$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa File: 95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa (raw, json) Hash identifier: Rlo6fez7Y33tPGRJKSUBvJ8GJNyw3eSNHt3JAAbUeN4= Subject key identifier: 3F:A3:CC:EA:DF:99:68:BF:D4:88:CC:64:48:92:B9:97:D2:B7:15:E7 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B276175434903E443204ED200 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 1239 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:75:43:49:03:e4:43:20:4e:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=9301a89e-54dd-475d-857c-553d7c53ae3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:fb:56:e2:91:2d:86:ce:00:25:7c:04:43: f6:d7:4e:d2:52:a4:8a:54:20:11:31:5d:57:7b:0b: 1d:27:e1:ba:c1:dc:6d:00:57:24:65:a8:0e:ea:8e: cd:cc:be:85:89:99:0f:5e:04:bc:43:2e:4a:69:47: ab:04:67:30:54:0c:60:9c:e2:98:cd:83:82:78:a7: 81:59:d9:e4:b6:b4:8f:4c:cc:30:98:ec:37:3d:26: f5:cb:65:f4:2c:2a:a6:1b:52:72:30:0e:81:7d:40: 2e:52:fc:36:7d:75:dc:6b:c2:94:7d:1e:25:e9:7f: 4d:6d:35:5c:a6:c2:5f:df:f4:36:8d:f3:e7:6e:87: 45:8e:86:40:6e:94:47:a5:5d:16:c2:01:e6:19:5c: 02:a0:9a:ed:db:20:aa:e3:ad:03:9f:a5:63:d9:e6: ca:6e:ff:0d:a3:0b:30:f6:52:42:36:1f:db:5d:dc: 87:b6:3f:85:77:7e:a2:2b:3d:12:54:3c:16:06:f0: b1:a1:3e:48:f7:01:a4:8e:29:64:d3:ca:81:96:7b: c3:4d:49:b5:52:a1:cc:be:52:cf:26:9f:6c:ec:5c: 3d:e8:af:46:32:02:35:86:c7:7c:c1:34:c3:c2:62: 7e:27:e6:3b:82:33:72:23:aa:36:a1:01:99:bb:87: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A3:CC:EA:DF:99:68:BF:D4:88:CC:64:48:92:B9:97:D2:B7:15:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6e:a0:83:dc:cd:09:5b:df:4e:11:f0:40:cd:36:64:8d:96: ed:bb:fd:16:b6:ce:0c:0b:82:b6:de:f5:39:2a:cd:e8:e2:e3: 65:f5:06:81:0a:08:8a:17:2a:31:ec:cf:61:12:2a:87:48:aa: 5a:2a:14:81:5f:33:53:3f:80:b7:28:4e:b1:0e:19:5a:77:f6: ce:23:05:0f:88:94:32:1f:52:d4:ed:99:0e:f8:6c:e8:c3:0f: 5c:77:3d:63:17:4a:68:da:19:d4:1e:03:51:c8:10:8c:78:af: 3c:be:61:c5:c9:1f:fd:56:02:a7:8d:e4:71:e3:bd:06:a8:7a: f8:3b:16:d8:5f:9f:aa:a5:bb:26:ff:19:3a:3b:7a:a8:8d:c4: 08:53:a4:cb:4d:d8:37:b8:95:78:22:36:c3:ec:20:d0:88:5b: 5a:b3:27:65:1b:ae:fc:22:79:86:00:f5:c8:12:a1:cc:c0:3f: a3:dc:3e:6e:1a:3d:fe:c8:5f:bc:59:9f:b7:17:3e:19:ca:cb: e2:92:80:35:40:a3:74:e1:b2:5b:e1:24:b7:2e:8a:93:98:f2: 7f:35:9f:29:31:4c:7c:03:af:76:df:39:79:4e:0d:58:d8:63: 86:10:21:9f:fa:29:6b:91:d8:96:8c:e4:8e:0f:c0:b0:78:b4: 24:c6:49:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXVDSQPkQyBO0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OTMwMWE4OWUtNTRkZC00NzVkLTg1N2MtNTUzZDdjNTNhZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4n7VuKRLYbOACV8BEP2107SUqSKVCARMV1X ewsdJ+G6wdxtAFckZagO6o7NzL6FiZkPXgS8Qy5KaUerBGcwVAxgnOKYzYOCeKeB WdnktrSPTMwwmOw3PSb1y2X0LCqmG1JyMA6BfUAuUvw2fXXca8KUfR4l6X9NbTVc psJf3/Q2jfPnbodFjoZAbpRHpV0WwgHmGVwCoJrt2yCq460Dn6Vj2ebKbv8Nowsw 9lJCNh/bXdyHtj+Fd36iKz0SVDwWBvCxoT5I9wGkjilk08qBlnvDTUm1UqHMvlLP Jp9s7Fw96K9GMgI1hsd8wTTDwmJ+J+Y7gjNyI6o2oQGZu4fWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+jzOrfmWi/1IjMZEiSuZfStxXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTVkMmMyOTctYzRlZS0z OTVhLThhM2YtYTY0YjdjMTNmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtuoIPczQlb304R8EDNNmSNlu27/Ra2zgwLgrbe9Tkqzeji42X1BoEK CIoXKjHsz2ESKodIqloqFIFfM1M/gLcoTrEOGVp39s4jBQ+IlDIfUtTtmQ74bOjD D1x3PWMXSmjaGdQeA1HIEIx4rzy+YcXJH/1WAqeN5HHjvQaoevg7Fthfn6qluyb/ GTo7eqiNxAhTpMtN2De4lXgiNsPsINCIW1qzJ2UbrvwieYYA9cgSoczAP6PcPm4a Pf7IX7xZn7cXPhnKy+KSgDVAo3ThslvhJLcuipOY8n81nykxTHwDr3bfOXlODVjY Y4YQIZ/6KWuR2JaM5I4PwLB4tCTGSZY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:20 2025 by rpki-client