$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa File: b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa (raw, json) Hash identifier: +d9LmvN0qMwG9MU97aopuYlCu3p88KZyxYI1HqjVOBw= Subject key identifier: 41:4D:4B:94:01:D9:13:8E:E8:0C:5C:73:09:C2:18:57:C2:87:F5:01 Certificate issuer: /CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Certificate serial: 010D0C9F4328584B821CC7248E143A3D18392360 Authority key identifier: 21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14618 IP address blocks: 198.17.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c7:24:8e:14:3a:3d:18:39:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6acb265a-37a0-45a4-b0be-164bbb04e5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:a1:bb:fc:38:bb:57:3c:7c:6a:3c:31:f6: ce:7f:ff:79:a2:61:b2:1e:ef:3e:ca:94:4d:80:90: 5f:e1:7e:0a:c5:66:15:17:d5:98:cf:31:c7:73:ce: a1:a3:92:b1:5d:3a:16:76:5f:62:30:8f:b3:61:a8: 83:06:b7:4f:f2:99:a9:ce:51:77:02:b7:21:04:e5: 5d:b6:b6:65:84:b6:09:a8:90:4f:19:9b:1d:30:72: f5:cb:02:98:1c:b1:b9:4e:1f:c9:71:20:5c:06:d8: 35:2a:70:ec:9c:3d:6f:8c:05:81:49:a8:bb:78:04: 41:ad:21:ec:a8:f7:8d:af:17:8a:b6:fd:b8:fd:3c: e0:f5:96:d1:d5:a3:54:d7:75:b1:1d:0e:cb:e4:d9: 23:17:ce:49:86:c8:8b:75:52:07:29:aa:76:d8:19: 89:a1:66:91:5f:21:49:af:70:66:be:0c:06:6d:b5: 50:ef:f5:be:c4:12:3a:94:f8:13:4d:5b:7d:b2:2a: 3d:b1:a7:51:aa:b2:75:b8:3a:86:a4:11:2a:74:c4: 50:e2:aa:a5:38:b3:ab:3c:06:6c:30:94:ba:fd:c4: 6a:dc:ac:93:e0:ab:66:35:c3:e8:32:0a:ea:eb:d1: dc:39:20:a0:0d:74:b1:56:3d:b0:54:9a:49:45:66: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:4B:94:01:D9:13:8E:E8:0C:5C:73:09:C2:18:57:C2:87:F5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl X509v3 Authority Key Identifier: keyid:21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer sbgp-ipAddrBlock: critical IPv4: 198.17.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5b:62:31:b1:f0:8a:62:b3:22:f8:40:29:ba:3b:b2:88:20: 9d:9b:25:86:5c:17:ba:6e:c4:10:67:23:03:5a:dc:48:c9:42: 61:84:e5:5e:2a:cb:c4:a4:6a:96:8e:1e:67:9d:bb:6f:8b:c4: f4:da:4f:80:fc:7f:16:b9:2d:2c:8e:bf:75:ca:ab:95:86:12: 37:40:6e:1a:48:aa:9e:92:f6:c8:91:89:da:a6:64:cc:9b:49: e5:9c:db:f1:a4:68:84:57:03:4a:c9:fd:bd:98:38:e4:b7:f6: 80:6d:2b:43:f2:d7:a5:ff:2f:f8:99:81:d8:c3:5e:9d:1c:4e: e9:3f:37:88:16:7c:82:30:c4:56:fd:c9:a4:4a:c3:cb:36:5b: 75:d8:56:c0:d0:ce:40:9d:ff:46:83:91:58:21:27:99:5c:51: 78:52:a0:2b:88:89:c9:24:d8:60:4b:a6:93:ae:06:c0:96:b0: 74:9f:b9:54:cf:25:aa:ee:2c:21:02:ce:af:d6:9e:eb:f7:5c: 3b:cd:70:e3:51:a0:a2:5b:5d:29:49:4d:44:22:5a:80:04:cc: 42:40:ca:f1:2d:db:6c:68:24:54:c1:9d:bf:67:2a:eb:c3:1d: 9a:83:d6:16:81:96:00:45:e6:ad:c9:cf:75:2f:b1:e6:d3:8d: e8:d1:5e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMckjhQ6PRg5I2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQxNjc2MjktNjNlOS00NDBiLTlhOWYtMjJhNDU3MGYw ZDc4MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmFjYjI2NWEtMzdhMC00NWE0LWIwYmUtMTY0YmJiMDRlNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuKhu/w4u1c8fGo8MfbOf/95omGyHu8+ypRN gJBf4X4KxWYVF9WYzzHHc86ho5KxXToWdl9iMI+zYaiDBrdP8pmpzlF3ArchBOVd trZlhLYJqJBPGZsdMHL1ywKYHLG5Th/JcSBcBtg1KnDsnD1vjAWBSai7eARBrSHs qPeNrxeKtv24/Tzg9ZbR1aNU13WxHQ7L5NkjF85JhsiLdVIHKap22BmJoWaRXyFJ r3BmvgwGbbVQ7/W+xBI6lPgTTVt9sio9sadRqrJ1uDqGpBEqdMRQ4qqlOLOrPAZs MJS6/cRq3KyT4KtmNcPoMgrq69HcOSCgDXSxVj2wVJpJRWZFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFNS5QB2ROO6AxccwnCGFfCh/UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2 NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0NTcwZjBkNzgvYjhlN2Q1MjYtZGEzMi0z ODViLWFiNWUtMmFhNWU1N2I1NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQxNjc2MjktNjNlOS00NDBiLTlh OWYtMjJhNDU3MGYwZDc4LzlkMTY3NjI5LTYzZTktNDQwYi05YTlmLTIyYTQ1NzBm MGQ3OC5jcmwwHwYDVR0jBBgwFoAUIQ/xEambAUmpPmzJ0w0okxyOnqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0 NTcwZjBkNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5bYjGx8IpisyL4QCm6O7KIIJ2bJYZcF7puxBBnIwNa3EjJQmGE5V4q y8SkapaOHmedu2+LxPTaT4D8fxa5LSyOv3XKq5WGEjdAbhpIqp6S9siRidqmZMyb SeWc2/GkaIRXA0rJ/b2YOOS39oBtK0Py16X/L/iZgdjDXp0cTuk/N4gWfIIwxFb9 yaRKw8s2W3XYVsDQzkCd/0aDkVghJ5lcUXhSoCuIickk2GBLppOuBsCWsHSfuVTP JaruLCECzq/Wnuv3XDvNcONRoKJbXSlJTUQiWoAEzEJAyvEt22xoJFTBnb9nKuvD HZqD1haBlgBF5q3Jz3UvsebTjejRXlM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:46 2025 by rpki-client