$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa File: 25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json) Hash identifier: kdfxdRHgdFW4ks0MpGSGbKUbQz9klNKEMih2lP35rF4= Subject key identifier: C2:AB:A6:03:78:14:C9:ED:EE:C4:9A:95:D1:E3:8B:3B:E2:E3:8A:73 Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Certificate serial: 010D0C9F4328584B110BFBD0BDFD95F1F80E7180 Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 198.37.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fb:d0:bd:fd:95:f1:f8:0e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ad5e71cb-a510-47b9-a4cd-fc0e3016d67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:c9:3c:cb:5a:9f:e9:08:a0:72:f7:30:ee: dd:aa:22:98:c8:73:29:af:36:e8:31:3d:c5:18:48: e4:fc:e7:22:92:15:96:13:1c:8a:52:04:46:ef:b1: 55:0f:66:9a:06:e8:cd:f6:74:c0:7f:2c:22:b7:aa: 5e:b6:9a:c0:a0:f6:30:bf:06:ee:35:63:f8:e1:83: a2:93:3c:cc:33:88:73:a4:6c:0e:bc:c3:95:cb:57: 68:b2:5e:60:9d:1a:52:78:b8:99:70:62:46:4e:c8: c7:43:27:01:af:60:97:14:56:b8:6c:44:32:4a:86: 2c:62:81:b9:36:25:e4:6f:5f:f3:2b:f7:f5:e4:17: 36:9c:70:0d:3f:c4:61:40:45:24:5d:4e:1d:34:b7: 31:ab:82:fb:82:82:47:13:95:78:4a:5e:e5:a8:59: 5d:80:d9:fd:b3:97:14:3a:d7:88:16:9d:ef:e7:70: 1b:c8:34:cf:ee:b6:bc:38:fb:2d:b2:49:c1:b3:9c: 04:31:a0:e0:ae:a6:6d:e4:53:2b:5c:61:04:a4:76: cc:9c:c0:44:80:b4:4b:c4:a4:ad:04:83:17:2c:78: e1:f5:b2:6f:ec:9d:22:9f:10:8a:19:20:d0:4d:16: 9e:83:26:37:7d:99:36:aa:e7:f6:29:c3:4d:e2:0e: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AB:A6:03:78:14:C9:ED:EE:C4:9A:95:D1:E3:8B:3B:E2:E3:8A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl X509v3 Authority Key Identifier: keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer sbgp-ipAddrBlock: critical IPv4: 198.37.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b8:1d:95:96:4d:c9:e1:b1:29:93:e8:06:3b:01:ad:ac:5c: 63:53:87:15:b5:98:65:01:aa:09:e2:b8:55:78:27:a3:14:9b: 3a:93:69:01:7f:f0:93:92:bb:1e:8f:8c:36:8e:7d:25:ad:6a: 30:c9:bb:b4:8e:ff:c5:42:53:97:2c:5e:a7:b1:15:3c:a9:20: 17:ab:43:b0:ff:1d:63:20:8d:04:19:43:21:62:23:9c:2d:bf: dd:31:be:98:ce:64:82:a8:7e:c0:fa:90:00:39:56:9a:dc:a5: d6:66:be:f0:43:d6:b5:49:95:da:33:04:db:c1:87:7d:8b:94: 44:d6:ca:7c:71:ce:b7:83:f9:47:5f:4e:80:51:dd:d2:4c:65: fd:d2:b9:14:0b:2c:5d:ce:6d:26:71:a3:9d:21:9a:3e:f7:f6: de:f9:60:36:4e:21:c2:ed:49:fe:ec:f6:10:d4:3d:7a:3e:bd: 05:49:c2:b0:ee:91:f7:78:27:4e:18:0a:49:d6:ac:92:25:64: a0:c1:7b:e5:db:72:bc:2c:9d:c5:8f:1e:ce:73:9d:2f:20:b1: b5:7c:d5:10:e5:b9:38:f8:94:e2:6a:36:b8:e6:2d:2b:cd:61: ff:fd:f5:84:4b:74:98:f2:39:b6:6d:74:99:a2:d5:78:06:09: f9:f0:32:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/vQvf2V8fgOcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3 MGRjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWQ1ZTcxY2ItYTUxMC00N2I5LWE0Y2QtZmMwZTMwMTZkNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51LJPMtan+kIoHL3MO7dqiKYyHMprzboMT3F GEjk/OcikhWWExyKUgRG77FVD2aaBujN9nTAfywit6petprAoPYwvwbuNWP44YOi kzzMM4hzpGwOvMOVy1dosl5gnRpSeLiZcGJGTsjHQycBr2CXFFa4bEQySoYsYoG5 NiXkb1/zK/f15Bc2nHANP8RhQEUkXU4dNLcxq4L7goJHE5V4Sl7lqFldgNn9s5cU OteIFp3v53AbyDTP7ra8OPstsknBs5wEMaDgrqZt5FMrXGEEpHbMnMBEgLRLxKSt BIMXLHjh9bJv7J0inxCKGSDQTRaegyY3fZk2quf2KcNN4g5uZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKrpgN4FMnt7sSaldHjizvi44pzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMjVmM2VjZGItNTE5NS0z NTE3LWI4YjYtZWY1NjIwOTJmNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1 NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG4HZWWTcnhsSmT6AY7Aa2sXGNThxW1mGUBqgniuFV4J6MUmzqTaQF/ 8JOSux6PjDaOfSWtajDJu7SO/8VCU5csXqexFTypIBerQ7D/HWMgjQQZQyFiI5wt v90xvpjOZIKofsD6kAA5VprcpdZmvvBD1rVJldozBNvBh32LlETWynxxzreD+Udf ToBR3dJMZf3SuRQLLF3ObSZxo50hmj739t75YDZOIcLtSf7s9hDUPXo+vQVJwrDu kfd4J04YCknWrJIlZKDBe+XbcrwsncWPHs5znS8gsbV81RDluTj4lOJqNrjmLSvN Yf/99YRLdJjyObZtdJmi1XgGCfnwMkI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:06 2025 by rpki-client