$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa File: be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa (raw, json) Hash identifier: 7q2ugBkORp/X47TWfJKwjVzVU4RSWpsnPJ5Z9Mqbb7s= Subject key identifier: 46:9F:B8:DD:F1:DF:39:4A:DE:0E:63:44:92:5A:27:50:C6:20:21:1B Certificate issuer: /CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Certificate serial: 010D0C9F4328584AFEE6A9369337530E43A0BB00 Authority key identifier: FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 399829 IP address blocks: 198.160.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a9:36:93:37:53:0e:43:a0:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=57be9bf3-a89c-47c4-ba63-b904d68923e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:f8:c6:d4:6c:ae:c7:d8:5e:ca:6c:cc:5b: 35:52:be:64:0d:dc:11:da:43:dd:08:b3:e0:67:b8: 57:b3:57:14:6a:d6:75:2d:fa:6c:ca:c1:10:4f:fa: f5:a0:9d:11:bd:cf:7b:09:ae:85:51:5f:6e:d3:9b: 1e:e8:c0:88:a3:15:51:73:d8:74:47:bf:90:5b:c6: 07:63:c6:26:3e:5e:6c:91:eb:9b:6d:0f:bd:da:44: a8:db:02:25:91:30:e0:23:ee:78:88:5e:08:90:cc: 19:fc:91:8b:55:c4:3f:45:4e:0c:df:fd:58:0e:12: 0f:83:e8:3d:00:dd:b4:32:a3:20:94:e0:6e:61:04: 34:08:d4:2d:ea:f9:83:fe:04:5a:d2:c2:68:51:a3: fa:2a:ce:22:e4:de:6f:6b:a9:cd:a7:72:f1:42:09: 56:11:36:ca:f3:61:8e:6b:6d:1d:34:9c:01:fa:3e: bf:96:7b:1b:da:73:f7:d2:e0:09:9b:c1:fe:fd:68: 16:08:c2:a3:1a:33:98:3d:50:8a:e1:d7:f7:ef:f8: c2:f0:32:1c:92:0b:2c:7a:c9:3c:53:90:c2:57:05: 30:7c:ba:46:00:03:44:2b:e3:c7:ae:9d:ce:2a:b7: 3c:40:7a:08:42:ae:44:16:98:f5:a7:ec:78:fe:66: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9F:B8:DD:F1:DF:39:4A:DE:0E:63:44:92:5A:27:50:C6:20:21:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl X509v3 Authority Key Identifier: keyid:FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer sbgp-ipAddrBlock: critical IPv4: 198.160.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:51:af:ba:5b:dc:58:9e:c2:9f:5e:bf:d7:70:b9:a4:e2:24: 85:1e:ef:0d:05:40:3d:49:c0:00:45:4d:74:0d:d8:7f:c6:80: e2:38:c3:a2:0d:77:76:ca:ee:b2:20:4e:b1:58:57:46:d9:0d: f4:1f:b1:e1:04:3f:22:b8:06:e5:52:38:73:18:8e:c2:76:40: d9:8b:4d:99:e3:da:ac:11:79:eb:6d:f3:7c:73:3b:98:15:81: 7f:18:32:25:2b:65:d5:b7:00:3d:3d:70:48:95:ee:70:66:46: 10:a5:66:dc:97:8c:aa:6c:b5:f2:2e:f6:4d:6f:64:ae:5c:94: 2b:e1:0d:aa:6c:d3:e0:8f:9e:a6:11:58:e9:c5:b2:10:a6:ec: 1f:46:15:d1:09:23:e9:6d:26:6f:af:ca:4b:ae:5d:be:0b:08: c2:7f:aa:6b:ec:1a:b5:5e:7e:12:41:3e:9f:91:5c:86:8c:15: a0:a6:80:78:d2:b2:37:e2:df:78:0c:e4:6c:35:c4:f2:59:5f: d4:9d:ed:3a:b8:58:87:0e:e4:0e:f7:09:6d:ed:11:22:c4:6b: 6b:cb:3f:34:89:43:c0:b1:08:d9:8d:da:07:5e:2f:18:79:cf: 40:91:dc:63:10:b4:d6:30:30:d8:48:9a:70:60:dc:38:54:3d: bc:da:16:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qk2kzdTDkOguwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMzQxMjktZTJkYS00MzY0LWE5ZGYtNGM2YzRkYjNk OTAzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NTdiZTliZjMtYTg5Yy00N2M0LWJhNjMtYjkwNGQ2ODkyM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGL4xtRsrsfYXspszFs1Ur5kDdwR2kPdCLPg Z7hXs1cUatZ1LfpsysEQT/r1oJ0Rvc97Ca6FUV9u05se6MCIoxVRc9h0R7+QW8YH Y8YmPl5skeubbQ+92kSo2wIlkTDgI+54iF4IkMwZ/JGLVcQ/RU4M3/1YDhIPg+g9 AN20MqMglOBuYQQ0CNQt6vmD/gRa0sJoUaP6Ks4i5N5va6nNp3LxQglWETbK82GO a20dNJwB+j6/lnsb2nP30uAJm8H+/WgWCMKjGjOYPVCK4df37/jC8DIckgssesk8 U5DCVwUwfLpGAANEK+PHrp3OKrc8QHoIQq5EFpj1p+x4/maRrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEafuN3x3zlK3g5jRJJaJ1DGICEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMz NDEyOS1lMmRhLTQzNjQtYTlkZi00YzZjNGRiM2Q5MDMvYmUyOGQxZDItOTQ2Mi0z YzMzLTk2NWQtNDhiNWViOWNjNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWZjMzQxMjktZTJkYS00MzY0LWE5 ZGYtNGM2YzRkYjNkOTAzL2FmYzM0MTI5LWUyZGEtNDM2NC1hOWRmLTRjNmM0ZGIz ZDkwMy5jcmwwHwYDVR0jBBgwFoAU/8e01i+y7v5+terFLv43UqXP+9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMzNDEyOS1lMmRhLTQzNjQtYTlkZi00YzZj NGRiM2Q5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBRr7pb3Fiewp9ev9dwuaTiJIUe7w0FQD1JwABFTXQN2H/GgOI4w6IN d3bK7rIgTrFYV0bZDfQfseEEPyK4BuVSOHMYjsJ2QNmLTZnj2qwReett83xzO5gV gX8YMiUrZdW3AD09cEiV7nBmRhClZtyXjKpstfIu9k1vZK5clCvhDaps0+CPnqYR WOnFshCm7B9GFdEJI+ltJm+vykuuXb4LCMJ/qmvsGrVefhJBPp+RXIaMFaCmgHjS sjfi33gM5Gw1xPJZX9Sd7Tq4WIcO5A73CW3tESLEa2vLPzSJQ8CxCNmN2gdeLxh5 z0CR3GMQtNYwMNhImnBg3DhUPbzaFu8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:57 2025 by rpki-client