$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa File: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json) Hash identifier: edFcqWa4Fg1AQoUNoXixFt4FCgBLomZRXgwysdp+j8Q= Subject key identifier: 67:FB:8D:EA:8B:82:A5:E3:D4:C8:07:0E:DF:21:DE:2F:5F:B1:6A:2D Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584B25FC3B2A11FCF6670647B300 Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 401438 IP address blocks: 198.200.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3b:2a:11:fc:f6:67:06:47:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=1bacf939-3391-44c6-9334-1bf782b65c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:e6:3c:f8:ae:65:c7:e7:35:54:19:c6:1a: f7:38:ac:39:30:c5:2f:1b:37:ce:64:d9:67:46:1b: 07:af:2d:14:ee:8f:32:db:40:e1:3a:ea:dc:4d:69: af:39:21:fa:6a:7e:63:a3:0b:91:22:5d:59:2f:91: 92:3f:be:f2:f3:2e:20:11:a0:a4:a4:f4:67:42:ab: ed:b8:92:97:43:66:60:1e:06:f3:69:be:92:3a:8e: 6d:ec:cc:a4:db:11:19:2b:ba:30:08:b1:4c:7b:62: 80:2e:9a:c0:5f:02:7a:8e:ed:38:a8:3e:2a:74:b8: 94:af:af:12:70:a5:5d:92:fe:7f:7a:61:43:e4:10: 4a:2e:76:51:29:7f:6a:a9:6f:42:d4:58:36:30:a2: af:26:c9:c8:51:67:e0:de:3c:a0:2e:3d:61:e5:59: fb:b9:26:99:b3:3d:09:ed:e0:b7:c9:df:37:e8:1c: 32:5d:03:9f:45:b4:50:d9:72:9d:29:fc:e4:31:82: ae:cd:a6:b6:3c:50:0a:59:ee:78:52:bb:07:92:e8: b8:8f:d3:25:fb:bd:3a:c5:9e:01:bd:7a:e2:25:d7: cd:b8:8c:a3:85:47:28:fa:7c:d7:d5:71:38:ee:2e: 5d:92:13:55:51:5a:64:cb:95:47:0b:ce:22:e1:cd: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:8D:EA:8B:82:A5:E3:D4:C8:07:0E:DF:21:DE:2F:5F:B1:6A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: 198.200.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:c4:01:70:a2:35:aa:ba:5e:ea:9b:7b:a0:0c:5e:37:50: 76:65:ea:6d:ed:c9:7d:28:38:c9:d2:48:47:e9:b1:8e:14:1a: d4:a1:9d:16:99:2f:22:5b:51:10:bd:b9:8d:ad:de:08:ef:10: 3e:bf:b2:62:a1:e6:f1:cf:2c:eb:de:8f:93:ef:ab:ef:ef:7f: 2e:29:f0:d0:73:e3:5d:42:76:fb:63:5d:89:00:12:b9:7d:ab: 8b:72:c3:af:5c:b5:7e:c9:be:38:1e:16:22:51:0d:55:4b:3f: 6c:2e:86:71:b1:b8:e7:b5:19:91:dd:f6:99:50:c5:8c:ad:d8: 97:7f:cf:37:78:6c:cc:50:c5:51:bc:04:30:1d:39:fe:de:9b: 85:b2:23:b2:d5:54:8f:45:44:4a:83:86:2f:07:7d:0b:c3:90: 47:49:65:8e:ba:b5:44:06:b9:b2:d9:ef:17:d7:40:d8:83:f5: 7b:93:f1:c7:4e:ac:86:1b:47:9c:ec:6b:74:c9:8b:8a:39:b5: b7:57:c9:c9:a2:27:f4:19:b5:11:af:27:aa:21:9e:5c:8a:f5: 37:33:84:b3:da:de:d0:fa:db:99:bd:de:15:30:f8:11:33:6e: 58:f7:23:96:8b:92:2c:2d:5b:c5:05:92:f8:9f:6a:fe:6c:39: 6f:e7:fc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DsqEfz2ZwZHswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MWJhY2Y5MzktMzM5MS00NGM2LTkzMzQtMWJmNzgyYjY1YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDHmPPiuZcfnNVQZxhr3OKw5MMUvGzfOZNln RhsHry0U7o8y20DhOurcTWmvOSH6an5jowuRIl1ZL5GSP77y8y4gEaCkpPRnQqvt uJKXQ2ZgHgbzab6SOo5t7Myk2xEZK7owCLFMe2KALprAXwJ6ju04qD4qdLiUr68S cKVdkv5/emFD5BBKLnZRKX9qqW9C1Fg2MKKvJsnIUWfg3jygLj1h5Vn7uSaZsz0J 7eC3yd836BwyXQOfRbRQ2XKdKfzkMYKuzaa2PFAKWe54UrsHkui4j9Ml+706xZ4B vXriJdfNuIyjhUco+nzX1XE47i5dkhNVUVpky5VHC84i4c1gZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf7jeqLgqXj1MgHDt8h3i9fsWotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvNzQ3MmI0NDMtZDI2Zi0z ZDhmLThkODktYzJiOGRjMWRkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUSxAFwojWqul7qm3ugDF43UHZl6m3tyX0oOMnSSEfpsY4UGtShnRaZ LyJbURC9uY2t3gjvED6/smKh5vHPLOvej5Pvq+/vfy4p8NBz411CdvtjXYkAErl9 q4tyw69ctX7JvjgeFiJRDVVLP2wuhnGxuOe1GZHd9plQxYyt2Jd/zzd4bMxQxVG8 BDAdOf7em4WyI7LVVI9FREqDhi8HfQvDkEdJZY66tUQGubLZ7xfXQNiD9XuT8cdO rIYbR5zsa3TJi4o5tbdXycmiJ/QZtRGvJ6ohnlyK9TczhLPa3tD625m93hUw+BEz blj3I5aLkiwtW8UFkvifav5sOW/n/Jk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:54 2025 by rpki-client