$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: TUBhcZwBhqITTrXytDWQBHJIeNOcfaXfcPiOtDBUAbk= Subject key identifier: 62:D7:D8:AA:57:20:89:32:85:B8:47:9D:BD:64:09:CF:2D:F6:36:D3 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584B28C6E558C8415BBD9BEE6550 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e5:58:c8:41:5b:bd:9b:ee:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=e7e9228a-f38e-40f0-a7bb-9cf8c6bb1fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:44:68:61:de:47:1b:2b:d0:80:70:c0:58: cf:43:95:78:54:1d:01:64:5b:b7:b1:10:69:a7:af: ce:1e:fd:18:79:ee:c6:0a:23:08:e4:4a:35:e2:29: 31:9d:73:e7:0d:11:31:7b:0c:88:41:fb:e3:7a:f4: 42:f1:b8:3d:44:f3:c4:51:f0:21:d9:74:9a:a0:1e: 03:37:19:9f:c3:a6:d1:96:c9:75:51:7e:c0:71:11: ad:62:a3:b5:b2:00:f1:54:11:42:df:2b:7f:e0:30: 1c:b6:ef:2a:a8:22:28:b7:a6:5b:8a:49:ca:95:d3: 1d:37:0a:dd:1b:cc:af:3f:03:6f:81:bc:e9:9d:7b: 0f:07:14:65:13:4f:60:2c:35:17:4c:1d:53:11:18: e9:36:ad:c4:ea:2d:4d:a1:63:0a:f6:9c:cc:0a:f7: fb:75:d9:31:7e:da:66:21:73:2c:1f:af:dd:d8:87: e9:aa:0d:a4:7e:85:ed:78:e4:bc:01:61:42:17:50: 3c:44:3f:a9:59:db:d4:47:39:03:de:df:c3:d2:0c: 00:93:5c:7b:87:50:7e:4e:bb:e0:d9:0c:fa:84:82: 18:2d:b0:0c:ef:fa:0a:18:4a:5c:10:1b:5e:cf:f5: d8:46:7f:9a:e4:40:46:4c:ef:5f:ef:0b:ac:3d:62: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:D8:AA:57:20:89:32:85:B8:47:9D:BD:64:09:CF:2D:F6:36:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f9:81:7a:60:a7:75:23:c2:2a:9d:8e:ce:83:54:85:d8:9f: 1e:ed:d9:58:76:de:d0:c3:ee:23:ba:d2:1c:39:97:55:73:f4: b2:c2:8d:1d:cf:41:65:3d:5c:00:6b:e7:04:96:69:2a:28:36: 96:91:63:58:57:a3:e9:e0:25:35:33:73:c6:16:bd:b0:e5:77: 5f:a5:30:fe:84:37:79:d2:4e:a0:1f:14:c4:50:11:23:5f:92: 6e:5d:c3:28:f9:be:7e:ba:50:39:65:89:e7:29:a0:b2:e9:ae: a7:53:04:63:76:6a:b6:cf:f3:a9:f9:ee:02:1e:21:88:03:87: cc:b1:cc:07:e7:b9:3e:da:f5:01:02:9f:ae:f9:f2:56:54:dc: 0c:70:e3:bf:65:c3:c6:69:ee:6f:44:cb:dd:f2:97:2e:35:58: ca:3c:3e:5a:b0:66:aa:30:ec:61:7b:1d:8d:88:ed:be:48:c1: e7:17:d2:7d:87:db:43:1c:d0:a5:41:fd:bc:06:60:d5:db:75: f7:43:49:8e:b7:20:af:7a:d4:32:c7:de:f9:17:7c:7c:8a:b2: 3d:88:9c:49:50:2d:17:04:3a:9b:4e:69:cb:48:f1:f8:20:d0: 1a:69:10:27:b7:49:3e:c5:a3:db:ba:19:df:ef:70:36:7a:17: e9:04:eb:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuVYyEFbvZvuZVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTdlOTIyOGEtZjM4ZS00MGYwLWE3YmItOWNmOGM2YmIxZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnJEaGHeRxsr0IBwwFjPQ5V4VB0BZFu3sRBp p6/OHv0Yee7GCiMI5Eo14ikxnXPnDRExewyIQfvjevRC8bg9RPPEUfAh2XSaoB4D Nxmfw6bRlsl1UX7AcRGtYqO1sgDxVBFC3yt/4DActu8qqCIot6ZbiknKldMdNwrd G8yvPwNvgbzpnXsPBxRlE09gLDUXTB1TERjpNq3E6i1NoWMK9pzMCvf7ddkxftpm IXMsH6/d2Ifpqg2kfoXteOS8AWFCF1A8RD+pWdvURzkD3t/D0gwAk1x7h1B+Trvg 2Qz6hIIYLbAM7/oKGEpcEBtez/XYRn+a5EBGTO9f7wusPWLOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLX2KpXIIkyhbhHnb1kCc8t9jbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz5gXpgp3Ujwiqdjs6DVIXYnx7t2Vh23tDD7iO60hw5l1Vz9LLCjR3P QWU9XABr5wSWaSooNpaRY1hXo+ngJTUzc8YWvbDld1+lMP6EN3nSTqAfFMRQESNf km5dwyj5vn66UDlliecpoLLprqdTBGN2arbP86n57gIeIYgDh8yxzAfnuT7a9QEC n6758lZU3Axw479lw8Zp7m9Ey93yly41WMo8PlqwZqow7GF7HY2I7b5IwecX0n2H 20Mc0KVB/bwGYNXbdfdDSY63IK961DLH3vkXfHyKsj2InElQLRcEOptOactI8fgg 0BppECe3ST7Fo9u6Gd/vcDZ6F+kE6/U= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:28 2025 by rpki-client