$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa File: d15da3a2-08ce-3992-8b01-fd2369adaa65.roa (raw, json) Hash identifier: AGEc0Oy2LuJ2YnDb6iJf9ACjsR1dAL6Gv5mPLYbemWg= Subject key identifier: 85:3D:AE:26:68:38:3E:1D:7E:8B:D6:A8:76:31:AE:C2:0E:58:D7:18 Certificate issuer: /CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Certificate serial: 010D0C9F4328584B6A61EB8FD4BF46D1E185BA20 Authority key identifier: 60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 62752 IP address blocks: 198.51.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:eb:8f:d4:bf:46:d1:e1:85:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6c1214f6-f7e1-49bd-a302-f3a4d7209184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:52:55:54:27:4d:47:b4:10:ad:a5:9c:ac: 32:a2:dc:1e:55:ec:ec:c7:7a:80:31:12:3d:2c:76: b0:e2:61:68:b2:e4:86:b2:ba:8b:a0:25:25:e9:19: cf:a9:bb:bd:10:6c:9c:29:43:7b:a0:ce:23:36:01: aa:f6:ef:84:3d:ec:3e:99:e1:b7:43:e6:77:84:9f: 0b:1b:74:d3:8c:58:a7:3f:f3:14:af:91:10:b8:fd: f7:af:d1:b1:ec:81:dc:c6:65:56:41:c0:78:de:60: d4:65:cb:e0:45:35:2a:8c:0a:2d:18:8b:09:ea:9a: 5a:84:fa:c3:16:07:85:3c:16:90:67:ff:9e:5c:2b: 43:5d:7a:e6:4f:8f:c4:06:c5:8b:a6:7f:21:d8:46: 19:6f:a0:b1:c9:e1:59:02:ab:9d:cf:0f:b3:7c:c1: 40:54:db:db:e0:d0:49:84:18:09:6b:11:76:0b:d9: e3:87:91:1a:22:e9:0e:12:47:23:34:da:e3:89:24: e5:a7:75:81:bf:cd:a1:73:a6:ff:2f:81:b2:12:d5: 91:92:df:64:42:1c:9b:e5:ea:00:76:63:1c:d9:89: 6b:bf:ee:54:38:8c:e8:42:d9:81:a9:79:8c:5e:ed: 26:ee:e5:43:d6:06:0c:ce:1d:ee:37:63:26:21:42: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3D:AE:26:68:38:3E:1D:7E:8B:D6:A8:76:31:AE:C2:0E:58:D7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl X509v3 Authority Key Identifier: keyid:60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer sbgp-ipAddrBlock: critical IPv4: 198.51.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cf:a8:77:b7:f1:e1:e4:78:5d:ae:34:45:78:0e:af:25:c8: c3:65:cc:6e:85:5f:82:38:b3:5e:c1:82:10:76:5e:b3:bb:90: cb:2a:ce:49:af:f1:bf:ff:ca:a9:a9:27:5d:39:d7:a2:f9:43: 66:ee:49:d4:57:9a:d5:ef:12:2d:6f:51:9f:81:ae:36:2b:0e: 2f:81:87:ac:77:f6:45:18:9a:c8:29:da:0d:5b:de:f2:94:e5: 0c:ef:f4:bb:f0:25:37:d0:ab:c4:26:52:0b:a3:14:69:ae:35: 37:96:81:2d:5a:71:cd:c6:11:f4:8a:72:65:75:47:d1:c6:62: 64:71:6a:c8:ca:6e:60:a4:32:7f:1b:82:80:4e:91:7d:d9:75: dc:54:41:e0:a5:36:d1:43:18:fd:67:2c:c1:26:6e:3d:c5:e9: 70:1d:74:2f:b1:10:e2:4f:5a:fc:6a:91:2f:15:11:09:a4:a5: ea:66:a4:cd:e1:d6:89:ed:e0:ea:f8:aa:95:3e:82:1b:af:d8: 44:bd:41:72:2b:91:36:5e:4b:ed:8a:8a:30:42:c2:bd:6c:9d: 93:15:ef:bd:b3:cc:d2:2e:c8:82:00:bf:35:6f:a2:d7:12:24: fa:e0:69:f6:1a:69:af:34:48:e4:eb:10:62:10:64:29:51:ab: cf:21:69:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeuP1L9G0eGFuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMmM0NjAtOWI0Yi00NTdiLWJiMmMtYTJiMDBmN2Ew ZGQwMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NmMxMjE0ZjYtZjdlMS00OWJkLWEzMDItZjNhNGQ3MjA5MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJSVVQnTUe0EK2lnKwyotweVezsx3qAMRI9 LHaw4mFosuSGsrqLoCUl6RnPqbu9EGycKUN7oM4jNgGq9u+EPew+meG3Q+Z3hJ8L G3TTjFinP/MUr5EQuP33r9Gx7IHcxmVWQcB43mDUZcvgRTUqjAotGIsJ6ppahPrD FgeFPBaQZ/+eXCtDXXrmT4/EBsWLpn8h2EYZb6CxyeFZAqudzw+zfMFAVNvb4NBJ hBgJaxF2C9njh5EaIukOEkcjNNrjiSTlp3WBv82hc6b/L4GyEtWRkt9kQhyb5eoA dmMc2Ylrv+5UOIzoQtmBqXmMXu0m7uVD1gYMzh3uN2MmIUKFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU9riZoOD4dfovWqHYxrsIOWNcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NWUy YzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIwMGY3YTBkZDAvZDE1ZGEzYTItMDhjZS0z OTkyLThiMDEtZmQyMzY5YWRhYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODVlMmM0NjAtOWI0Yi00NTdiLWJi MmMtYTJiMDBmN2EwZGQwLzg1ZTJjNDYwLTliNGItNDU3Yi1iYjJjLWEyYjAwZjdh MGRkMC5jcmwwHwYDVR0jBBgwFoAUYF9W4aANeJMViQRIYXPrCPcCPokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NWUyYzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIw MGY3YTBkZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjNLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnPqHe38eHkeF2uNEV4Dq8lyMNlzG6FX4I4s17BghB2XrO7kMsqzkmv 8b//yqmpJ10516L5Q2buSdRXmtXvEi1vUZ+BrjYrDi+Bh6x39kUYmsgp2g1b3vKU 5Qzv9LvwJTfQq8QmUgujFGmuNTeWgS1acc3GEfSKcmV1R9HGYmRxasjKbmCkMn8b goBOkX3ZddxUQeClNtFDGP1nLMEmbj3F6XAddC+xEOJPWvxqkS8VEQmkpepmpM3h 1ont4Or4qpU+ghuv2ES9QXIrkTZeS+2KijBCwr1snZMV772zzNIuyIIAvzVvotcS JPrgafYaaa80SOTrEGIQZClRq88haYU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:42 2025 by rpki-client