$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa File: 3be2f94e-6696-38e8-ae53-405000ea496b.roa (raw, json) Hash identifier: TZ/eVRw2py/lybIaSnD4vbDzyupyPd8ZukpH1m4cKhg= Subject key identifier: 24:AC:38:AF:88:C7:20:C1:69:9E:95:2B:BB:D9:D5:87:B4:27:5F:0E Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F667CEDC65EE99FA740C80 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 395963 IP address blocks: 198.150.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:67:ce:dc:65:ee:99:fa:74:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=4ec6d581-8c8b-4cc9-b1b4-274605a70b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:11:2b:3c:db:38:6a:c0:13:91:1b:1b:2a: 08:1a:fb:26:f6:ba:78:fa:53:1c:81:65:fe:51:00: 04:2d:3f:d9:ae:fc:65:7f:85:3b:b2:52:03:53:2e: 9e:3b:79:01:19:45:01:e4:02:c8:6f:05:24:38:36: 78:42:f2:6b:a9:c0:ae:2e:dc:24:df:73:ee:cc:b0: 81:e5:5d:9d:d2:aa:00:92:03:54:da:96:5a:53:56: bb:5d:00:0f:22:68:59:d5:0c:0e:77:1a:ec:57:5c: 39:84:be:e9:2a:40:01:38:ff:e5:29:75:1c:09:4b: af:30:40:bc:e6:48:56:bd:4e:18:66:f7:30:59:3d: f2:10:49:60:6a:cf:30:a1:18:6b:b5:4c:44:fa:94: a6:12:18:cf:68:2e:ce:54:1e:87:c6:57:0c:fa:29: a5:0d:69:7c:06:9b:13:d8:59:ea:d8:06:2a:1a:3e: 7c:b3:c4:7f:2d:3b:67:a7:d9:5b:bb:08:60:8b:d4: bd:de:50:d9:d4:e1:18:56:85:a2:26:32:f0:5a:05: b3:73:30:0f:05:37:24:6e:9a:21:f6:5d:59:5f:3b: 1a:99:b9:01:f3:0d:42:e9:59:9c:0c:14:95:fb:55: d9:bb:e6:62:d1:12:06:1c:62:79:ab:dd:8d:d6:6e: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:38:AF:88:C7:20:C1:69:9E:95:2B:BB:D9:D5:87:B4:27:5F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1c:7b:69:4d:c8:8c:25:c8:cd:ab:d8:1b:ff:ff:ac:cf:42: 76:dd:6f:d6:da:64:12:95:87:d9:0c:0c:28:87:36:a3:f8:c7: a3:5e:dc:20:7a:0b:be:ec:74:07:21:d4:35:2a:02:ef:e9:2b: 40:6c:09:59:95:fb:7c:59:79:65:e9:00:97:1b:2b:1a:dc:06: 35:c5:91:3b:28:f8:c9:c9:50:a9:95:9a:36:ae:5a:d1:1b:88: e2:d6:da:bd:27:09:5d:1f:f0:1a:b8:17:74:97:5e:13:fc:47: 79:d2:c5:67:30:bd:e5:52:2a:ab:71:17:47:27:0f:ed:4a:15: 74:71:86:66:4c:c7:d2:89:a4:5f:dc:8a:4e:fa:b3:ed:8f:e0: 69:30:a6:8f:39:d7:d1:55:a4:f5:d2:03:c8:3a:a3:c2:73:79: 2c:c4:40:7e:2f:8e:f5:84:50:79:f8:f2:9d:fe:89:03:a5:a6: cc:18:b9:67:d0:f4:3f:72:58:ac:91:e0:49:d7:35:43:84:d9: a6:b1:13:21:75:27:61:ee:c5:f4:5d:19:b3:c5:3a:2c:b9:98: 93:70:c4:62:24:44:cb:e9:7d:56:71:16:11:fa:a6:20:5f:57: 19:ad:be:5d:10:26:f0:2a:df:0f:e2:6b:8d:f8:fc:d0:15:64: a5:de:40:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mfO3GXumfp0DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NGVjNmQ1ODEtOGM4Yi00Y2M5LWIxYjQtMjc0NjA1YTcwYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQQRKzzbOGrAE5EbGyoIGvsm9rp4+lMcgWX+ UQAELT/Zrvxlf4U7slIDUy6eO3kBGUUB5ALIbwUkODZ4QvJrqcCuLtwk33PuzLCB 5V2d0qoAkgNU2pZaU1a7XQAPImhZ1QwOdxrsV1w5hL7pKkABOP/lKXUcCUuvMEC8 5khWvU4YZvcwWT3yEElgas8woRhrtUxE+pSmEhjPaC7OVB6HxlcM+imlDWl8BpsT 2Fnq2AYqGj58s8R/LTtnp9lbuwhgi9S93lDZ1OEYVoWiJjLwWgWzczAPBTckbpoh 9l1ZXzsambkB8w1C6VmcDBSV+1XZu+Zi0RIGHGJ5q92N1m5q0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSsOK+IxyDBaZ6VK7vZ1Ye0J18OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvM2JlMmY5NGUtNjY5Ni0z OGU4LWFlNTMtNDA1MDAwZWE0OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkce2lNyIwlyM2r2Bv//6zPQnbdb9baZBKVh9kMDCiHNqP4x6Ne3CB6 C77sdAch1DUqAu/pK0BsCVmV+3xZeWXpAJcbKxrcBjXFkTso+MnJUKmVmjauWtEb iOLW2r0nCV0f8Bq4F3SXXhP8R3nSxWcwveVSKqtxF0cnD+1KFXRxhmZMx9KJpF/c ik76s+2P4Gkwpo8519FVpPXSA8g6o8JzeSzEQH4vjvWEUHn48p3+iQOlpswYuWfQ 9D9yWKyR4EnXNUOE2aaxEyF1J2HuxfRdGbPFOiy5mJNwxGIkRMvpfVZxFhH6piBf Vxmtvl0QJvAq3w/ia434/NAVZKXeQBo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:35 2025 by rpki-client