$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36a4d79-7942-397f-a0a1-a6c7ca53498e.roa File: a36a4d79-7942-397f-a0a1-a6c7ca53498e.roa (raw, json) Hash identifier: Ve8UNCdkUxAeU1zw6JGA9OV+W5otzKb/YHs3Fuw86ds= Subject key identifier: 5A:C5:C6:AF:AF:D4:70:A4:A4:2A:08:FA:66:1E:55:20:C5:77:FE:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A1E6EAE90F563F101100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36a4d79-7942-397f-a0a1-a6c7ca53498e.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397217 IP address blocks: 198.133.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a1:e6:ea:e9:0f:56:3f:10:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=f1531cee-4cdb-4a0e-b36f-7215a704116c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:96:09:8f:fe:aa:fd:f2:e9:81:ab:2b:cd: fa:bb:69:2c:1b:e8:ed:0a:30:e8:b2:f8:92:f7:ea: d2:d8:96:7b:fa:34:2c:77:cc:d9:5c:ea:13:5c:24: 75:a8:d0:be:d7:c5:0b:34:89:12:86:86:f4:e7:01: da:b2:81:ef:9e:dc:68:a7:d1:0d:b0:0e:23:e2:11: 77:7a:b7:e7:2d:ab:71:cd:03:56:15:2f:57:43:c6: b4:09:2a:7b:3c:94:d7:af:87:5d:a4:1f:af:36:c8: f0:37:12:4d:a6:c4:73:01:6d:ed:a2:72:92:95:20: 20:33:7c:e0:49:2f:86:ca:73:e2:6d:40:ec:be:58: fd:58:51:06:54:f3:dc:90:d6:91:2b:a5:b0:46:38: d3:17:fb:fe:01:5a:3e:d7:11:04:e4:79:95:f7:f7: 06:d3:ae:16:c0:a1:cb:64:70:1f:61:b0:6a:d2:7a: 81:7c:56:5a:f3:cd:be:dc:3e:6f:e4:24:61:8f:53: ac:73:00:b3:83:9c:2d:66:e6:9c:0d:2e:ea:69:11: 02:76:81:91:cc:59:58:1e:79:8e:cf:60:5f:37:12: bf:bb:3a:2c:14:ca:ce:f7:f2:9a:fb:e0:a8:f9:6e: fe:96:9c:77:3b:98:e6:a4:5d:16:65:9c:2b:96:91: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C5:C6:AF:AF:D4:70:A4:A4:2A:08:FA:66:1E:55:20:C5:77:FE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36a4d79-7942-397f-a0a1-a6c7ca53498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 198.133.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:55:a0:6e:7a:61:e7:b8:a9:5e:59:c5:b5:78:06:04:b1:f8: 3e:85:bd:fe:62:62:6e:6c:8d:77:a5:c8:99:70:7b:42:0d:cd: ee:89:6e:90:59:03:64:65:f6:f9:04:12:6e:2f:45:07:e4:9e: 1c:c7:79:3e:c3:7e:3a:33:0d:69:f5:a1:46:63:7e:0d:0a:83: a3:77:84:af:db:3b:5d:0e:c6:dd:4f:76:8d:ca:ce:f4:b5:c2: 4e:b3:ad:ad:4e:a4:de:7f:e9:09:7a:0d:f5:0c:59:5b:ea:5f: 11:49:8c:19:ea:8a:66:44:3a:3f:a1:fb:15:2c:b2:6a:dd:aa: 02:f2:1f:39:c0:70:da:c5:87:ab:e8:e1:43:1c:1f:40:5d:7e: 36:90:f1:ab:9b:a0:66:b0:a5:da:a1:39:8b:18:5f:5f:c3:57: fd:d0:7c:96:e4:d2:77:d0:3a:53:70:7c:32:ec:e3:ef:7f:89: 06:a9:48:39:58:b1:68:67:29:a6:5b:5b:59:12:21:d9:65:37: 40:8a:1f:c9:75:8d:d5:c8:50:a0:95:bc:5d:02:4f:17:59:a1: 3c:85:0e:24:19:48:2f:dc:cf:78:9d:84:13:a4:c5:af:9c:9e: 07:0d:19:4b:87:9c:06:9e:15:8e:95:7a:e4:2a:fd:97:15:08: 6f:5f:a8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaHm6ukPVj8QEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjE1MzFjZWUtNGNkYi00YTBlLWIzNmYtNzIxNWE3MDQxMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dyWCY/+qv3y6YGrK836u2ksG+jtCjDosviS 9+rS2JZ7+jQsd8zZXOoTXCR1qNC+18ULNIkShob05wHasoHvntxop9ENsA4j4hF3 erfnLatxzQNWFS9XQ8a0CSp7PJTXr4ddpB+vNsjwNxJNpsRzAW3tonKSlSAgM3zg SS+GynPibUDsvlj9WFEGVPPckNaRK6WwRjjTF/v+AVo+1xEE5HmV9/cG064WwKHL ZHAfYbBq0nqBfFZa882+3D5v5CRhj1OscwCzg5wtZuacDS7qaRECdoGRzFlYHnmO z2BfNxK/uzosFMrO9/Ka++Co+W7+lpx3O5jmpF0WZZwrlpFzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrFxq+v1HCkpCoI+mYeVSDFd/6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM2YTRkNzktNzk0Mi0z OTdmLWEwYTEtYTZjN2NhNTM0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5VoG56Yee4qV5ZxbV4BgSx+D6Fvf5iYm5sjXelyJlwe0INze6JbpBZ A2Rl9vkEEm4vRQfknhzHeT7DfjozDWn1oUZjfg0Kg6N3hK/bO10Oxt1Pdo3KzvS1 wk6zra1OpN5/6Ql6DfUMWVvqXxFJjBnqimZEOj+h+xUssmrdqgLyHznAcNrFh6vo 4UMcH0BdfjaQ8auboGawpdqhOYsYX1/DV/3QfJbk0nfQOlNwfDLs4+9/iQapSDlY sWhnKaZbW1kSIdllN0CKH8l1jdXIUKCVvF0CTxdZoTyFDiQZSC/cz3idhBOkxa+c ngcNGUuHnAaeFY6VeuQq/ZcVCG9fqOE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:18 2025 by rpki-client