-43bc-a90f-4424ef9ed8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:b1:65:c4:21:90:3a:e1:bc:0a:18:28:e7: e1:7c:61:54:38:80:d1:5c:b0:a4:54:cc:a9:1e:35: 14:ff:19:b2:a3:b9:87:a9:8a:b1:62:98:3c:0c:0c: 6d:39:2d:a8:f4:a5:a4:b6:9e:18:86:f3:b9:ab:88: 7c:2f:b1:bf:f4:08:a8:84:aa:6e:de:ff:50:1c:ca: 9b:03:5f:01:58:be:c7:d4:7a:4f:a0:c1:91:76:66: c6:39:83:ad:43:39:fd:c4:22:14:3b:ee:29:f7:d5: 96:6b:bd:56:83:c0:53:c6:76:ea:47:ef:0c:46:13: 2e:aa:31:31:f5:25:88:e8:89:b4:df:f3:38:bd:44: 53:df:e9:fc:bd:cf:7a:8c:41:d6:ed:52:c6:5d:c9: 86:03:69:b3:c1:13:66:3f:f9:a9:05:a2:38:2a:ce: d1:6a:44:d7:d0:8b:51:41:44:a8:1e:b2:21:4b:23: 9d:11:9f:88:25:8d:49:96:c7:ec:f2:d8:59:62:69: c1:01:bc:80:1b:87:9d:f8:27:94:34:4a:48:26:52: 0f:a0:73:d3:ff:a7:cd:36:7b:fc:e0:b1:76:e3:56: 96:83:d4:a3:0e:70:a8:ae:aa:31:70:a2:5b:18:fb: 4e:87:aa:42:bc:2a:07:7e:b6:47:2b:0a:dd:a5:88: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E8:F6:6A:C8:50:5B:E8:63:D2:6A:31:6D:8C:01:72:DA:7D:52:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:94:57:fb:74:b3:fb:12:f8:61:79:b7:d1:99:76:55:d1:91: dd:78:a5:3d:80:93:3d:27:49:ea:4e:5d:31:6e:8d:7f:95:a6: 22:42:02:9b:25:cf:6a:ab:57:15:a0:9f:da:31:d3:f8:01:f1: ae:43:65:04:bc:58:31:50:0a:cc:18:e9:80:04:9c:09:12:4d: c8:be:20:39:47:e3:ca:4f:f8:66:f8:d6:53:e9:53:c2:83:1d: 88:56:eb:c4:e6:27:60:12:3d:eb:1a:7d:eb:e5:2f:52:91:f4: 89:87:91:da:a5:a0:cd:24:35:76:4f:dc:e1:85:f1:c1:7f:17: ca:4c:24:c2:9e:5a:9b:7f:a7:16:50:ad:8c:de:26:98:44:4b: 8c:72:48:1b:55:88:14:50:c6:7b:04:67:04:61:95:c8:8b:4c: c0:c9:73:bc:34:65:86:8c:14:25:10:7f:fb:0d:62:b7:4b:5e: e1:2f:cf:7b:ad:83:4c:cb:d8:34:4a:2e:33:2c:19:e7:e2:23: 2e:f1:28:8d:84:33:9f:b3:6a:a9:da:bc:d8:d1:98:78:22:fb: 4b:28:00:b3:dc:cf:44:ba:b4:1d:5a:b5:6f:ee:b8:4e:16:7b: 39:35:c9:c2:46:26:58:8e:08:d9:87:9a:ea:58:e9:23:36:74: 14:51:e1:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjELx7i0ZaX98VdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NjA0MDcwZGEtMDE0OC00M2JjLWE5MGYtNDQyNGVmOWVkOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4GxZcQhkDrhvAoYKOfhfGFUOIDRXLCkVMyp HjUU/xmyo7mHqYqxYpg8DAxtOS2o9KWktp4YhvO5q4h8L7G/9AiohKpu3v9QHMqb A18BWL7H1HpPoMGRdmbGOYOtQzn9xCIUO+4p99WWa71Wg8BTxnbqR+8MRhMuqjEx 9SWI6Im03/M4vURT3+n8vc96jEHW7VLGXcmGA2mzwRNmP/mpBaI4Ks7RakTX0ItR QUSoHrIhSyOdEZ+IJY1Jlsfs8thZYmnBAbyAG4ed+CeUNEpIJlIPoHPT/6fNNnv8 4LF241aWg9SjDnCorqoxcKJbGPtOh6pCvCoHfrZHKwrdpYjcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXo9mrIUFvoY9JqMW2MAXLafVJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvYTI3ZmM2MjEtNWMwMi0z MjZjLTgxYWUtYzllOWUyYzY2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+UV/t0s/sS+GF5t9GZdlXRkd14pT2Akz0nSepOXTFujX+VpiJCApsl z2qrVxWgn9ox0/gB8a5DZQS8WDFQCswY6YAEnAkSTci+IDlH48pP+Gb41lPpU8KD HYhW68TmJ2ASPesafevlL1KR9ImHkdqloM0kNXZP3OGF8cF/F8pMJMKeWpt/pxZQ rYzeJphES4xySBtViBRQxnsEZwRhlciLTMDJc7w0ZYaMFCUQf/sNYrdLXuEvz3ut g0zL2DRKLjMsGefiIy7xKI2EM5+zaqnavNjRmHgi+0soALPcz0S6tB1atW/uuE4W ezk1ycJGJliOCNmHmupY6SM2dBRR4dg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:36 2025 by rpki-client