$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/92a2a423-5eb0-37de-92cb-5fe573b2230b.roa File: 92a2a423-5eb0-37de-92cb-5fe573b2230b.roa (raw, json) Hash identifier: Ih2ID+hPsgOLTYsERWz2YiYMXMw2pr8H8pAsmTavdp8= Subject key identifier: 61:32:7E:78:1F:90:30:BE:9D:18:4B:75:50:85:89:DF:3C:26:C9:71 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D2623264A15C55F32C43A0 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/92a2a423-5eb0-37de-92cb-5fe573b2230b.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:62:32:64:a1:5c:55:f3:2c:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=8598ade6-e090-46c7-80a5-e8e35fe4ad29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:15:b9:ed:94:6d:2f:e7:41:63:fc:15:12: 5d:cb:87:48:bc:ff:fc:7f:83:ee:32:d6:93:50:ae: c5:20:06:d6:9d:b5:1b:f8:eb:72:df:72:ab:d3:23: a0:b2:40:a4:d2:ac:d3:a7:36:7a:04:50:96:64:69: fe:e0:cf:f3:fa:bf:b4:7d:a7:65:c2:4c:72:62:3c: 00:23:d0:ba:09:3e:1f:29:4a:1c:15:3b:22:d1:93: af:1d:2c:95:95:f1:c4:9f:22:be:3a:4e:78:21:eb: da:5e:79:c0:9f:3e:98:64:3c:eb:d0:be:30:d2:1f: 8c:ea:f5:49:65:ff:b6:7a:9b:e7:82:a2:5a:bb:54: 4c:11:31:55:75:b9:33:b8:9e:4e:fc:a7:c3:a3:65: 65:39:81:8c:41:86:87:18:b5:e8:fa:f3:94:22:90: fc:a2:b1:3d:b4:80:2c:10:d9:50:e5:8c:c0:05:7b: 5b:99:30:93:41:51:d0:a8:1a:d5:90:ae:44:7f:c7: ee:5e:45:ff:69:71:14:4b:5d:aa:67:c3:25:ff:7d: 67:98:57:d5:02:c5:22:0c:f6:37:6c:ea:66:52:a6: a1:2d:0b:c1:da:8f:57:47:46:33:1a:59:3d:80:69: cc:a0:12:ca:4b:b7:39:e1:a1:ee:e5:93:09:c6:fb: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:32:7E:78:1F:90:30:BE:9D:18:4B:75:50:85:89:DF:3C:26:C9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/92a2a423-5eb0-37de-92cb-5fe573b2230b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:95:92:b2:29:d3:59:c2:c0:4b:72:28:bd:d0:b2:50:28:8d: 2c:1d:8c:e6:37:3a:2c:63:48:2c:45:4a:f4:9b:ae:39:f4:81: a6:ca:71:c8:35:ac:3a:af:08:25:c7:44:89:c6:21:0d:e3:80: ac:1e:ad:05:f8:c0:5d:ae:d0:26:d9:60:ee:9b:0c:c2:1c:48: e3:1f:1c:b5:d0:b2:1f:7d:e7:c7:79:06:6e:0c:60:e5:b0:81: 92:f1:2f:84:3b:e9:9b:43:4f:86:10:c7:70:a3:34:4c:fc:cb: e5:bf:19:8a:da:3b:12:9d:2e:2d:e5:e2:80:95:36:53:a5:b8: 5b:d1:82:f0:0d:d7:4b:95:9c:28:d7:91:df:3c:ae:5d:82:13: b5:71:a3:0c:98:0d:20:81:32:f2:f6:70:37:43:57:25:a8:8f: a9:b1:88:e5:d3:6e:e5:1b:4c:72:ae:e8:32:21:2e:85:a7:9c: 3a:6b:69:21:c4:ca:a2:d9:a1:fd:7c:6f:9b:c5:ba:6e:a4:04: 05:b0:8a:b9:28:ac:23:6e:a3:87:ab:5d:49:f1:8d:02:3f:4f: 29:77:fb:56:d1:a0:e0:ce:43:53:bf:e1:b1:ec:95:9f:f5:8d: 88:20:e7:70:13:72:9e:60:81:52:d9:a5:fb:6c:2e:d4:86:03: 45:bf:f7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mIyZKFcVfMsQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODU5OGFkZTYtZTA5MC00NmM3LTgwYTUtZThlMzVmZTRhZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUwVue2UbS/nQWP8FRJdy4dIvP/8f4PuMtaT UK7FIAbWnbUb+Oty33Kr0yOgskCk0qzTpzZ6BFCWZGn+4M/z+r+0fadlwkxyYjwA I9C6CT4fKUocFTsi0ZOvHSyVlfHEnyK+Ok54IevaXnnAnz6YZDzr0L4w0h+M6vVJ Zf+2epvngqJau1RMETFVdbkzuJ5O/KfDo2VlOYGMQYaHGLXo+vOUIpD8orE9tIAs ENlQ5YzABXtbmTCTQVHQqBrVkK5Ef8fuXkX/aXEUS12qZ8Ml/31nmFfVAsUiDPY3 bOpmUqahLQvB2o9XR0YzGlk9gGnMoBLKS7c54aHu5ZMJxvs6pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEyfngfkDC+nRhLdVCFid88JslxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvOTJhMmE0MjMtNWViMC0z N2RlLTkyY2ItNWZlNTczYjIyMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqR7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWVkrIp01nCwEtyKL3QslAojSwdjOY3OixjSCxFSvSbrjn0gabKccg1 rDqvCCXHRInGIQ3jgKwerQX4wF2u0CbZYO6bDMIcSOMfHLXQsh9958d5Bm4MYOWw gZLxL4Q76ZtDT4YQx3CjNEz8y+W/GYraOxKdLi3l4oCVNlOluFvRgvAN10uVnCjX kd88rl2CE7VxowyYDSCBMvL2cDdDVyWoj6mxiOXTbuUbTHKu6DIhLoWnnDpraSHE yqLZof18b5vFum6kBAWwirkorCNuo4erXUnxjQI/Tyl3+1bRoODOQ1O/4bHslZ/1 jYgg53ATcp5ggVLZpftsLtSGA0W/9xg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:52 2025 by rpki-client