$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json) Hash identifier: 7f3vJmHA8eSDltJbR0IU7erEv/xE1aqAI6DIPq7dsIM= Subject key identifier: E3:70:B3:CA:37:0C:EF:7A:67:1F:59:7E:FC:9F:B9:99:0F:98:76:D7 Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F4328584B2A2C3AA184F7AC82C5C5B240 Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 202013 IP address blocks: 198.161.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:a1:84:f7:ac:82:c5:c5:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ae381b69-df5a-42ba-80f0-407d0edf86d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:5b:93:2e:97:5b:71:5e:0a:5e:0a:55:43: 78:39:14:49:6e:b3:41:e8:bd:1b:f4:11:ce:3a:0a: 20:ce:3e:99:88:bb:8c:f6:bc:af:1e:d8:aa:39:f3: af:15:36:36:07:06:5d:2b:04:94:07:62:1d:51:98: 9b:8b:b3:6e:55:c5:30:f1:31:9f:4a:a2:bc:58:8a: 0b:78:16:01:a7:eb:4a:b3:9f:91:1c:93:b7:ee:e3: f2:a7:ff:a4:f5:93:19:a5:58:e5:20:be:5e:d5:f7: a2:cc:4d:19:4a:69:bb:de:db:e0:e7:0c:be:ea:43: 06:72:16:94:29:dc:06:be:96:2a:d5:52:70:f2:47: c3:64:90:35:bc:09:c7:ba:d0:73:0e:67:8a:af:9d: 85:64:f4:ee:d7:c1:40:4b:a2:6d:13:77:90:cf:de: 6e:46:b8:a9:e5:ab:ab:15:87:ba:4f:57:d8:d7:c6: a8:d4:d7:dc:fe:5e:35:25:cd:25:04:71:05:c2:ac: 55:17:63:c7:b5:46:de:d0:55:b7:83:6c:94:a5:e2: ae:bf:ca:00:e2:52:0f:da:02:7f:7e:84:e7:f3:64: 1e:a8:64:19:4f:fb:35:7d:d0:5e:ac:cb:a7:1b:48: b4:3a:74:e7:f0:da:70:54:34:e3:8d:2b:7d:48:f4: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:70:B3:CA:37:0C:EF:7A:67:1F:59:7E:FC:9F:B9:99:0F:98:76:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bf:0b:53:9d:e6:05:46:9d:51:72:cc:25:ce:51:ef:71:8a: 3c:fb:24:23:a3:e6:6a:f5:05:d0:87:fc:5d:7e:ff:23:bf:2f: fb:02:1d:f3:39:e4:18:7e:85:62:8e:dc:66:92:a7:70:a8:dc: 5b:30:9a:68:90:a2:fc:8f:92:bc:39:7c:31:7b:2e:11:3d:b0: 75:85:99:5c:e9:70:ce:d8:9e:4a:5c:49:c2:a4:3b:57:f7:6d: 26:62:2d:9e:bd:a2:8e:e3:eb:68:49:3c:46:aa:7b:59:c7:d5: 47:2a:49:a7:ed:cc:35:e0:4c:27:6f:75:7b:cf:fc:13:df:65: 69:b6:ea:0b:73:e2:c8:56:76:18:5a:d2:c0:2a:d1:51:9e:7a: 20:1b:44:cc:bd:f3:1e:38:65:58:57:eb:2b:c9:fa:60:b5:01: ce:52:6b:42:90:b5:5f:22:ad:10:63:0f:73:82:36:b1:2c:9b: 18:f9:d5:bb:65:b6:5e:fb:84:d7:cf:3f:ea:6e:3b:53:e6:b1: 04:f0:1e:e4:94:2b:d0:f3:35:60:d2:30:6e:e3:09:c4:60:25: 83:8d:53:f6:19:65:b7:7c:fc:8b:1e:a2:46:ed:1d:05:ee:14: 51:06:06:2b:de:e7:ff:8f:bf:4a:93:0e:2a:23:79:63:12:07: 55:c5:f4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDqhhPesgsXFskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YWUzODFiNjktZGY1YS00MmJhLTgwZjAtNDA3ZDBlZGY4NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn9bky6XW3FeCl4KVUN4ORRJbrNB6L0b9BHO Ogogzj6ZiLuM9ryvHtiqOfOvFTY2BwZdKwSUB2IdUZibi7NuVcUw8TGfSqK8WIoL eBYBp+tKs5+RHJO37uPyp/+k9ZMZpVjlIL5e1feizE0ZSmm73tvg5wy+6kMGchaU KdwGvpYq1VJw8kfDZJA1vAnHutBzDmeKr52FZPTu18FAS6JtE3eQz95uRrip5aur FYe6T1fY18ao1Nfc/l41Jc0lBHEFwqxVF2PHtUbe0FW3g2yUpeKuv8oA4lIP2gJ/ foTn82QeqGQZT/s1fdBerMunG0i0OnTn8NpwVDTjjSt9SPSUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONws8o3DO96Zx9ZfvyfuZkPmHbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZGEyOGNmMDAtOGY4Yi0z OTUzLWE1MGItNDA2YWFjM2E0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2/C1Od5gVGnVFyzCXOUe9xijz7JCOj5mr1BdCH/F1+/yO/L/sCHfM5 5Bh+hWKO3GaSp3Co3FswmmiQovyPkrw5fDF7LhE9sHWFmVzpcM7YnkpcScKkO1f3 bSZiLZ69oo7j62hJPEaqe1nH1UcqSaftzDXgTCdvdXvP/BPfZWm26gtz4shWdhha 0sAq0VGeeiAbRMy98x44ZVhX6yvJ+mC1Ac5Sa0KQtV8irRBjD3OCNrEsmxj51btl tl77hNfPP+puO1PmsQTwHuSUK9DzNWDSMG7jCcRgJYONU/YZZbd8/IseokbtHQXu FFEGBive5/+Pv0qTDiojeWMSB1XF9DI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:47 2025 by rpki-client