$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa File: bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa (raw, json) Hash identifier: Ou2RLpJF9b4sEoY6SDaG/wlN2XAoPYj5jV3HiozMmek= Subject key identifier: 8B:B4:9B:1E:9F:1F:EE:34:D1:C9:D2:37:B5:20:51:CB:AE:75:13:3A Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584B99D7AF7A62B56B7A88F51F80 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 198.51.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:af:7a:62:b5:6b:7a:88:f5:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ebf0c472-db77-4898-8288-e1b72bb3f7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:37:91:55:09:d0:e2:1e:d3:8f:0d:ac:0f: 8e:3c:ed:51:0b:90:0b:45:e2:66:ee:4a:6e:5b:e2: ad:b6:88:45:57:18:9d:ac:63:2d:26:9f:58:d4:2e: 20:00:c7:04:f8:4a:a0:45:6a:7f:13:bc:dc:bd:4a: 20:94:30:d4:37:df:5a:d1:7b:11:af:5d:21:7a:29: bc:87:55:63:62:00:11:fe:b7:19:86:e5:5e:17:02: b8:b1:ec:52:b9:22:bd:af:2e:fa:89:56:9e:2c:f6: bd:9c:d8:cd:c6:1b:26:a2:f2:43:0f:4d:a1:44:ea: 8b:af:86:57:02:61:9f:b2:c7:46:cf:32:17:d7:bc: 8e:37:11:2d:e6:35:39:24:6c:02:d6:3d:92:ab:98: 06:66:a2:46:7c:74:2f:b4:f8:97:f9:b2:3b:88:70: cc:c1:39:f9:d8:9c:9a:90:85:b6:c2:cc:52:ec:f8: 75:89:a7:9f:bb:25:2a:65:d9:63:5f:5e:6b:9c:8f: e7:82:79:d3:fa:fc:a9:1c:c5:d3:25:4f:77:ab:e8: 5d:cf:d5:06:05:a1:a7:10:54:d6:1e:ac:26:f6:c1: a8:72:2d:62:77:f2:7b:34:30:ed:35:b8:f9:e0:9e: 0b:60:60:05:79:78:b5:18:af:2a:0b:d9:8b:4c:5f: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B4:9B:1E:9F:1F:EE:34:D1:C9:D2:37:B5:20:51:CB:AE:75:13:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.51.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:90:4b:38:f8:75:3f:81:92:cc:cf:33:58:cf:9e:4e:a0:ec: 05:c5:bb:40:90:23:54:af:57:53:a6:ee:9d:99:fe:a7:52:2d: c3:8e:93:72:f4:00:69:a9:8e:e8:b2:6c:f7:2d:86:42:f1:b3: ff:1c:38:e5:4d:af:1b:11:64:c3:93:d1:12:de:7f:04:11:8a: 24:7b:12:fd:ac:54:42:2c:4b:08:2e:a9:12:bb:d9:3e:9d:c5: 75:02:3a:3c:be:6c:1e:a7:8c:92:b5:d2:b7:0f:df:61:db:02: fc:32:bd:29:04:c8:b1:8d:a7:d8:c2:00:48:12:77:7b:bc:3c: 1f:25:94:d5:e4:f7:01:fa:18:16:5e:7d:a8:25:ac:fc:42:e4: 57:fa:bb:42:d8:ba:17:96:19:6d:89:0c:27:1e:32:37:7c:ca: 62:c6:f0:f3:7f:39:b6:e2:0c:9b:c4:8c:0a:f6:5b:22:2c:0c: f6:a9:ba:d7:47:f8:a0:e6:7c:d2:6f:df:74:20:3d:9c:b8:2a: f3:d0:99:9b:4c:0b:00:ff:cf:36:85:6f:19:07:17:44:f8:9a: 93:ff:8e:22:d7:5d:4f:cf:8f:e9:07:19:40:bf:36:7c:86:1f: 12:79:25:54:8f:a0:ed:ce:08:fe:92:68:3d:9d:93:bd:30:f9: 32:0a:fd:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1696YrVreoj1H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWJmMGM0NzItZGI3Ny00ODk4LTgyODgtZTFiNzJiYjNmN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i03kVUJ0OIe048NrA+OPO1RC5ALReJm7kpu W+KttohFVxidrGMtJp9Y1C4gAMcE+EqgRWp/E7zcvUoglDDUN99a0XsRr10heim8 h1VjYgAR/rcZhuVeFwK4sexSuSK9ry76iVaeLPa9nNjNxhsmovJDD02hROqLr4ZX AmGfssdGzzIX17yONxEt5jU5JGwC1j2Sq5gGZqJGfHQvtPiX+bI7iHDMwTn52Jya kIW2wsxS7Ph1iaefuyUqZdljX15rnI/ngnnT+vypHMXTJU93q+hdz9UGBaGnEFTW Hqwm9sGoci1id/J7NDDtNbj54J4LYGAFeXi1GK8qC9mLTF/+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu0mx6fH+400cnSN7UgUcuudRM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYmY5N2ZlNjMtMjAwNy0z YWM1LTgxZDItYzNmZjA0MWY2YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGQSzj4dT+BkszPM1jPnk6g7AXFu0CQI1SvV1Om7p2Z/qdSLcOOk3L0 AGmpjuiybPcthkLxs/8cOOVNrxsRZMOT0RLefwQRiiR7Ev2sVEIsSwguqRK72T6d xXUCOjy+bB6njJK10rcP32HbAvwyvSkEyLGNp9jCAEgSd3u8PB8llNXk9wH6GBZe faglrPxC5Ff6u0LYuheWGW2JDCceMjd8ymLG8PN/ObbiDJvEjAr2WyIsDPaputdH +KDmfNJv33QgPZy4KvPQmZtMCwD/zzaFbxkHF0T4mpP/jiLXXU/Pj+kHGUC/NnyG HxJ5JVSPoO3OCP6SaD2dk70w+TIK/a4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:14 2025 by rpki-client