$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json) Hash identifier: XssPpgcvrsAyEjkCkHpoHDcu38u4rceCQCVhzZRuMsc= Subject key identifier: FB:E1:AF:13:3A:95:91:27:F8:56:DB:92:2F:1B:EE:10:72:E0:E1:BC Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584AC9DBAFA75B7F53A6050E2F00 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:af:a7:5b:7f:53:a6:05:0e:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=c56c35f3-097e-468e-9e9b-118f85f448e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:50:e7:73:74:c0:17:65:f1:e4:60:9e:be:4b: 0d:e8:ea:e7:66:50:5e:aa:15:a0:0a:a1:7f:7a:e1: d2:0a:a4:23:41:0d:04:96:4c:0c:cf:2d:e3:b0:25: f8:94:11:77:06:1c:dd:3a:c2:b5:61:04:af:04:35: 24:9e:32:4e:b7:20:b7:ec:f8:18:77:d4:17:8d:6c: 3d:fa:a3:9b:0b:67:82:a0:3d:b8:82:f2:49:99:0b: a8:23:a1:c9:6c:ed:76:77:f9:eb:0b:35:c1:e0:12: d4:7c:69:d1:62:ae:b0:8c:b6:9a:ac:83:a0:94:de: 37:07:a1:2a:e6:58:55:8d:54:71:b8:8d:d8:cb:e2: 92:65:96:1f:78:fc:48:c0:6c:63:d4:0a:3a:24:fa: b8:ca:d7:58:a5:00:bf:47:1c:a3:5b:d8:a8:6f:7c: 4c:15:7b:dd:7b:4e:46:97:57:54:51:a6:f9:9f:59: ca:16:2f:cc:3e:d7:5c:0c:5d:cf:22:38:8f:20:78: 7b:27:5f:4c:3a:77:20:67:89:0b:50:15:fb:e0:6d: cb:c5:27:4f:a4:e0:56:5f:50:a8:41:0a:eb:cc:d5: 57:b4:a6:8e:8c:46:46:c1:41:9c:fa:45:db:c7:a3: 88:53:8a:fc:5e:b0:30:cc:45:95:4b:6d:b4:9d:1b: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:AF:13:3A:95:91:27:F8:56:DB:92:2F:1B:EE:10:72:E0:E1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7c:5b:aa:1a:30:fe:80:c6:a6:a4:43:c1:5c:15:36:1c:4d: 76:65:10:c0:a4:05:79:64:86:a4:79:f0:88:84:ef:8f:ef:c8: 92:0c:87:8b:46:a2:e9:5e:97:e9:a9:a4:ee:81:17:69:2c:25: 58:99:f2:20:58:6d:c9:00:04:ec:60:f1:82:b3:f8:30:45:19: 5e:a0:58:16:20:f8:6d:6c:b0:83:2a:e1:80:9b:f7:1f:02:d1: bf:c0:32:a9:c3:cd:45:d0:aa:1b:5d:0f:9c:95:ef:51:67:72: 2f:cc:a3:58:32:44:b0:0a:a1:f5:b5:fe:94:b4:22:6b:2c:3f: 36:df:d9:3b:ba:57:57:ff:d1:0b:23:94:a2:9b:e6:66:91:99: 6f:f9:52:73:96:aa:0d:c8:f5:f4:bd:b4:5f:38:b0:c0:73:1e: 47:8d:64:0b:57:28:1e:6e:aa:8d:a7:80:8d:56:70:52:72:8c: 2a:e9:90:55:dd:20:b5:b6:27:18:e9:57:25:c2:1f:b9:41:dd: 73:2c:4c:a2:bf:28:d0:82:2a:f0:17:a6:59:59:11:e5:a8:4f: 15:4d:19:e3:df:95:e1:c4:d3:fd:27:2e:11:48:76:b0:de:1c: c5:4b:65:cb:11:2e:0d:24:8c:50:c0:b6:34:41:e9:13:6d:cc: 12:fd:0b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26+nW39TpgUOLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YzU2YzM1ZjMtMDk3ZS00NjhlLTllOWItMTE4Zjg1ZjQ0OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVDnc3TAF2Xx5GCevksN6OrnZlBeqhWgCqF/ euHSCqQjQQ0ElkwMzy3jsCX4lBF3BhzdOsK1YQSvBDUknjJOtyC37PgYd9QXjWw9 +qObC2eCoD24gvJJmQuoI6HJbO12d/nrCzXB4BLUfGnRYq6wjLaarIOglN43B6Eq 5lhVjVRxuI3Yy+KSZZYfePxIwGxj1Ao6JPq4ytdYpQC/RxyjW9iob3xMFXvde05G l1dUUab5n1nKFi/MPtdcDF3PIjiPIHh7J19MOncgZ4kLUBX74G3LxSdPpOBWX1Co QQrrzNVXtKaOjEZGwUGc+kXbx6OIU4r8XrAwzEWVS220nRvbOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvhrxM6lZEn+Fbbki8b7hBy4OG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjk4ZTE5ZTgtYjBhYy0z OGFhLTgyZmYtYWY2M2JkMTM1NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE98W6oaMP6AxqakQ8FcFTYcTXZlEMCkBXlkhqR58IiE74/vyJIMh4tG oulel+mppO6BF2ksJViZ8iBYbckABOxg8YKz+DBFGV6gWBYg+G1ssIMq4YCb9x8C 0b/AMqnDzUXQqhtdD5yV71Fnci/Mo1gyRLAKofW1/pS0ImssPzbf2Tu6V1f/0Qsj lKKb5maRmW/5UnOWqg3I9fS9tF84sMBzHkeNZAtXKB5uqo2ngI1WcFJyjCrpkFXd ILW2JxjpVyXCH7lB3XMsTKK/KNCCKvAXpllZEeWoTxVNGePfleHE0/0nLhFIdrDe HMVLZcsRLg0kjFDAtjRB6RNtzBL9CwQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:28:38 2025 by rpki-client