$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: 6Vt3fi8UiCZE+yJPVtZRBf4U0IsK/kPiBwKvnJE4Lck= Subject key identifier: 53:9C:5B:EE:95:10:73:35:78:AD:A4:06:50:02:DC:75:4E:5A:B1:97 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584AF52149784A4D42DF2364FE00 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:49:78:4a:4d:42:df:23:64:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=6fdb3ef0-9897-4e0d-854c-9f2bb3cf3938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:ea:d1:33:3e:5c:06:f4:c3:9f:b6:22:a3: be:a1:eb:92:a8:1f:75:4c:a3:a6:ca:3f:fb:a7:ae: 29:65:c0:2e:28:9a:3d:8f:7f:c5:ce:9b:89:5f:6f: 83:9a:0f:86:ca:3d:8a:7e:fe:8c:f6:3d:7d:b3:7c: 6f:ee:df:e9:f7:6a:5d:ef:07:48:00:d9:83:82:49: 45:ac:18:dd:e3:d4:21:4e:2b:55:0a:62:31:6d:c6: 48:f1:7e:3a:ad:25:dc:0f:cb:46:ba:bf:ac:85:bb: 6a:86:90:90:37:5f:23:a9:6c:e8:f8:eb:f0:3b:bc: a8:e4:b1:a4:55:22:d0:6a:fc:d7:a2:a2:69:6e:be: c2:a9:8c:83:7c:9f:72:37:fe:03:4b:ef:fd:25:12: ab:ca:58:b1:5f:e7:95:36:44:2d:04:22:13:a9:a3: 4a:fc:eb:c2:31:10:db:a6:c8:ed:20:b2:de:bf:2c: 79:b3:2b:24:71:53:4c:a7:08:f7:18:a2:3a:3f:99: 3a:25:90:d8:d7:f7:2a:e8:ea:7b:77:71:a3:43:26: e3:12:59:7d:e8:b4:24:02:73:17:60:f5:6b:79:02: 43:f4:8a:24:33:7e:e1:d6:e9:7b:e9:f2:a2:ef:22: 8f:b0:42:a4:00:06:92:f8:8f:32:64:f1:9e:f3:bd: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:5B:EE:95:10:73:35:78:AD:A4:06:50:02:DC:75:4E:5A:B1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ac:79:8a:e8:4b:43:2e:17:99:59:cb:47:76:a9:39:30:a0: 50:3a:e7:41:8e:e1:e7:e9:e8:ba:db:dd:6d:64:4b:6e:47:d3: 76:58:72:57:ac:cf:e2:be:5b:2f:dc:59:39:1c:4c:8a:8f:cc: 28:c7:ec:c3:fe:db:bd:59:0a:90:6a:18:01:df:35:f9:00:85: ac:3d:1b:e1:4e:42:55:e1:c9:f8:c8:24:91:37:67:65:ac:3a: b2:38:60:9d:3a:5e:d9:d1:2b:92:2e:c0:d3:e8:ca:34:22:7f: c9:ce:e5:e8:b7:da:8d:75:5b:bc:38:55:5c:de:8d:d6:8b:58: 89:87:86:c8:64:51:25:cc:2c:03:1c:a6:ad:08:7e:16:96:ed: 10:26:ca:c4:49:84:3a:95:80:79:ed:9c:f6:c2:b0:37:1d:38: 2a:49:4f:71:87:2f:c7:76:c8:2c:f1:9b:2c:4d:49:93:77:0d: 1d:d4:0d:55:b4:65:06:9a:a5:f1:6e:f8:eb:9a:07:cf:95:63: 3f:1b:60:92:28:1a:8e:b4:f4:4c:05:9a:b9:0c:d6:b8:9a:63: 2f:cf:be:56:38:8a:04:01:4c:d5:38:5d:cf:ff:51:7c:34:b6: 44:e3:b6:07:47:9f:c5:4e:e5:ca:98:41:0a:6b:9f:2b:0c:8e: 38:08:09:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUl4Sk1C3yNk/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmZkYjNlZjAtOTg5Ny00ZTBkLTg1NGMtOWYyYmIzY2YzOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSLq0TM+XAb0w5+2IqO+oeuSqB91TKOmyj/7 p64pZcAuKJo9j3/FzpuJX2+Dmg+Gyj2Kfv6M9j19s3xv7t/p92pd7wdIANmDgklF rBjd49QhTitVCmIxbcZI8X46rSXcD8tGur+shbtqhpCQN18jqWzo+OvwO7yo5LGk VSLQavzXoqJpbr7CqYyDfJ9yN/4DS+/9JRKrylixX+eVNkQtBCITqaNK/OvCMRDb psjtILLevyx5syskcVNMpwj3GKI6P5k6JZDY1/cq6Op7d3GjQybjEll96LQkAnMX YPVreQJD9IokM37h1ul76fKi7yKPsEKkAAaS+I8yZPGe871rfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOcW+6VEHM1eK2kBlAC3HVOWrGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6seYroS0MuF5lZy0d2qTkwoFA650GO4efp6Lrb3W1kS25H03ZYcles z+K+Wy/cWTkcTIqPzCjH7MP+271ZCpBqGAHfNfkAhaw9G+FOQlXhyfjIJJE3Z2Ws OrI4YJ06XtnRK5IuwNPoyjQif8nO5ei32o11W7w4VVzejdaLWImHhshkUSXMLAMc pq0IfhaW7RAmysRJhDqVgHntnPbCsDcdOCpJT3GHL8d2yCzxmyxNSZN3DR3UDVW0 ZQaapfFu+OuaB8+VYz8bYJIoGo609EwFmrkM1riaYy/PvlY4igQBTNU4Xc//UXw0 tkTjtgdHn8VO5cqYQQprnysMjjgICVk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:33:56 2025 by rpki-client