$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa File: e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa (raw, json) Hash identifier: eATaYgOfx99MckrVwmeMavmIoS9E6PAjXyZbV+/DxlU= Subject key identifier: 66:42:78:3D:4F:48:28:37:E4:2C:20:69:22:15:44:BD:07:2D:61:18 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B7C87612FCF3E7168AE6532E0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 2559 IP address blocks: 198.241.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:61:2f:cf:3e:71:68:ae:65:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=273c1831-52c8-4dd8-8141-d7f018720fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:df:c1:33:5d:71:37:c6:76:3b:26:8d:76: 5a:41:f1:34:08:bf:35:a2:98:9b:8f:97:bb:97:5e: fd:ce:55:0c:66:c7:88:d6:c9:8c:d3:5c:62:e4:a2: 7c:96:26:f0:3e:dd:63:29:8a:d1:0f:5c:fd:ff:64: cd:eb:ce:cc:08:6b:cf:9a:9e:f0:1c:ff:1e:04:06: ad:26:52:98:51:4e:e0:77:9f:89:98:09:8b:a4:30: 35:4c:2c:ad:de:01:55:c3:ac:69:0a:f4:d1:26:87: 4a:04:96:d5:68:30:6d:0c:5f:1c:01:e9:f5:f8:16: 34:ec:87:d9:fe:53:a9:c9:64:8b:26:a5:4c:e0:94: 0d:79:1c:9e:82:a8:30:98:5c:6a:10:b3:33:64:20: 6e:32:f7:7e:fc:1f:e1:8a:80:01:75:d6:a1:73:48: ab:8e:17:7e:cf:60:4c:b9:4b:7a:22:2a:e1:1d:82: b5:24:a3:94:12:43:92:9f:83:d9:9e:11:ef:c1:2a: 61:54:11:0f:00:b5:fa:28:9c:39:f9:09:b2:02:de: 00:f8:17:bb:3d:17:3d:ff:e5:37:6b:cf:62:06:3c: e5:5e:f6:50:9c:de:85:97:81:a8:98:e2:70:45:e7: 18:c1:4f:a3:33:8b:f4:d2:69:86:43:fa:b9:df:21: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:42:78:3D:4F:48:28:37:E4:2C:20:69:22:15:44:BD:07:2D:61:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:41:36:f1:31:98:54:d4:a7:bf:a4:1d:78:92:af:18:2f:51: b5:1f:ef:2d:c0:18:94:c6:aa:63:51:3b:c8:19:78:13:70:49: 27:ac:a1:9c:ad:d4:7c:aa:c3:67:47:2b:7f:6f:9d:52:4b:b8: a8:44:6a:60:11:05:46:af:c4:8b:26:99:50:b8:f4:96:a6:c1: 21:9c:ad:fd:c6:ad:3c:6d:35:a3:f4:29:55:68:71:1c:0f:7f: 8b:61:39:a9:63:cf:1e:08:51:63:2e:cc:73:0e:6e:f6:50:7d: 6d:48:92:64:c3:d3:15:55:dc:be:b6:25:b1:91:4d:40:23:19: e8:57:31:be:d5:13:5b:86:ab:8b:b2:0c:f4:10:0a:84:81:08: 5e:e9:36:4e:1e:5c:78:cc:63:c1:b3:46:c1:be:1c:0f:7c:9b: 88:b3:03:05:c9:e8:d2:40:42:ac:ad:f2:76:69:ed:b1:38:5c: d1:d1:47:76:ce:46:31:fe:90:66:6a:45:fb:a2:4b:cb:60:0e: ad:3d:c8:30:73:1d:33:37:f8:52:b9:6a:dc:28:6c:f3:7c:70: 53:e8:db:34:41:d5:73:1e:fb:a6:17:bb:46:b3:e5:2a:80:60: 1e:ea:b3:c4:dd:f5:82:6f:67:68:9c:dc:2c:9b:ef:96:8d:ad: 51:c7:32:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2Evzz5xaK5lMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MjczYzE4MzEtNTJjOC00ZGQ4LTgxNDEtZDdmMDE4NzIwZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PfwTNdcTfGdjsmjXZaQfE0CL81opibj5e7 l179zlUMZseI1smM01xi5KJ8libwPt1jKYrRD1z9/2TN687MCGvPmp7wHP8eBAat JlKYUU7gd5+JmAmLpDA1TCyt3gFVw6xpCvTRJodKBJbVaDBtDF8cAen1+BY07IfZ /lOpyWSLJqVM4JQNeRyegqgwmFxqELMzZCBuMvd+/B/hioABddahc0irjhd+z2BM uUt6IirhHYK1JKOUEkOSn4PZnhHvwSphVBEPALX6KJw5+QmyAt4A+Be7PRc9/+U3 a89iBjzlXvZQnN6Fl4GomOJwRecYwU+jM4v00mmGQ/q53yFhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZCeD1PSCg35CwgaSIVRL0HLWEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZTQwYTFiYmQtMzdkMy0z MWZhLTk1YjMtMDBjZTNkZDU3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhBNvExmFTUp7+kHXiSrxgvUbUf7y3AGJTGqmNRO8gZeBNwSSesoZyt 1Hyqw2dHK39vnVJLuKhEamARBUavxIsmmVC49JamwSGcrf3GrTxtNaP0KVVocRwP f4thOaljzx4IUWMuzHMObvZQfW1IkmTD0xVV3L62JbGRTUAjGehXMb7VE1uGq4uy DPQQCoSBCF7pNk4eXHjMY8GzRsG+HA98m4izAwXJ6NJAQqyt8nZp7bE4XNHRR3bO RjH+kGZqRfuiS8tgDq09yDBzHTM3+FK5atwobPN8cFPo2zRB1XMe+6YXu0az5SqA YB7qs8Td9YJvZ2ic3Cyb75aNrVHHMt0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:12:48 2025 by rpki-client