$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa File: 6a37db04-c374-339b-a7c3-989e21aa23f4.roa (raw, json) Hash identifier: JgSpcEyxqjwjj5/8oUlZuTc++y2qRXaN+GJS4HztjI8= Subject key identifier: 00:50:78:11:DD:C5:15:18:DF:DC:8D:C0:C1:28:2B:98:FC:51:56:5D Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584BB45D15D67966C638F53A1440 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 399668 IP address blocks: 172.98.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:15:d6:79:66:c6:38:f5:3a:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ac912ffe-ac02-43da-a7a3-482b2d31f52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:4d:d7:c5:d3:68:89:6a:6e:2d:97:4d:31: f9:2f:72:d8:79:38:f1:78:36:69:cb:09:12:92:48: f6:3c:1d:8d:d4:83:5e:ac:78:0e:63:1c:69:0c:4c: 0d:8a:18:a1:d4:49:e2:e3:a2:0d:89:03:07:03:2f: bf:91:f9:b9:3b:c6:c1:af:d3:a2:9c:b2:d4:de:e8: ad:71:5d:da:a6:f0:84:4a:a6:13:a3:e9:49:dd:16: 3a:13:8f:d2:d9:d2:53:3a:d1:8f:41:6a:40:ef:f6: 3b:ad:13:85:31:cd:99:65:2d:a3:6e:bf:7d:2e:86: 87:10:10:7d:70:f0:50:79:83:35:b2:0e:19:a2:9f: d3:62:00:18:79:56:dd:57:5d:69:51:76:e9:41:1f: ca:74:25:df:e8:ef:11:c9:aa:8b:2d:10:6e:2c:8a: 38:2e:fb:6c:b7:7f:7a:6b:93:2c:f6:4a:b7:8d:bb: 1b:16:b2:43:aa:d6:25:2b:b3:ef:1e:01:38:25:8f: d5:8a:9d:0f:84:6a:f0:e2:10:e0:9c:88:f4:71:7c: 6b:d8:4f:c5:99:50:f4:0f:33:2a:31:a0:66:05:01: 5c:5f:ec:8f:71:52:29:cf:fd:29:10:b5:02:90:f6: ff:a2:53:44:16:cd:75:75:7f:92:38:0b:af:18:59: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:78:11:DD:C5:15:18:DF:DC:8D:C0:C1:28:2B:98:FC:51:56:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 172.98.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0e:22:ce:82:53:c3:21:22:a0:ba:4d:6c:fa:4b:c2:28:5b: 31:19:cb:d9:d1:20:c1:a7:38:4a:c3:64:59:ee:dc:3f:d3:3e: 42:4d:4f:bd:f2:b2:69:cd:2c:5e:88:6a:ed:d2:e9:d1:bc:98: 71:5b:81:39:1e:e1:1c:35:c3:30:20:17:d6:8d:6d:a8:c2:a7: 05:71:4c:7f:db:dd:fd:4d:10:42:d3:da:e7:f7:a6:9e:f1:98: 07:99:ee:c7:31:fb:ae:77:4d:c9:e6:3c:7a:a1:e2:5d:cf:be: b8:fc:51:fe:e5:75:31:7e:d2:37:f2:b4:d5:b1:fa:a6:ae:a7: 9c:a6:01:90:90:a6:df:65:5e:05:74:e7:f4:f0:f9:ec:6a:c7: d2:26:89:20:d3:3d:f4:a2:4e:c5:a8:3f:8d:4d:d9:6b:ea:aa: 23:33:cd:b8:aa:16:da:a7:86:c7:86:3c:15:59:cb:29:1f:50: ea:93:69:cd:cf:e9:5e:fa:bd:a7:d8:fc:0b:76:e8:35:db:f5: 95:10:ba:f3:de:25:c5:2b:91:06:99:c0:54:ce:44:e1:c2:a4: f3:73:5c:8c:b8:5a:c2:5b:00:d8:a5:fc:31:dc:27:1c:8b:05: 3c:ff:71:3c:f6:f0:c1:6f:0b:a3:1d:0a:1e:1c:1e:c2:56:bb: cd:e2:9e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRXWeWbGOPU6FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWM5MTJmZmUtYWMwMi00M2RhLWE3YTMtNDgyYjJkMzFmNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZRN18XTaIlqbi2XTTH5L3LYeTjxeDZpywkS kkj2PB2N1INerHgOYxxpDEwNihih1Eni46INiQMHAy+/kfm5O8bBr9OinLLU3uit cV3apvCESqYTo+lJ3RY6E4/S2dJTOtGPQWpA7/Y7rROFMc2ZZS2jbr99LoaHEBB9 cPBQeYM1sg4Zop/TYgAYeVbdV11pUXbpQR/KdCXf6O8RyaqLLRBuLIo4Lvtst396 a5Ms9kq3jbsbFrJDqtYlK7PvHgE4JY/Vip0PhGrw4hDgnIj0cXxr2E/FmVD0DzMq MaBmBQFcX+yPcVIpz/0pELUCkPb/olNEFs11dX+SOAuvGFknqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABQeBHdxRUY39yNwMEoK5j8UVZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvNmEzN2RiMDQtYzM3NC0z MzliLWE3YzMtOTg5ZTIxYWEyM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgOIs6CU8MhIqC6TWz6S8IoWzEZy9nRIMGnOErDZFnu3D/TPkJNT73y smnNLF6Iau3S6dG8mHFbgTke4Rw1wzAgF9aNbajCpwVxTH/b3f1NEELT2uf3pp7x mAeZ7scx+653TcnmPHqh4l3Pvrj8Uf7ldTF+0jfytNWx+qaup5ymAZCQpt9lXgV0 5/Tw+exqx9ImiSDTPfSiTsWoP41N2WvqqiMzzbiqFtqnhseGPBVZyykfUOqTac3P 6V76vafY/At26DXb9ZUQuvPeJcUrkQaZwFTOROHCpPNzXIy4WsJbANil/DHcJxyL BTz/cTz28MFvC6MdCh4cHsJWu83inlc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:51 2025 by rpki-client