$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa File: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json) Hash identifier: fQq/+t6aKAOI8BXJwd9/ArGr2Us/icJZChSsDfHR9zg= Subject key identifier: 16:01:06:43:02:A8:28:84:33:82:1A:74:E0:37:5E:50:A4:52:F4:C8 Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584B8917674C9092F941FDF1A600 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22966 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:67:4c:90:92:f9:41:fd:f1:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=73f069b0-70a5-414d-9e62-2cde63da33cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:5a:8b:7e:e3:97:1c:38:44:52:b5:d3:a2: 1d:1f:df:f0:b6:f5:c4:e3:32:c2:5b:cf:f6:be:14: 90:6f:95:8a:3b:ca:1b:be:80:8b:a2:f9:da:51:b8: c9:64:ac:bb:b0:b4:ec:6f:6d:e0:00:a9:b6:e4:26: 97:a2:b9:2d:00:0e:67:46:9c:91:37:34:72:bd:c5: 37:4d:24:3e:5b:e4:e4:65:c9:3e:77:0a:ca:c3:a5: ba:cf:12:67:89:f8:1a:68:18:d6:00:9e:23:7b:5a: 94:33:9f:a9:c5:d9:37:4a:90:cd:b9:6a:9d:1f:00: 65:c6:fb:41:e9:80:60:67:b8:a4:ad:39:0e:60:44: 4e:55:4f:b1:e8:f0:69:51:77:82:90:69:4e:35:54: 24:f4:19:2f:e0:0d:97:6f:e0:95:3e:cc:aa:da:a0: 62:7b:6c:ba:6a:d6:4e:9d:7d:e6:18:49:fb:b3:ca: 03:f5:92:ee:60:e7:3e:fa:67:69:97:a7:52:09:2c: af:c9:9a:c4:3f:2f:11:9c:68:6d:62:c4:e3:48:47: 42:71:1b:92:22:fc:62:55:a7:c5:63:90:8b:d7:d2: fc:89:76:d8:f1:c7:7e:3a:e2:e5:a8:39:7a:13:ce: 85:ca:d2:4d:f5:85:af:57:b7:5b:09:e4:35:51:77: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:06:43:02:A8:28:84:33:82:1A:74:E0:37:5E:50:A4:52:F4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:50:c2:97:f2:d5:64:2e:d2:f6:66:ad:ff:4a:28:ea:f8:ba: ec:09:67:58:19:88:8f:7c:d3:4b:04:d1:d9:60:e1:f9:d5:e9: 9d:f3:25:60:17:fd:bf:81:ab:78:83:be:b2:7f:c2:2e:ca:27: e3:f8:6c:f8:a7:aa:14:fb:8d:7c:99:25:b9:3a:68:c4:6e:8b: 64:0e:1a:8a:ac:7a:50:94:4c:0b:4b:89:b7:b3:bc:0a:87:86: 81:82:9b:c0:d7:26:11:df:a1:b1:04:16:7d:6b:8b:76:af:58: e0:18:db:9e:f0:51:87:e6:58:7e:5b:cb:1e:8a:12:8f:bc:ac: 58:0a:7f:33:1f:25:67:bd:f2:48:c1:5b:6e:b1:02:76:d9:ff: a3:bb:e5:8e:f4:25:0d:da:4a:67:72:b4:f3:d0:4d:34:6d:6a: 4d:74:c7:5a:02:a0:2c:5f:f2:08:80:48:36:22:a9:ff:91:b8: 23:ac:d9:e5:d8:87:22:b9:ca:b0:eb:a8:8d:64:76:9a:ac:dc: 95:f4:e1:58:b0:f5:ba:d1:c9:37:53:59:04:56:84:0a:20:6a: b2:72:61:f4:66:93:1a:0a:a0:b0:e7:9a:8d:b4:72:d4:a3:3a: 39:fa:3c:3d:51:0d:05:50:75:06:44:cb:99:5b:2e:80:6b:04: 92:6a:2b:c7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuJF2dMkJL5Qf3xpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NzNmMDY5YjAtNzBhNS00MTRkLTllNjItMmNkZTYzZGEzM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpNai37jlxw4RFK106IdH9/wtvXE4zLCW8/2 vhSQb5WKO8obvoCLovnaUbjJZKy7sLTsb23gAKm25CaXorktAA5nRpyRNzRyvcU3 TSQ+W+TkZck+dwrKw6W6zxJnifgaaBjWAJ4je1qUM5+pxdk3SpDNuWqdHwBlxvtB 6YBgZ7ikrTkOYEROVU+x6PBpUXeCkGlONVQk9Bkv4A2Xb+CVPsyq2qBie2y6atZO nX3mGEn7s8oD9ZLuYOc++mdpl6dSCSyvyZrEPy8RnGhtYsTjSEdCcRuSIvxiVafF Y5CL19L8iXbY8cd+OuLlqDl6E86FytJN9YWvV7dbCeQ1UXcStwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBYBBkMCqCiEM4IadOA3XlCkUvTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNGJhNjBlODItMGNlZS0z ZWI3LWE2ZjItY2FkZmJmOTJlYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhFDCl/LVZC7S9mat/0oo6vi67AlnWBmIj3zTSwTR2WDh +dXpnfMlYBf9v4GreIO+sn/CLson4/hs+KeqFPuNfJkluTpoxG6LZA4aiqx6UJRM C0uJt7O8CoeGgYKbwNcmEd+hsQQWfWuLdq9Y4BjbnvBRh+ZYflvLHooSj7ysWAp/ Mx8lZ73ySMFbbrECdtn/o7vljvQlDdpKZ3K089BNNG1qTXTHWgKgLF/yCIBINiKp /5G4I6zZ5diHIrnKsOuojWR2mqzclfThWLD1utHJN1NZBFaECiBqsnJh9GaTGgqg sOeajbRy1KM6Ofo8PVENBVB1BkTLmVsugGsEkmorxw== -----END CERTIFICATE-----Generated at Tue Oct 21 04:22:45 2025 by rpki-client