$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/9ff2b9ef-7db8-3ebf-a655-98a37172cc73.roa File: 9ff2b9ef-7db8-3ebf-a655-98a37172cc73.roa (raw, json) Hash identifier: QxdSUQKTC/0G8lUe612Xjc2A4O6fI0r0Cauf0f3Z6Zc= Subject key identifier: 23:73:36:F2:81:E7:66:41:3B:A5:16:1A:A8:DE:58:C9:3D:68:EA:91 Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584B99D7AEFAF3A3524AA2126420 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/9ff2b9ef-7db8-3ebf-a655-98a37172cc73.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26806 IP address blocks: 198.169.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ae:fa:f3:a3:52:4a:a2:12:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4135f5a9-8fbb-46bf-83da-f9eceabe809b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:a6:91:98:ef:ba:8f:f2:cd:e1:d1:88:5f: ef:ce:96:53:ea:19:93:fe:72:de:d7:20:01:97:47: db:23:f1:3a:b2:53:ae:1c:8b:ea:a3:96:e4:bb:1c: 90:ca:50:4d:60:ee:4f:70:d1:a2:63:0e:5a:6e:c5: 57:26:12:84:9b:c2:37:ba:9a:59:b3:00:20:6d:e6: f9:af:4f:4f:0c:87:b7:8c:82:48:81:6e:68:43:72: 16:08:26:39:ef:3a:ab:95:f5:22:b4:26:8d:78:d1: dd:4b:97:08:37:76:ec:5f:37:e8:94:e3:26:28:f4: b9:0c:77:66:3a:d3:9b:79:50:c1:47:e9:76:bb:93: 8a:8e:c3:8c:87:1e:69:46:1c:f6:ee:98:9a:c2:c9: 3c:44:13:d7:a6:98:e0:9a:d1:6a:6b:4f:47:21:93: 60:2c:a2:39:b9:3d:2a:54:8c:aa:c1:d4:02:40:79: fb:36:2c:db:62:87:05:3a:22:79:68:38:7b:ab:da: 1c:2d:ef:65:9c:e4:d5:e3:41:2b:de:b8:f7:60:2c: 55:fe:1c:5f:a2:a4:95:59:ee:2a:46:d6:ac:bf:d1: 40:4f:0e:34:4e:32:68:9b:60:52:7d:0a:11:a4:34: c5:b5:fd:5d:9f:6e:63:2b:e0:ec:c4:dc:68:0f:52: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:73:36:F2:81:E7:66:41:3B:A5:16:1A:A8:DE:58:C9:3D:68:EA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/9ff2b9ef-7db8-3ebf-a655-98a37172cc73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv4: 198.169.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d2:a4:62:d2:e2:ec:e1:5d:cb:24:65:41:ea:d5:16:f5:a4: f8:b1:1b:54:2b:35:fd:7b:ec:5a:0c:59:a0:97:d9:39:a4:c1: 02:f5:06:10:f7:b2:42:6b:95:fe:8f:de:ef:c5:6b:2a:38:b9: 8e:1e:e1:ff:5e:36:bd:fc:ff:e0:1e:70:20:00:2b:1f:40:bc: 3f:13:a0:0e:fc:9c:66:0c:8f:24:28:7e:10:99:c3:b4:d0:b2: 25:7e:f6:8f:d9:b4:a4:f7:33:81:48:4c:fd:b6:6d:cb:8a:72: d1:04:1f:0a:d8:ec:86:12:40:7e:93:48:aa:36:8d:db:9f:b3: 56:e1:8c:b2:7e:86:ce:34:5d:fd:8d:57:9b:63:c5:38:84:05: 42:d7:67:87:26:37:57:f4:f8:40:f8:89:31:51:9d:3f:b6:a2: 1f:29:92:fa:a0:5d:83:60:15:36:66:eb:fc:65:91:ee:48:14: 46:54:11:dd:73:96:4c:be:f7:cf:82:e6:17:65:8e:89:81:a2: 53:28:7e:4b:eb:cd:07:7e:23:60:c6:5c:e1:d1:ab:23:74:37: 01:02:ba:13:7a:57:06:a4:6b:ab:86:e2:32:61:6f:e1:9f:7d: 35:95:7a:71:84:02:0d:1f:75:0a:37:fd:12:52:20:f9:3c:28: 16:d0:dd:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ167686NSSqISZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDEzNWY1YTktOGZiYi00NmJmLTgzZGEtZjllY2VhYmU4MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyimkZjvuo/yzeHRiF/vzpZT6hmT/nLe1yAB l0fbI/E6slOuHIvqo5bkuxyQylBNYO5PcNGiYw5absVXJhKEm8I3uppZswAgbeb5 r09PDIe3jIJIgW5oQ3IWCCY57zqrlfUitCaNeNHdS5cIN3bsXzfolOMmKPS5DHdm OtObeVDBR+l2u5OKjsOMhx5pRhz27piawsk8RBPXppjgmtFqa09HIZNgLKI5uT0q VIyqwdQCQHn7NizbYocFOiJ5aDh7q9ocLe9lnOTV40Er3rj3YCxV/hxfoqSVWe4q Rtasv9FATw40TjJom2BSfQoRpDTFtf1dn25jK+DsxNxoD1KtawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNzNvKB52ZBO6UWGqjeWMk9aOqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvOWZmMmI5ZWYtN2RiOC0z ZWJmLWE2NTUtOThhMzcxNzJjYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3SpGLS4uzhXcskZUHq1Rb1pPixG1QrNf177FoMWaCX2TmkwQL1BhD3 skJrlf6P3u/Fayo4uY4e4f9eNr38/+AecCAAKx9AvD8ToA78nGYMjyQofhCZw7TQ siV+9o/ZtKT3M4FITP22bcuKctEEHwrY7IYSQH6TSKo2jdufs1bhjLJ+hs40Xf2N V5tjxTiEBULXZ4cmN1f0+ED4iTFRnT+2oh8pkvqgXYNgFTZm6/xlke5IFEZUEd1z lky+98+C5hdljomBolMofkvrzQd+I2DGXOHRqyN0NwECuhN6Vwaka6uG4jJhb+Gf fTWVenGEAg0fdQo3/RJSIPk8KBbQ3f4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:50 2025 by rpki-client