$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b1f01e34-d8dc-30ce-9cc2-422c8a11c051.roa File: b1f01e34-d8dc-30ce-9cc2-422c8a11c051.roa (raw, json) Hash identifier: iG3kz4DOrj3z3Wu0VY2pp06vB+LBd/krhP+4zk6x3sk= Subject key identifier: 57:D1:6E:A8:E0:A8:57:E2:7B:34:72:80:2E:C0:01:C7:89:07:C4:40 Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584B699CE4A7D910E6699A025210 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b1f01e34-d8dc-30ce-9cc2-422c8a11c051.roa Signing time: Fri 26 Sep 2025 21:27:56 +0000 ROA not before: Fri 26 Sep 2025 21:27:56 +0000 ROA not after: Thu 25 Dec 2025 22:27:56 +0000 asID: 400655 IP address blocks: 198.135.185.0/24 maxlen: 24 2602:2d1::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:9c:e4:a7:d9:10:e6:69:9a:02:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Sep 26 21:27:56 2025 GMT Not After : Dec 25 22:27:56 2025 GMT Subject: CN=413211aa-6661-45aa-a635-c0dd1f05ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:9b:93:01:02:f6:f3:d4:6f:ae:93:1c:8d: cc:53:52:00:d5:27:4b:30:d0:cf:a8:c4:ab:e2:d8: 3e:4e:fa:32:b6:93:4c:85:0a:44:84:a3:94:67:16: 8c:ec:1b:c1:a2:5c:2e:80:7a:c4:55:a7:22:8c:cc: 70:57:5a:35:4a:f4:65:ff:b0:b1:6d:0d:d0:a0:11: 51:6b:da:5e:9d:3d:ea:f0:57:17:28:94:56:67:49: 2e:7d:3d:ce:78:54:bf:4d:29:f4:dc:3c:d5:34:1c: b7:2e:c6:04:78:df:6e:3d:d2:67:6c:98:5e:b2:a2: 41:33:33:f4:6f:78:ca:a9:11:b8:fc:5c:71:de:58: 04:52:71:51:45:48:d5:c1:9d:ec:9a:bb:bd:84:96: 09:d3:cb:1e:af:1b:1c:5d:ff:77:e4:9a:36:f0:84: 2d:b6:01:02:f5:a3:63:9e:b7:c4:c3:56:04:5f:b8: 11:47:f3:57:52:cd:e3:8b:a4:74:78:82:81:65:77: 54:45:78:ce:ad:d0:8b:52:ea:38:a7:ae:ea:ac:22: ae:4f:6b:2d:e3:05:d6:bd:2f:41:8c:30:d9:10:25: 7f:ff:7b:4f:58:53:88:ab:ed:10:f8:80:48:d2:e7: c5:d4:c0:c7:fa:55:ec:d2:1c:c4:e5:ef:7e:0f:14: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D1:6E:A8:E0:A8:57:E2:7B:34:72:80:2E:C0:01:C7:89:07:C4:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b1f01e34-d8dc-30ce-9cc2-422c8a11c051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 198.135.185.0/24 IPv6: 2602:2d1::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:81:8e:38:a5:c1:30:1d:31:1f:26:5d:dd:3c:d9:b8:1d:3c: e5:93:ba:40:b1:76:07:a8:dc:05:8e:2f:67:cd:1f:f6:b0:79: 60:19:24:03:61:d7:ab:f5:74:39:ad:d7:4a:80:3c:76:64:be: 21:a9:9d:27:67:2f:ae:b6:d0:fc:97:4f:a7:f7:fa:2d:f9:10: 32:93:13:01:71:3e:e7:50:17:aa:f9:7c:d1:b0:d3:c9:24:31: f5:65:7f:cd:e8:8f:5e:e5:d1:7e:e0:fe:4c:17:71:82:df:d7: 3b:5a:27:a7:42:3f:b0:48:4d:3d:da:dc:80:e9:6c:bc:b9:a3: 02:a9:5e:3b:9b:9e:2a:b3:99:5e:12:a7:1d:1e:b8:28:48:45: 0d:d6:ae:d4:01:da:5f:99:23:71:ce:b2:ec:f5:b8:9e:c5:3d: d3:eb:55:79:04:8a:6f:af:08:8f:c1:d8:0d:2c:21:bf:90:b8: 2f:1e:1c:10:ae:34:2e:85:4f:77:56:e3:5e:57:ac:b0:25:14: b2:23:4c:d1:f9:0e:41:28:7f:13:49:d6:4a:36:84:88:ce:ae: ae:69:b0:c4:62:e8:28:cf:51:c8:53:d2:11:70:c6:9b:d0:ba: 6c:8d:78:7c:16:33:1b:b1:b4:8e:de:63:ea:ce:85:a9:69:45: 4d:15:49:3d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtpnOSn2RDmaZoCUhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI1MDkyNjIxMjc1NloXDTI1MTIyNTIyMjc1NlowLzEtMCsGA1UEAxMk NDEzMjExYWEtNjY2MS00NWFhLWE2MzUtYzBkZDFmMDVhYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXabkwEC9vPUb66THI3MU1IA1SdLMNDPqMSr 4tg+TvoytpNMhQpEhKOUZxaM7BvBolwugHrEVacijMxwV1o1SvRl/7CxbQ3QoBFR a9penT3q8FcXKJRWZ0kufT3OeFS/TSn03DzVNBy3LsYEeN9uPdJnbJhesqJBMzP0 b3jKqRG4/Fxx3lgEUnFRRUjVwZ3smru9hJYJ08serxscXf935Jo28IQttgEC9aNj nrfEw1YEX7gRR/NXUs3ji6R0eIKBZXdURXjOrdCLUuo4p67qrCKuT2st4wXWvS9B jDDZECV//3tPWFOIq+0Q+IBI0ufF1MDH+lXs0hzE5e9+DxRyOQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFfRbqjgqFfiezRygC7AAceJB8RAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvYjFmMDFlMzQtZDhkYy0z MGNlLTljYzItNDIyYzhhMTFjMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxoe5MA4E AgACMAgDBgImAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1gY44pcEwHTEfJl3dPNm4HTzlk7pAsXYH qNwFji9nzR/2sHlgGSQDYder9XQ5rddKgDx2ZL4hqZ0nZy+uttD8l0+n9/ot+RAy kxMBcT7nUBeq+XzRsNPJJDH1ZX/N6I9e5dF+4P5MF3GC39c7WienQj+wSE092tyA 6Wy8uaMCqV47m54qs5leEqcdHrgoSEUN1q7UAdpfmSNxzrLs9biexT3T61V5BIpv rwiPwdgNLCG/kLgvHhwQrjQuhU93VuNeV6ywJRSyI0zR+Q5BKH8TSdZKNoSIzq6u abDEYugoz1HIU9IRcMab0LpsjXh8FjMbsbSO3mPqzoWpaUVNFUk9 -----END CERTIFICATE-----Generated at Sun Oct 19 23:14:58 2025 by rpki-client