$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/7eba07bf-02be-38d2-aa84-2150a3bc0864.roa File: 7eba07bf-02be-38d2-aa84-2150a3bc0864.roa (raw, json) Hash identifier: Bc/3zDYdXZgAyYYSkNaY6fzbiY1dUelTAjqYhl0oiPw= Subject key identifier: 45:6A:12:C7:5B:0D:E1:24:31:80:71:9D:16:6D:F8:97:A5:C8:DB:48 Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Certificate serial: 010D0C9F4328584B3F1C6196629ADCD0E1345C80 Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/7eba07bf-02be-38d2-aa84-2150a3bc0864.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 394453 IP address blocks: 198.212.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:61:96:62:9a:dc:d0:e1:34:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=6b33c30e-7e3e-43f7-bb39-52dfeae85dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:c7:63:30:43:cd:57:b3:8c:2d:1e:37:b5: f4:90:14:9a:2f:8f:86:df:4f:4f:61:04:e9:12:8b: 2e:27:4b:36:2a:25:92:13:ab:e1:71:d7:2e:55:a9: e3:b1:6b:76:70:f6:78:6e:b9:50:9f:92:77:9a:8b: a6:35:32:73:82:c5:68:09:e6:5a:e1:18:a9:9b:9b: da:28:38:c1:0d:f3:0b:4e:b1:00:bf:b3:59:e3:5c: 61:3b:8c:90:ae:87:c9:d9:7d:19:56:c7:67:3f:4e: 4f:99:43:19:5b:6d:9b:25:91:b1:f8:61:8a:80:3b: 00:d9:bd:57:25:99:b9:e4:ca:45:d0:dc:a1:30:2f: 04:47:0f:28:07:2e:97:0f:c0:0b:47:ad:b2:8e:2d: ed:d0:8b:c5:71:99:1d:b9:f2:2c:04:a7:b2:fd:c6: 48:a9:d9:e8:79:f0:3b:1b:3a:8e:e4:75:c7:7b:a5: ac:0d:2a:9f:92:c1:20:ea:c3:db:fb:ec:3c:fb:07: 60:12:5f:6f:c5:4e:aa:fe:61:07:80:2f:03:3e:c4: 57:83:95:8f:e1:8e:1a:cb:9e:75:2f:fa:47:9e:04: 56:48:6b:8f:99:f2:ac:c4:a7:cd:48:7b:eb:13:f3: d7:19:49:f0:fc:25:43:bd:52:ab:c2:58:e7:ff:09: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:12:C7:5B:0D:E1:24:31:80:71:9D:16:6D:F8:97:A5:C8:DB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/7eba07bf-02be-38d2-aa84-2150a3bc0864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl X509v3 Authority Key Identifier: keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer sbgp-ipAddrBlock: critical IPv4: 198.212.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:29:83:a3:6f:e4:c9:df:4f:23:d6:84:8c:f6:13:6d:b9:d5: da:ef:ca:d8:e8:0d:7c:da:22:b1:a0:a9:95:fd:d5:8d:b8:04: 6b:19:a6:3c:b2:f2:38:ea:e9:bd:1f:99:de:93:af:9d:04:e7: 5e:d8:d0:c1:8f:8a:5f:9d:e4:87:e5:31:d6:8c:d7:83:2f:c0: 8a:90:ed:ca:54:1d:a8:db:f0:5e:df:5a:d7:ea:61:d8:83:0a: 4c:d5:ee:03:34:4d:6f:0e:a5:70:c2:e4:20:ce:b4:0e:1a:2f: 45:5d:93:21:7b:bf:5a:54:98:69:b1:32:c9:ce:8c:5f:c9:27: b3:63:16:86:6f:71:b0:c2:96:3c:f8:3f:e3:7e:47:38:75:83: 05:d7:8a:6c:b8:96:8f:d0:74:1b:0d:df:ae:2a:49:f3:36:5a: f7:00:d3:d4:20:1a:0a:7b:34:7f:19:0b:c9:27:d5:79:1d:66: 4b:ed:bd:d0:90:7e:04:db:e4:99:2a:6a:2c:ae:46:2a:be:43: 32:9c:23:60:d9:ab:f8:80:48:55:a4:59:f6:3b:58:d0:80:8c: fb:94:d7:16:c9:aa:75:6d:86:fc:fb:20:55:b4:6a:76:db:45: a9:1f:69:ea:e9:2b:7c:da:c4:a9:2a:f0:b8:a2:b6:c7:7d:bf: f5:49:43:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGGWYprc0OE0XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw NTUxMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk NmIzM2MzMGUtN2UzZS00M2Y3LWJiMzktNTJkZmVhZTg1ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJfHYzBDzVezjC0eN7X0kBSaL4+G309PYQTp EosuJ0s2KiWSE6vhcdcuVanjsWt2cPZ4brlQn5J3moumNTJzgsVoCeZa4Ripm5va KDjBDfMLTrEAv7NZ41xhO4yQrofJ2X0ZVsdnP05PmUMZW22bJZGx+GGKgDsA2b1X JZm55MpF0NyhMC8ERw8oBy6XD8ALR62yji3t0IvFcZkdufIsBKey/cZIqdnoefA7 GzqO5HXHe6WsDSqfksEg6sPb++w8+wdgEl9vxU6q/mEHgC8DPsRXg5WP4Y4ay551 L/pHngRWSGuPmfKsxKfNSHvrE/PXGUnw/CVDvVKrwljn/wne5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVqEsdbDeEkMYBxnRZt+JelyNtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvN2ViYTA3YmYtMDJiZS0z OGQyLWFhODQtMjE1MGEzYmMwODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5 YmRlYzA1NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQpg6Nv5MnfTyPWhIz2E2251drvytjoDXzaIrGgqZX91Y24BGsZpjyy 8jjq6b0fmd6Tr50E517Y0MGPil+d5IflMdaM14MvwIqQ7cpUHajb8F7fWtfqYdiD CkzV7gM0TW8OpXDC5CDOtA4aL0VdkyF7v1pUmGmxMsnOjF/JJ7NjFoZvcbDCljz4 P+N+Rzh1gwXXimy4lo/QdBsN364qSfM2WvcA09QgGgp7NH8ZC8kn1XkdZkvtvdCQ fgTb5JkqaiyuRiq+QzKcI2DZq/iASFWkWfY7WNCAjPuU1xbJqnVthvz7IFW0anbb RakfaerpK3zaxKkq8Liitsd9v/VJQ3k= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:15 2025 by rpki-client