$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa File: d2e04c79-df6b-3606-8995-a89e4629fc1c.roa (raw, json) Hash identifier: Blqh30yLpNm07VYv8U8aKz0zAp9ERUNYpyt3gHH3hWs= Subject key identifier: EF:74:22:D7:6D:7C:12:74:92:98:38:BC:38:FC:5B:AF:C3:92:D5:EA Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584B748F4A1C24DF02C06B93CF00 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa Signing time: Wed 08 Oct 2025 16:30:11 +0000 ROA not before: Wed 08 Oct 2025 16:30:11 +0000 ROA not after: Tue 06 Jan 2026 17:30:11 +0000 asID: 397032 IP address blocks: 198.135.185.0/24 maxlen: 24 2602:2d1::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:8f:4a:1c:24:df:02:c0:6b:93:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Oct 8 16:30:11 2025 GMT Not After : Jan 6 17:30:11 2026 GMT Subject: CN=dbe75d59-8203-4488-bdbe-28f98e494f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:2b:36:b6:bc:fd:b1:ad:d4:fb:12:b2:fc: 13:f5:f9:f3:18:78:95:1e:d0:34:ca:99:93:9a:1f: 0c:aa:97:11:86:07:7a:cd:56:4e:34:7a:7b:25:93: 2c:80:e8:0c:c5:cd:ff:da:74:f0:4c:fc:aa:cf:97: fa:92:c7:9d:f6:78:58:a1:14:71:18:93:9e:a6:da: 53:2b:10:56:67:55:cf:9f:dc:0b:59:ff:d9:5a:f4: 16:05:c3:b6:b0:88:54:8b:a8:45:27:44:22:da:51: 42:b2:38:a7:cb:dc:43:12:fe:91:9e:75:7e:84:ed: 0d:c8:e6:07:ef:23:29:16:09:05:2a:5a:58:e8:49: 58:0a:43:ce:a8:6f:a1:0e:51:58:79:d7:34:a7:ba: 3c:fa:98:07:e4:43:6c:d2:e9:fc:d2:6e:dd:c3:8f: 9c:09:b2:bd:86:3b:1c:3b:0a:07:47:3e:61:e0:de: 13:2e:09:86:d8:47:2e:7d:71:51:4f:63:8f:06:97: c2:0f:5e:48:68:74:47:d8:f2:cf:c5:5f:60:6c:f7: 1c:0d:29:eb:82:f7:ad:5d:8b:a4:60:69:7b:ce:8a: d1:0d:70:b6:e3:4b:5f:f4:25:06:d5:b4:cf:e0:ba: 45:89:00:f6:58:8d:0c:72:44:1b:79:5f:95:9d:24: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:74:22:D7:6D:7C:12:74:92:98:38:BC:38:FC:5B:AF:C3:92:D5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 198.135.185.0/24 IPv6: 2602:2d1::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2c:08:b4:93:d9:64:56:53:d7:b9:99:1d:1b:1e:14:ec:5d: 93:ea:07:4d:ba:2e:9f:89:bd:c6:a6:e5:49:2e:79:e9:77:66: 42:37:a1:c5:7f:5e:74:44:cd:13:09:b1:e3:e9:b9:6f:60:31: 55:37:39:06:8c:6c:50:c1:c0:ef:23:5f:e9:a9:4b:d4:ee:fa: 67:81:34:57:3b:d3:20:76:58:e4:71:a1:02:7e:cd:ab:ee:42: 14:16:02:22:19:55:44:b7:e2:52:47:23:43:72:80:38:c1:2a: 7c:33:cf:f2:62:8d:e7:79:73:d5:28:47:31:05:70:65:bd:b2: 98:a1:4a:dd:25:86:df:bb:21:d2:f0:c0:0c:91:1a:3f:8a:42: bf:05:c3:a3:c4:d0:e9:17:a5:2c:b8:6d:77:49:a0:b3:29:bc: f4:ab:16:6e:df:b4:c9:16:32:cc:16:a7:95:b6:0e:79:32:b8: 6d:f6:22:2d:bf:41:a4:c0:31:0e:0a:c2:91:f3:f3:65:0a:b6: ce:e6:ce:d4:9b:6f:65:e0:8e:4b:7e:a5:1e:e5:fb:3f:6f:75: d0:d3:4d:6f:1f:97:1d:c5:e6:bc:50:62:7d:9e:45:c5:d1:7a: 73:75:10:70:b7:38:eb:0c:94:49:a6:ba:b2:b6:b2:60:67:2d: 51:a1:3b:b1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt0j0ocJN8CwGuTzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI1MTAwODE2MzAxMVoXDTI2MDEwNjE3MzAxMVowLzEtMCsGA1UEAxMk ZGJlNzVkNTktODIwMy00NDg4LWJkYmUtMjhmOThlNDk0ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne0rNra8/bGt1PsSsvwT9fnzGHiVHtA0ypmT mh8MqpcRhgd6zVZONHp7JZMsgOgMxc3/2nTwTPyqz5f6ksed9nhYoRRxGJOeptpT KxBWZ1XPn9wLWf/ZWvQWBcO2sIhUi6hFJ0Qi2lFCsjiny9xDEv6RnnV+hO0NyOYH 7yMpFgkFKlpY6ElYCkPOqG+hDlFYedc0p7o8+pgH5ENs0un80m7dw4+cCbK9hjsc OwoHRz5h4N4TLgmG2EcufXFRT2OPBpfCD15IaHRH2PLPxV9gbPccDSnrgvetXYuk YGl7zorRDXC240tf9CUG1bTP4LpFiQD2WI0MckQbeV+VnSTluQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFO90ItdtfBJ0kpg4vDj8W6/DktXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvZDJlMDRjNzktZGY2Yi0z NjA2LTg5OTUtYTg5ZTQ2MjlmYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxoe5MA4E AgACMAgDBgImAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5LAi0k9lkVlPXuZkdGx4U7F2T6gdNui6f ib3GpuVJLnnpd2ZCN6HFf150RM0TCbHj6blvYDFVNzkGjGxQwcDvI1/pqUvU7vpn gTRXO9MgdljkcaECfs2r7kIUFgIiGVVEt+JSRyNDcoA4wSp8M8/yYo3neXPVKEcx BXBlvbKYoUrdJYbfuyHS8MAMkRo/ikK/BcOjxNDpF6UsuG13SaCzKbz0qxZu37TJ FjLMFqeVtg55Mrht9iItv0GkwDEOCsKR8/NlCrbO5s7Um29l4I5LfqUe5fs/b3XQ 001vH5cdxea8UGJ9nkXF0XpzdRBwtzjrDJRJprqytrJgZy1RoTux -----END CERTIFICATE-----Generated at Mon Oct 20 14:52:25 2025 by rpki-client