$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa File: 323c2fc7-9009-33ce-aa09-64b232426f68.roa (raw, json) Hash identifier: zXpkN2pCAT7H7KJOe2p3jb7NTsltqlVaraIaw7eeJIY= Subject key identifier: D8:78:C8:5C:A7:A0:63:C6:FE:AF:7C:31:D3:80:C9:67:D7:AD:FF:7A Certificate issuer: /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Certificate serial: 010D0C9F4328584B6BC74D9294F3B356BD6692C0 Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 398999 IP address blocks: 172.98.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4d:92:94:f3:b3:56:bd:66:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5af13727-9176-4de9-be54-070faac9dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:f1:b3:dd:f4:9f:7e:98:8a:d8:3d:ce:5c: 5f:64:af:e7:fc:3e:e3:37:d4:74:51:59:76:a8:83: 4d:47:4d:2e:cb:54:3f:41:99:f4:a4:b1:99:bc:9f: 52:bc:b7:b7:02:d5:a7:27:b6:67:cb:c4:df:2b:f7: f1:68:b0:0a:4d:88:47:1d:90:43:3c:23:79:75:63: bf:9b:a4:21:1b:7a:a3:78:99:3a:72:b1:24:14:cd: c3:a4:61:6b:b3:d7:aa:1a:07:80:3a:39:be:7e:53: c1:80:02:6e:5c:3a:be:fe:de:b9:eb:bd:01:b2:ec: ac:9d:d3:f6:f2:56:88:7d:9f:e7:35:cd:49:ab:e1: e6:a7:47:5a:3d:6c:ff:60:d7:43:ac:62:d6:4e:3a: 97:93:0f:02:a1:ba:39:59:9c:e4:69:c6:db:7f:12: 06:28:9c:92:26:7f:db:33:a4:37:39:eb:0e:94:59: 82:bc:8e:88:4b:e5:f7:7b:14:10:d8:cf:60:00:fc: 71:85:89:f5:89:2c:85:e3:28:c5:0f:5b:f4:13:d8: 00:62:43:40:32:f9:71:79:cf:e1:55:f5:47:31:f0: 2d:70:ad:98:32:00:c7:9d:66:80:73:ce:ec:eb:95: 0a:25:24:f2:0c:2d:6d:79:05:27:55:1b:f6:93:20: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:78:C8:5C:A7:A0:63:C6:FE:AF:7C:31:D3:80:C9:67:D7:AD:FF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl X509v3 Authority Key Identifier: keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer sbgp-ipAddrBlock: critical IPv4: 172.98.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:64:5d:d2:38:ca:c4:05:fd:73:08:30:94:1c:b8:df:3f:61: ea:f7:17:61:54:d3:06:5c:89:62:1d:40:cb:b0:f5:52:b9:8a: 08:c0:a7:09:88:ce:eb:ba:40:74:ad:fe:b4:e0:9b:17:bd:fc: 91:55:58:b1:38:36:85:9d:91:ea:1a:54:af:49:d0:23:03:67: 9a:a8:d6:a9:a5:9f:92:df:c2:1c:98:12:7b:36:4b:1b:d2:7b: cf:94:35:f7:b8:4d:b6:17:e7:a3:28:a5:d5:60:19:12:6a:3b: 84:0d:3d:5e:28:a6:6a:07:6c:1b:0f:0b:44:a7:97:ec:df:85: 6d:4b:d5:7e:c2:a8:da:3d:d4:93:c0:3a:cd:08:54:70:21:f9: b8:98:d1:b0:29:15:51:1f:81:c2:21:fd:ec:ce:66:a4:a7:94: de:27:bb:67:23:0f:70:38:f8:d3:12:53:4a:4d:8c:df:9e:a4: 5f:93:ed:c8:d1:e0:b7:e7:5d:7a:5c:67:6a:d6:c4:1d:80:71: 82:6a:2e:94:45:e9:4b:6a:c3:3a:b4:97:b6:75:f3:25:52:a3: a5:71:d8:cd:07:71:5a:4b:a1:fe:dd:7f:49:86:76:64:3d:02: f4:b2:1d:71:48:5c:98:86:4b:a9:27:a1:f8:78:c8:63:a8:7e: 56:0c:83:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx02SlPOzVr1mksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj Nzc4MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NWFmMTM3MjctOTE3Ni00ZGU5LWJlNTQtMDcwZmFhYzlkYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xPxs930n36Yitg9zlxfZK/n/D7jN9R0UVl2 qINNR00uy1Q/QZn0pLGZvJ9SvLe3AtWnJ7Zny8TfK/fxaLAKTYhHHZBDPCN5dWO/ m6QhG3qjeJk6crEkFM3DpGFrs9eqGgeAOjm+flPBgAJuXDq+/t65670BsuysndP2 8laIfZ/nNc1Jq+Hmp0daPWz/YNdDrGLWTjqXkw8Cobo5WZzkacbbfxIGKJySJn/b M6Q3OesOlFmCvI6IS+X3exQQ2M9gAPxxhYn1iSyF4yjFD1v0E9gAYkNAMvlxec/h VfVHMfAtcK2YMgDHnWaAc87s65UKJSTyDC1teQUnVRv2kyAI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh4yFynoGPG/q98MdOAyWfXrf96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvMzIzYzJmYzctOTAwOS0z M2NlLWFhMDktNjRiMjMyNDI2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5 MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxkXdI4ysQF/XMIMJQcuN8/Yer3F2FU0wZciWIdQMuw9VK5igjApwmI zuu6QHSt/rTgmxe9/JFVWLE4NoWdkeoaVK9J0CMDZ5qo1qmln5LfwhyYEns2SxvS e8+UNfe4TbYX56MopdVgGRJqO4QNPV4opmoHbBsPC0Snl+zfhW1L1X7CqNo91JPA Os0IVHAh+biY0bApFVEfgcIh/ezOZqSnlN4nu2cjD3A4+NMSU0pNjN+epF+T7cjR 4LfnXXpcZ2rWxB2AcYJqLpRF6Utqwzq0l7Z18yVSo6Vx2M0HcVpLof7df0mGdmQ9 AvSyHXFIXJiGS6knofh4yGOoflYMg6I= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:57 2025 by rpki-client