$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa File: 97fde43b-16f3-3046-9287-5bb8d7603efa.roa (raw, json) Hash identifier: dHtDdLUVLb/JJzzKlS5QcayF22wKbyFOv7H8a1P2eGE= Subject key identifier: 40:79:0D:8B:BF:12:20:80:31:86:22:EA:DF:37:DA:D2:B0:A0:39:2B Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F4328584B2A2C3AB47BE3F3873CC76E00 Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 202013 IP address blocks: 198.161.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:b4:7b:e3:f3:87:3c:c7:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7e6e0d0b-ddd6-4ec5-8b34-3879cf0449f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:ab:76:c6:cb:8a:bf:03:50:bc:6c:7d:64: 28:6f:45:5f:60:6c:09:fe:f2:45:5d:80:2a:e1:c0: 4d:eb:b1:e3:f8:32:f8:85:a2:04:3d:fb:c3:12:ba: 43:1c:6e:38:64:01:11:2a:03:23:7e:27:eb:df:7f: f6:a2:40:60:74:53:f6:59:84:00:9c:a3:46:63:9e: a8:ee:c9:6d:9e:54:a3:cb:94:9c:72:47:f6:e7:18: f3:ee:d2:68:d7:d5:5d:48:a7:c8:f4:b3:e7:43:8c: cf:1f:17:39:c8:72:9c:72:3f:e2:dc:5e:23:2a:83: 31:cf:21:fb:16:0b:7a:f9:72:4e:e3:34:c4:3e:c2: d4:f2:2a:00:80:3f:61:57:bd:b9:56:44:5c:80:90: 3f:36:9e:05:d6:f3:4b:4c:8a:0d:d7:ae:ff:f6:83: 24:59:19:04:50:5f:8b:ac:aa:ea:82:00:45:a3:9f: 1b:5b:ab:ba:dd:a3:d5:b4:90:57:b1:7d:8f:ef:03: 6d:97:8e:5b:a7:ee:3b:d9:dd:f9:a3:8b:69:c0:4a: 50:a5:9f:57:55:48:83:12:1d:2f:42:0f:14:1a:bc: 0d:55:86:b9:f1:a5:6f:86:67:c0:50:fb:24:8e:5d: 48:18:7b:a0:a6:15:fb:94:82:8d:0b:a5:aa:0a:a9: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:79:0D:8B:BF:12:20:80:31:86:22:EA:DF:37:DA:D2:B0:A0:39:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bc:5d:d8:3e:a7:ac:a4:33:15:70:f1:64:62:7f:90:e4:2c: b8:77:a3:b8:a9:3f:e8:b2:a4:7b:0d:30:87:86:fe:1d:9c:d7: 78:b2:b6:14:88:7b:d7:e2:d1:3a:86:16:a4:9c:b9:68:31:04: d7:17:8b:7a:5e:ba:dd:e7:66:db:9b:20:86:89:ea:31:1f:b5: 32:b1:56:e0:65:49:b3:55:f3:d3:ca:af:ce:39:4c:19:0d:1b: 44:ff:27:03:c7:64:df:6d:ad:8d:c9:79:d0:32:66:69:b0:4b: 55:7d:c9:65:83:99:a3:38:56:bb:7b:74:ba:b9:e7:de:b7:4f: 82:5c:d2:bf:60:d3:d5:2e:14:44:46:31:63:49:6d:83:c5:6e: 1d:fd:01:37:c2:99:ca:0d:fa:1a:39:2a:88:ea:4c:36:90:07: 69:76:f7:e4:b1:74:00:e6:f5:27:37:6f:dc:7a:fb:3b:a4:2a: ab:8f:16:c9:e5:3b:a7:e2:51:83:cb:68:af:47:3f:cb:81:0b: 2f:20:89:01:4c:51:ee:5c:65:4e:60:e9:46:85:02:84:05:18: 10:c3:61:06:50:45:b2:99:b8:44:21:4c:65:e7:7b:88:2c:26: 33:b0:1a:47:ec:4e:48:b3:12:02:3f:63:42:6f:b2:1e:bd:7d: 03:3c:73:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDq0e+PzhzzHbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2U2ZTBkMGItZGRkNi00ZWM1LThiMzQtMzg3OWNmMDQ0OWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokurdsbLir8DULxsfWQob0VfYGwJ/vJFXYAq 4cBN67Hj+DL4haIEPfvDErpDHG44ZAERKgMjfifr33/2okBgdFP2WYQAnKNGY56o 7sltnlSjy5Scckf25xjz7tJo19VdSKfI9LPnQ4zPHxc5yHKccj/i3F4jKoMxzyH7 Fgt6+XJO4zTEPsLU8ioAgD9hV725VkRcgJA/Np4F1vNLTIoN167/9oMkWRkEUF+L rKrqggBFo58bW6u63aPVtJBXsX2P7wNtl45bp+472d35o4tpwEpQpZ9XVUiDEh0v Qg8UGrwNVYa58aVvhmfAUPskjl1IGHugphX7lIKNC6WqCqkxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB5DYu/EiCAMYYi6t832tKwoDkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvOTdmZGU0M2ItMTZmMy0z MDQ2LTkyODctNWJiOGQ3NjAzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE28Xdg+p6ykMxVw8WRif5DkLLh3o7ipP+iypHsNMIeG/h2c13iythSI e9fi0TqGFqScuWgxBNcXi3peut3nZtubIIaJ6jEftTKxVuBlSbNV89PKr845TBkN G0T/JwPHZN9trY3JedAyZmmwS1V9yWWDmaM4Vrt7dLq55963T4Jc0r9g09UuFERG MWNJbYPFbh39ATfCmcoN+ho5KojqTDaQB2l29+SxdADm9Sc3b9x6+zukKquPFsnl O6fiUYPLaK9HP8uBCy8giQFMUe5cZU5g6UaFAoQFGBDDYQZQRbKZuEQhTGXne4gs JjOwGkfsTkizEgI/Y0Jvsh69fQM8c0w= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:47 2025 by rpki-client