$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa File: c95177a4-9ed4-315d-96d5-2797939b3f4a.roa (raw, json) Hash identifier: bh5boNnGSJSRQhow+n2QFUARaNimDiQKrfm6XLg7aw4= Subject key identifier: EA:68:89:4B:63:62:ED:30:A2:28:27:61:AA:FF:FA:E7:D7:F3:50:E2 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F66DB63924586EEA906E80 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 14192 IP address blocks: 198.150.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6d:b6:39:24:58:6e:ea:90:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=e9874a15-4d55-44b9-9cf0-8e950a4e6fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:27:aa:db:eb:4c:07:c5:8d:23:24:1e:e8: 68:c9:60:9e:4e:93:9f:86:91:a7:56:9c:5b:f9:58: d3:6e:77:04:65:5e:6d:70:38:9d:ae:8a:b9:f2:12: 13:44:09:83:06:58:73:8c:06:75:7c:99:e7:18:f8: 16:f5:6a:b4:92:9b:17:4d:b1:38:51:88:b9:1e:0e: 70:18:4e:8b:9e:2c:ae:db:45:4d:8a:f5:a4:a7:74: 85:41:9a:c3:68:e0:de:83:af:4f:b4:2d:18:e7:3f: 10:10:c2:c2:d4:81:41:b5:50:0e:88:a5:f7:a8:c5: 64:91:43:c7:be:37:84:f7:e8:fa:70:af:ef:f0:22: d5:0c:b9:f7:a8:70:c8:1e:ce:37:b1:4d:ea:d0:12: 3d:fb:4c:9c:47:42:e9:11:da:b4:ba:09:39:b9:bb: fd:5e:91:0e:cd:b5:4a:db:62:aa:5e:27:8b:24:f0: e7:30:82:21:5c:8b:b5:9c:fb:09:74:c9:54:58:6e: 8e:3d:5f:25:df:f6:f5:ae:cc:1a:a6:f8:c1:c2:d0: 52:be:3a:cd:a6:56:fe:79:da:58:da:ed:17:f8:51: d1:16:ff:7b:c0:d0:d5:ec:3d:7c:85:88:f8:c0:fb: 05:6c:89:e7:83:09:bb:c4:12:d4:13:e0:27:5b:7e: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:68:89:4B:63:62:ED:30:A2:28:27:61:AA:FF:FA:E7:D7:F3:50:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:99:31:c8:1b:68:84:29:14:23:6b:f9:97:12:d5:c9:6d:e8: c2:26:ae:70:22:d2:fa:71:f3:c4:93:04:64:0c:44:1c:c6:af: 23:ef:e0:e2:45:34:4a:c4:b9:ff:5b:69:91:14:8b:23:02:71: 42:1a:b6:1b:0f:de:66:15:7a:b6:f0:0e:92:ce:e8:1d:c4:85: 59:75:c8:db:1f:3b:87:c3:70:22:1d:0c:87:58:88:28:5a:08: 20:fd:36:8c:6e:3f:8f:6d:31:c0:be:b5:85:f7:9f:c6:ba:cb: 25:ea:fa:cc:46:4c:fa:2e:a5:c5:1d:a5:fb:32:69:4f:29:1e: 17:29:17:63:ae:34:ae:2e:3a:38:f2:11:96:85:27:5d:79:cc: ae:aa:5e:f6:66:95:fe:c3:d1:db:cb:b2:cc:fb:9a:a1:18:07: d0:b7:19:38:e8:e9:88:59:15:70:a5:ae:a7:b6:9e:43:98:f8: 96:66:fb:7f:87:74:f2:80:96:06:82:c4:c4:3f:c7:02:3c:a5: 39:a1:3b:c8:33:9c:39:f2:0a:1e:bb:b8:5a:8d:e9:8d:0b:18: a9:12:0b:b5:27:5b:20:23:76:5f:71:b1:b1:3f:bb:ba:fb:1d: 8f:53:fd:61:3d:c2:1f:75:36:65:f2:94:93:ac:83:9f:42:f0: 2a:6e:2f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9m22OSRYbuqQboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZTk4NzRhMTUtNGQ1NS00NGI5LTljZjAtOGU5NTBhNGU2ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrknqtvrTAfFjSMkHuhoyWCeTpOfhpGnVpxb +VjTbncEZV5tcDidroq58hITRAmDBlhzjAZ1fJnnGPgW9Wq0kpsXTbE4UYi5Hg5w GE6Lniyu20VNivWkp3SFQZrDaODeg69PtC0Y5z8QEMLC1IFBtVAOiKX3qMVkkUPH vjeE9+j6cK/v8CLVDLn3qHDIHs43sU3q0BI9+0ycR0LpEdq0ugk5ubv9XpEOzbVK 22KqXieLJPDnMIIhXIu1nPsJdMlUWG6OPV8l3/b1rswapvjBwtBSvjrNplb+edpY 2u0X+FHRFv97wNDV7D18hYj4wPsFbInngwm7xBLUE+AnW36VUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpoiUtjYu0woignYar/+ufX81DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYzk1MTc3YTQtOWVkNC0z MTVkLTk2ZDUtMjc5NzkzOWIzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpZdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+ZMcgbaIQpFCNr+ZcS1clt6MImrnAi0vpx88STBGQMRBzGryPv4OJF NErEuf9baZEUiyMCcUIathsP3mYVerbwDpLO6B3EhVl1yNsfO4fDcCIdDIdYiCha CCD9NoxuP49tMcC+tYX3n8a6yyXq+sxGTPoupcUdpfsyaU8pHhcpF2OuNK4uOjjy EZaFJ115zK6qXvZmlf7D0dvLssz7mqEYB9C3GTjo6YhZFXClrqe2nkOY+JZm+3+H dPKAlgaCxMQ/xwI8pTmhO8gznDnyCh67uFqN6Y0LGKkSC7UnWyAjdl9xsbE/u7r7 HY9T/WE9wh91NmXylJOsg59C8CpuL8M= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:20 2025 by rpki-client