$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa File: 0039e239-41e8-3a9b-8b0f-46101a16e3df.roa (raw, json) Hash identifier: tT4yG81eT0f+OcGfVR8YknchlrIlb49K8cD/uE9KmVU= Subject key identifier: EA:BC:61:BD:95:D7:0C:1D:01:B4:9D:08:AE:32:AD:69:BF:1F:28:AF Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584B95A798D0BDD46AB8381E4D80 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:98:d0:bd:d4:6a:b8:38:1e:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e6fa0bde-bd6c-483e-97a9-8053b900525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:78:35:bc:c0:67:a7:98:8a:85:b1:7f:f3: 43:5c:e8:40:f3:ff:cf:18:84:f7:15:f1:42:86:39: 94:ff:dc:47:9d:40:7a:20:d6:06:69:1e:a4:d7:c1: 4e:08:4c:aa:87:46:c1:fa:84:ba:d2:02:f8:4e:c9: 70:f4:df:eb:c6:d3:8c:2c:a1:16:64:9c:c0:46:33: bb:a4:8a:82:0b:aa:55:b5:2b:f7:87:21:e6:6b:3f: a8:5f:bb:43:b2:7f:fc:cf:4d:10:f8:df:6a:fb:87: 1d:83:54:36:f4:6b:44:05:cd:32:cb:5f:01:5e:22: 96:f9:87:23:82:2c:92:5c:48:ad:24:b8:5b:da:58: 6c:d8:e8:73:65:d5:d3:8d:78:5c:f6:8b:0a:e9:7f: 40:af:e0:14:01:d9:46:db:27:8e:aa:18:21:ad:b2: d1:d1:b9:ad:7d:d3:92:7a:70:4d:cb:4d:34:a4:85: 62:2d:d6:49:75:1d:a2:7d:b3:36:05:31:40:b8:13: ee:e8:f6:6a:87:d0:ad:4e:13:c0:da:10:ca:53:de: e6:0c:77:f2:07:77:4b:38:13:cc:9d:83:23:43:4a: 9f:48:df:9c:81:9d:4a:1b:3d:02:63:ad:2e:5f:62: 31:1c:65:1d:4b:a7:9a:a3:91:cb:29:6f:9c:7c:98: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BC:61:BD:95:D7:0C:1D:01:B4:9D:08:AE:32:AD:69:BF:1F:28:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:98:af:e1:af:b4:09:48:38:8b:0a:de:28:c3:01:60:e9:d2: e7:a2:ee:da:73:11:b5:f7:cf:dd:d2:ba:71:64:6b:df:f7:b8: 0a:83:c9:1a:6c:48:22:10:7d:a6:7d:bd:f0:9a:6e:f6:72:f4: 57:65:ef:d5:69:34:ea:e7:8e:8f:e5:a6:78:4e:f3:66:04:2b: f4:25:ef:e6:8f:57:63:e2:a6:f8:08:16:57:ac:af:6c:17:e1: 07:95:a2:9a:04:cc:95:7a:a4:07:22:22:6f:a0:e2:03:e5:2e: 4a:83:75:ff:2a:8b:a7:7c:83:75:ff:af:36:8b:63:6a:ac:6f: 33:c8:6a:d0:86:2c:a9:41:29:3d:2a:6a:76:a9:c5:f6:71:b4: 18:ea:f4:ed:3e:a4:23:34:ac:b6:12:a8:1d:e0:39:b2:e6:45: 85:6a:db:f7:de:03:36:99:c6:af:74:9e:53:65:18:e6:ad:eb: 3d:4c:83:a5:d6:c1:9b:fc:ca:c1:a7:47:fb:d6:7f:81:d7:16: a0:f3:b2:e5:ec:40:35:a6:e5:56:95:83:dc:aa:12:09:c8:27: bb:7a:80:b9:91:48:d6:a0:e7:21:5c:2c:25:9f:a3:88:19:48: 6a:eb:59:9a:c6:af:4c:86:96:ad:d3:38:a3:e1:48:67:ee:fa: 39:b7:26:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5jQvdRquDgeTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTZmYTBiZGUtYmQ2Yy00ODNlLTk3YTktODA1M2I5MDA1MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvON4NbzAZ6eYioWxf/NDXOhA8//PGIT3FfFC hjmU/9xHnUB6INYGaR6k18FOCEyqh0bB+oS60gL4Tslw9N/rxtOMLKEWZJzARjO7 pIqCC6pVtSv3hyHmaz+oX7tDsn/8z00Q+N9q+4cdg1Q29GtEBc0yy18BXiKW+Ycj giySXEitJLhb2lhs2OhzZdXTjXhc9osK6X9Ar+AUAdlG2yeOqhghrbLR0bmtfdOS enBNy000pIViLdZJdR2ifbM2BTFAuBPu6PZqh9CtThPA2hDKU97mDHfyB3dLOBPM nYMjQ0qfSN+cgZ1KGz0CY60uX2IxHGUdS6eao5HLKW+cfJiaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq8Yb2V1wwdAbSdCK4yrWm/HyivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMDAzOWUyMzktNDFlOC0z YTliLThiMGYtNDYxMDFhMTZlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqYr+GvtAlIOIsK3ijDAWDp0uei7tpzEbX3z93SunFka9/3uAqDyRps SCIQfaZ9vfCabvZy9Fdl79VpNOrnjo/lpnhO82YEK/Ql7+aPV2PipvgIFlesr2wX 4QeVopoEzJV6pAciIm+g4gPlLkqDdf8qi6d8g3X/rzaLY2qsbzPIatCGLKlBKT0q anapxfZxtBjq9O0+pCM0rLYSqB3gObLmRYVq2/feAzaZxq90nlNlGOat6z1Mg6XW wZv8ysGnR/vWf4HXFqDzsuXsQDWm5VaVg9yqEgnIJ7t6gLmRSNag5yFcLCWfo4gZ SGrrWZrGr0yGlq3TOKPhSGfu+jm3JnA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:00 2025 by rpki-client