$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa File: 2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa (raw, json) Hash identifier: uqMdOYlALBPkDStfXCpIUXtAYUGeEIcRP3DWLA67bNk= Subject key identifier: B5:62:03:97:C1:6D:DA:C2:40:C9:94:F0:36:CA:F7:E2:FB:FC:04:4D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5C6CB7C6FA76074092CD8480 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 30058 IP address blocks: 198.255.18.0/23 maxlen: 24 2001:49f0:d00c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b7:c6:fa:76:07:40:92:cd:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=bf570702-586a-4c16-8de2-ffa4e704f642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:b8:70:d9:3a:d8:bd:3e:24:9a:43:e4:41: 6a:8d:46:a9:aa:7f:26:1c:4d:d0:d1:11:e4:9a:12: 19:ce:a9:8f:08:cd:71:4b:47:f7:79:4f:09:9e:a0: 64:8b:61:7e:04:02:89:aa:89:c7:94:fb:a5:a1:27: ec:49:bc:f8:89:29:71:2a:cb:55:51:8c:46:d3:5e: df:2c:c3:ae:76:46:77:2d:a8:69:6d:44:77:a7:f3: c6:b7:0d:d3:69:16:ea:2a:f5:8e:91:a5:dd:fc:a1: 5c:c1:ce:f8:b4:bc:66:43:3f:dd:2c:84:aa:9b:f8: 4c:f7:b9:73:30:e6:81:5a:da:85:b5:c5:e1:78:d0: ab:5a:a9:a7:ed:d1:55:78:25:f9:6b:7b:47:89:9d: ae:cd:a2:3f:77:e5:9f:81:c6:f1:b6:f0:b6:5e:1a: d3:66:ea:d2:2e:28:fe:d8:c3:15:74:ff:70:19:5b: 58:fe:42:ac:b7:0d:6d:71:c8:68:8b:5e:8e:05:62: 6c:04:6b:8a:31:f9:7e:77:d4:2d:59:71:9d:89:0b: d4:73:ea:ae:9e:e3:de:b0:bd:d8:cc:46:26:b9:c8: a0:83:49:fb:24:d6:68:64:7a:5b:3c:e4:13:91:b1: 12:97:c2:dd:25:e0:77:86:83:67:d5:78:d3:3e:4e: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:03:97:C1:6D:DA:C2:40:C9:94:F0:36:CA:F7:E2:FB:FC:04:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.255.18.0/23 IPv6: 2001:49f0:d00c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b7:25:a2:97:f5:4d:5c:11:cf:60:4b:53:1a:35:bc:ab:bd: 1f:05:9e:03:e3:a8:f3:c8:36:3c:de:7e:ba:c3:05:07:38:45: 18:b0:a1:dc:40:af:3e:61:e8:59:87:cf:22:a1:71:1d:e0:64: 5c:e5:b9:53:43:db:de:48:fd:2c:af:82:c0:9a:c9:54:ec:ed: 04:56:d5:ec:2a:a9:f5:43:80:c6:8e:34:71:14:1b:35:cc:d2: 0c:3f:68:1b:59:d7:7d:b6:1c:b9:92:5f:a4:39:eb:fa:f4:fd: 00:2a:b3:f4:be:f3:22:cf:f0:37:b8:68:87:77:93:f4:c3:42: 4a:4a:b4:a1:4d:8a:f2:19:44:20:7e:33:80:3a:89:85:a8:2f: 4b:89:fc:9a:c7:ab:a9:8e:dc:7d:6f:52:b6:80:1c:be:8a:d9: d3:01:e3:e3:42:30:a2:61:17:b7:05:be:c6:80:1f:45:80:e5: cd:da:c0:fc:c6:b0:5a:cf:20:b7:05:17:8f:a7:24:8a:07:c3: fb:f7:c3:a1:ac:a5:2a:59:0c:be:99:79:19:f7:a1:d7:12:67: 3d:82:48:88:94:3f:40:89:48:df:cc:ab:fe:e1:3b:82:44:42: 15:bd:76:5e:4e:18:22:63:1a:d4:94:a8:2a:98:fc:ac:8c:a9: 95:76:4b:f4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtcbLfG+nYHQJLNhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YmY1NzA3MDItNTg2YS00YzE2LThkZTItZmZhNGU3MDRmNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1he4cNk62L0+JJpD5EFqjUapqn8mHE3Q0RHk mhIZzqmPCM1xS0f3eU8JnqBki2F+BAKJqonHlPuloSfsSbz4iSlxKstVUYxG017f LMOudkZ3LahpbUR3p/PGtw3TaRbqKvWOkaXd/KFcwc74tLxmQz/dLISqm/hM97lz MOaBWtqFtcXheNCrWqmn7dFVeCX5a3tHiZ2uzaI/d+WfgcbxtvC2XhrTZurSLij+ 2MMVdP9wGVtY/kKstw1tcchoi16OBWJsBGuKMfl+d9QtWXGdiQvUc+qunuPesL3Y zEYmucigg0n7JNZoZHpbPOQTkbESl8LdJeB3hoNn1XjTPk4oJwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLViA5fBbdrCQMmU8DbK9+L7/ARNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMmQ4YWJmMTUtZTVhMC0z OGFlLWEzZjUtNTZjMDRkY2Y0OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBxv8SMA8E AgACMAkDBwAgAUnw0AwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVrclopf1TVwRz2BLUxo1vKu9HwWeA+Oo 88g2PN5+usMFBzhFGLCh3ECvPmHoWYfPIqFxHeBkXOW5U0Pb3kj9LK+CwJrJVOzt BFbV7Cqp9UOAxo40cRQbNczSDD9oG1nXfbYcuZJfpDnr+vT9ACqz9L7zIs/wN7ho h3eT9MNCSkq0oU2K8hlEIH4zgDqJhagvS4n8mserqY7cfW9StoAcvorZ0wHj40Iw omEXtwW+xoAfRYDlzdrA/MawWs8gtwUXj6ckigfD+/fDoaylKlkMvpl5Gfeh1xJn PYJIiJQ/QIlI38yr/uE7gkRCFb12Xk4YImMa1JSoKpj8rIyplXZL9A== -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:45 2025 by rpki-client