$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa File: 210e7f2e-1d27-3808-9799-9128f2f742cc.roa (raw, json) Hash identifier: UNE3/1ZpcXVOxI3DaZx/oWod/UMyxpehCPFa7HbbTWQ= Subject key identifier: 29:13:1A:AF:5A:F3:F5:4A:D3:64:5B:7C:56:1F:8E:5C:57:2F:5E:52 Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584B83820C47C15397134B4BBB80 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 11032 IP address blocks: 198.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0c:47:c1:53:97:13:4b:4b:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=c08d93b6-85e5-4def-87a1-dbc07505e376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:d2:d1:89:34:11:67:80:be:71:81:d2:b0: 04:ed:80:20:0c:14:f8:49:a9:4a:89:5c:18:94:48: 52:05:a8:44:d6:f6:95:7a:83:0b:21:71:71:32:e1: 52:ef:52:83:44:53:a8:a6:85:10:73:d5:bf:63:13: 1f:8c:ea:96:fc:92:28:a6:e5:e1:68:b6:f6:39:11: 7b:c3:e7:49:91:42:f3:05:9e:40:73:21:cb:b3:72: c3:62:e9:a5:3f:05:36:a6:7e:d5:a8:20:46:64:84: e4:6b:93:81:c3:b3:45:b4:9d:5d:e6:d7:7e:45:c6: 1a:d7:01:37:5e:28:03:46:1b:24:71:d9:a1:7b:94: 72:4c:18:8c:26:4a:03:0a:a2:39:e6:ab:c4:9c:3b: 0d:07:54:11:d0:45:7c:96:f9:66:4e:f1:7d:a6:30: eb:8b:0f:18:df:9d:90:ba:bb:dc:12:ba:ce:01:d1: ab:b7:d6:59:0a:ef:93:fe:0d:b1:55:8c:91:a0:4b: 69:f2:16:33:65:34:bf:4c:ef:33:53:9b:97:b6:2a: c9:61:03:25:d2:fd:16:be:4e:3b:c2:77:90:f0:52: 9f:f5:44:a2:2c:8a:97:96:86:44:a2:db:82:bb:ca: b9:4d:89:cf:16:b2:5c:af:13:b7:38:78:31:45:d4: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:1A:AF:5A:F3:F5:4A:D3:64:5B:7C:56:1F:8E:5C:57:2F:5E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 198.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:40:96:c7:e5:5d:07:45:ed:e4:a3:12:cd:cd:3d:5f:9f:74: 75:53:4c:76:fd:8e:4a:78:02:85:1f:13:b1:0a:6e:15:a3:98: 46:30:a7:ca:b6:5b:44:97:67:88:aa:df:fe:45:04:6b:4f:68: 5f:d8:91:c7:9f:53:aa:4f:7b:51:d2:f4:69:20:70:38:a7:25: 85:f7:80:ec:03:fa:5e:49:48:36:48:fc:3b:2c:44:ba:7e:12: 8d:2d:66:b3:f7:b3:db:a9:1e:f7:8d:d9:21:d1:ba:bd:2c:56: fc:16:d5:e2:48:ef:04:bc:29:aa:09:ec:29:4b:38:b4:51:1e: fb:10:67:5a:ae:74:c2:78:5d:8e:03:21:26:b8:ab:45:f0:b4: 14:28:fb:89:5d:80:1c:8b:9e:66:15:13:fb:36:2d:ad:b0:89: 7c:3b:87:4a:d7:9a:77:00:f4:63:a4:de:56:b7:ad:1e:4d:c1: 28:10:fa:2a:31:ed:ce:f9:3c:8b:d5:f3:b6:55:af:07:d0:52: 40:ef:ca:8c:d6:41:ec:20:a2:4b:3c:c4:27:91:5d:cc:a5:1d: e7:3f:0d:77:d8:7d:11:04:b1:d5:2d:11:23:5a:45:c2:54:93: 65:e3:14:2c:30:4f:5a:00:0d:a0:0e:6e:13:f9:1a:2b:61:af: a5:d3:b7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDggxHwVOXE0tLu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YzA4ZDkzYjYtODVlNS00ZGVmLTg3YTEtZGJjMDc1MDVlMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRXS0Yk0EWeAvnGB0rAE7YAgDBT4SalKiVwY lEhSBahE1vaVeoMLIXFxMuFS71KDRFOopoUQc9W/YxMfjOqW/JIopuXhaLb2ORF7 w+dJkULzBZ5AcyHLs3LDYumlPwU2pn7VqCBGZITka5OBw7NFtJ1d5td+RcYa1wE3 XigDRhskcdmhe5RyTBiMJkoDCqI55qvEnDsNB1QR0EV8lvlmTvF9pjDriw8Y352Q urvcErrOAdGrt9ZZCu+T/g2xVYyRoEtp8hYzZTS/TO8zU5uXtirJYQMl0v0Wvk47 wneQ8FKf9USiLIqXloZEotuCu8q5TYnPFrJcrxO3OHgxRdR0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkTGq9a8/VK02RbfFYfjlxXL15SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvMjEwZTdmMmUtMWQyNy0z ODA4LTk3OTktOTEyOGYyZjc0MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9AlsflXQdF7eSjEs3NPV+fdHVTTHb9jkp4AoUfE7EKbhWjmEYwp8q2 W0SXZ4iq3/5FBGtPaF/YkcefU6pPe1HS9GkgcDinJYX3gOwD+l5JSDZI/DssRLp+ Eo0tZrP3s9upHveN2SHRur0sVvwW1eJI7wS8KaoJ7ClLOLRRHvsQZ1qudMJ4XY4D ISa4q0XwtBQo+4ldgByLnmYVE/s2La2wiXw7h0rXmncA9GOk3la3rR5NwSgQ+iox 7c75PIvV87ZVrwfQUkDvyozWQewgoks8xCeRXcylHec/DXfYfREEsdUtESNaRcJU k2XjFCwwT1oADaAObhP5Githr6XTt0I= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:00 2025 by rpki-client