$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198e75e1-3860-3d7c-8715-f7e1a81c3b36.roa File: 198e75e1-3860-3d7c-8715-f7e1a81c3b36.roa (raw, json) Hash identifier: TyQbmGaEU+mWe8TMdianw4Ql3qpp428fXnwYNTSc3JU= Subject key identifier: 12:09:41:19:5A:0A:F9:6C:6A:45:C2:7E:8D:F3:74:68:54:B7:7C:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1D5FD6DBB75AA77E3B280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198e75e1-3860-3d7c-8715-f7e1a81c3b36.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 69.249.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:d5:fd:6d:bb:75:aa:77:e3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0f41d578-10df-4191-85cf-8b662914bdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9f:df:e7:da:1d:ae:74:49:76:a7:74:67:3e: 4e:04:bd:ee:64:c6:07:4c:35:4d:63:49:59:ff:2c: a2:4a:4a:73:d7:c6:b7:fd:6d:c3:90:d4:e1:35:bc: 46:69:f4:3e:69:69:84:5f:cf:4f:49:7e:27:b4:fd: b6:ff:3f:f2:76:5e:c1:51:b3:f3:04:cc:5b:db:e6: 83:f1:5c:b8:19:bf:19:0e:9e:08:4e:2c:50:63:a7: 82:21:9a:ab:bb:18:bd:47:54:35:fc:15:80:19:61: 6b:1e:d1:ac:64:22:f5:6c:70:28:63:be:58:fe:40: 3c:82:85:ed:ba:f9:7d:d3:aa:83:53:df:9a:ae:f5: d0:a1:7c:90:43:9e:3b:50:12:c5:65:31:97:4b:66: 89:84:ed:6b:7d:90:38:c0:5c:d1:a7:07:b6:aa:b6: 94:34:7f:a9:cb:2e:30:61:36:3e:76:55:19:22:a8: 34:2a:a3:04:5b:bd:92:04:8b:62:67:bc:4a:83:be: 3d:f8:d8:bd:6e:27:ec:7f:76:bd:16:f1:cb:00:41: 1a:6c:3b:bc:64:2e:02:d8:29:ac:b2:82:ab:5f:25: a6:16:d9:56:8d:74:ca:6e:08:6a:9e:8c:b8:7f:90: 23:8a:5b:f3:71:be:ac:6f:88:29:89:21:72:b2:34: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:41:19:5A:0A:F9:6C:6A:45:C2:7E:8D:F3:74:68:54:B7:7C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198e75e1-3860-3d7c-8715-f7e1a81c3b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.249.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:76:f2:48:ce:6a:e9:99:73:fe:cb:5c:0c:3c:cb:ca:c4:45: 04:77:dd:b5:ae:f5:04:36:a7:17:a0:d1:01:a7:04:b4:f5:5f: 16:dd:02:b0:3e:28:da:ed:8f:09:75:f8:ae:e9:6e:a0:9a:f8: e3:06:bb:91:50:9f:09:72:ec:57:15:a3:21:c2:a8:ba:70:aa: 49:89:9d:32:8a:d7:6f:c9:d2:33:76:70:12:eb:27:1f:aa:04: 82:a8:2e:7f:32:96:92:9b:c5:45:39:78:6a:aa:02:0d:3b:cd: b4:71:ed:8e:27:fe:f3:6e:32:eb:fc:4d:8c:43:e2:b4:0b:2f: f8:7f:d3:b1:a1:25:a8:e8:6b:56:37:6f:36:5d:6d:22:f4:bc: 51:a6:d6:16:85:4d:e3:d3:db:30:37:c7:98:ae:c3:ca:04:01: 6a:5a:80:08:1f:75:2b:24:8f:32:5c:e4:d4:4f:f6:ca:fc:66: ea:c5:32:19:16:04:c8:06:83:9b:73:ac:2b:63:34:1b:38:49: fc:7c:1c:7d:ad:49:57:43:04:c6:6e:a2:33:89:1d:df:70:2d: e7:17:f0:5d:61:6d:dc:3b:41:3f:0b:34:24:fa:1d:46:a8:57: 3f:2f:26:cb:88:12:fa:3a:21:7c:b4:cc:8d:5f:91:ec:03:12: 17:f2:e9:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdX9bbt1qnfjsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGY0MWQ1NzgtMTBkZi00MTkxLTg1Y2YtOGI2NjI5MTRiZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z/f59odrnRJdqd0Zz5OBL3uZMYHTDVNY0lZ /yyiSkpz18a3/W3DkNThNbxGafQ+aWmEX89PSX4ntP22/z/ydl7BUbPzBMxb2+aD 8Vy4Gb8ZDp4ITixQY6eCIZqruxi9R1Q1/BWAGWFrHtGsZCL1bHAoY75Y/kA8goXt uvl906qDU9+arvXQoXyQQ547UBLFZTGXS2aJhO1rfZA4wFzRpwe2qraUNH+pyy4w YTY+dlUZIqg0KqMEW72SBItiZ7xKg749+Ni9bifsf3a9FvHLAEEabDu8ZC4C2Cms soKrXyWmFtlWjXTKbghqnoy4f5Ajilvzcb6sb4gpiSFysjQcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIJQRlaCvlsakXCfo3zdGhUt3wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTk4ZTc1ZTEtMzg2MC0z ZDdjLTg3MTUtZjdlMWE4MWMzYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRfnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl28kjOaumZc/7LXAw8y8rERQR33bWu9QQ2pxeg0QGnBLT1XxbdArA+ KNrtjwl1+K7pbqCa+OMGu5FQnwly7FcVoyHCqLpwqkmJnTKK12/J0jN2cBLrJx+q BIKoLn8ylpKbxUU5eGqqAg07zbRx7Y4n/vNuMuv8TYxD4rQLL/h/07GhJajoa1Y3 bzZdbSL0vFGm1haFTePT2zA3x5iuw8oEAWpagAgfdSskjzJc5NRP9sr8ZurFMhkW BMgGg5tzrCtjNBs4Sfx8HH2tSVdDBMZuojOJHd9wLecX8F1hbdw7QT8LNCT6HUao Vz8vJsuIEvo6IXy0zI1fkewDEhfy6bs= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:14 2025 by rpki-client