$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa File: 8e361a8f-c2a7-30c1-872e-d892d5132b12.roa (raw, json) Hash identifier: kiVEz/eu4acd2Kcy37qP2HuXeNLHl0Z3YScLi+lKxU0= Subject key identifier: F1:80:31:88:27:4D:F8:9F:3D:FA:F5:06:77:10:6A:A1:51:5D:AC:68 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584B031694DE1C7C20663C0C62A0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 198.169.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:94:de:1c:7c:20:66:3c:0c:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=d7e675da-e276-4301-8fc1-d590bc83baf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:25:d7:4e:4a:de:6b:b5:78:f1:24:a9:ec:c8: 31:7d:d1:89:dd:d6:dd:9e:9d:26:0a:b9:43:7d:39: 73:5b:25:f0:7f:f4:0b:5b:9d:87:93:ad:fc:03:1c: 46:1e:5c:06:b6:5d:9b:ee:e5:3e:fd:9b:5f:28:fd: 23:d8:e7:bf:29:85:85:91:a3:a9:12:1c:bb:5b:dc: 5c:6b:ac:36:a7:b2:5b:8c:55:25:e0:89:09:bf:0b: e3:51:a8:30:5f:4f:ee:25:1e:12:00:8a:1f:00:41: 56:98:ff:25:1f:5f:61:ac:36:0a:41:e7:79:7d:5d: 15:5a:99:6d:61:0b:0d:81:76:69:2e:ad:a2:31:23: 1f:ba:1c:e0:b7:9d:14:d4:53:91:24:18:df:1c:fa: 8b:60:40:f1:cf:a6:52:07:a5:d3:f4:9b:d2:1f:64: c4:81:08:50:38:b6:c6:d1:1c:6b:98:cf:ca:c6:50: e0:31:57:7d:55:a2:0a:e2:97:95:d8:82:4e:08:1b: 04:7f:43:e9:d9:23:28:87:79:a1:3e:a7:21:7d:51: 81:13:4a:21:a0:ed:45:f5:c7:28:ab:99:c6:79:73: e6:58:84:7b:de:8b:d2:77:a1:b5:fc:94:9e:db:6e: 0a:c2:4f:ef:a6:52:f9:99:03:d2:ea:71:8d:4f:88: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:31:88:27:4D:F8:9F:3D:FA:F5:06:77:10:6A:A1:51:5D:AC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 198.169.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ad:7f:2c:ca:0c:0d:5f:a9:96:95:f0:72:de:b6:42:9d:83: f6:1e:ca:aa:38:28:04:bc:bc:87:38:cb:82:78:5c:37:c2:dc: b9:a5:9b:d2:3b:0f:49:e9:a0:26:5f:54:9a:97:6e:ba:4c:98: b0:98:6d:8d:bf:a2:51:78:c3:c8:b9:e2:56:de:72:14:ee:82: be:ef:3c:83:55:72:f0:5b:06:36:93:81:28:83:08:d6:63:46: e5:c1:11:eb:b4:3d:a5:41:67:0f:32:07:db:99:22:0a:5f:62: a6:d1:14:51:ff:4e:19:3f:51:29:63:90:18:48:00:11:e6:e7: e0:02:88:0f:38:c3:5a:01:8a:d1:34:47:02:e4:64:74:4d:fe: 2f:2a:eb:98:59:a9:cb:13:96:fa:c2:c0:dd:ba:4e:a4:10:a5: c6:50:12:20:16:54:ee:d4:46:1e:5a:15:16:c7:71:52:8f:9e: 28:17:4a:c3:8b:a5:8b:c6:93:26:96:32:01:b6:72:0f:5c:35: 95:41:c9:a9:49:20:c2:b2:e3:41:08:8c:69:4b:c0:4e:9d:79: a4:65:94:b3:4b:81:1c:9b:f2:6a:f4:99:68:ad:40:83:df:c2: 1a:5b:4c:0e:74:2e:e1:14:a1:a2:97:4d:3d:53:d2:73:bd:58: 4a:55:0f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpTeHHwgZjwMYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZDdlNjc1ZGEtZTI3Ni00MzAxLThmYzEtZDU5MGJjODNiYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SXXTkrea7V48SSp7MgxfdGJ3dbdnp0mCrlD fTlzWyXwf/QLW52Hk638AxxGHlwGtl2b7uU+/ZtfKP0j2Oe/KYWFkaOpEhy7W9xc a6w2p7JbjFUl4IkJvwvjUagwX0/uJR4SAIofAEFWmP8lH19hrDYKQed5fV0VWplt YQsNgXZpLq2iMSMfuhzgt50U1FORJBjfHPqLYEDxz6ZSB6XT9JvSH2TEgQhQOLbG 0RxrmM/KxlDgMVd9VaIK4peV2IJOCBsEf0Pp2SMoh3mhPqchfVGBE0ohoO1F9cco q5nGeXPmWIR73ovSd6G1/JSe224Kwk/vplL5mQPS6nGNT4jtUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGAMYgnTfifPfr1BncQaqFRXaxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGUzNjFhOGYtYzJhNy0z MGMxLTg3MmUtZDg5MmQ1MTMyYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADatfyzKDA1fqZaV8HLetkKdg/Yeyqo4KAS8vIc4y4J4XDfC3Lmlm9I7 D0npoCZfVJqXbrpMmLCYbY2/olF4w8i54lbechTugr7vPINVcvBbBjaTgSiDCNZj RuXBEeu0PaVBZw8yB9uZIgpfYqbRFFH/Thk/USljkBhIABHm5+ACiA84w1oBitE0 RwLkZHRN/i8q65hZqcsTlvrCwN26TqQQpcZQEiAWVO7URh5aFRbHcVKPnigXSsOL pYvGkyaWMgG2cg9cNZVByalJIMKy40EIjGlLwE6deaRllLNLgRyb8mr0mWitQIPf whpbTA50LuEUoaKXTT1T0nO9WEpVD4g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:25 2025 by rpki-client