$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa File: 9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa (raw, json) Hash identifier: fAa7gth8mSi5eCzHoYS/JFdhy+ME5yIMG5ioZpOpe0A= Subject key identifier: 73:35:42:EA:44:8E:9F:D6:10:F1:9C:90:5D:03:E8:40:3D:74:49:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B970D01CD2694DE0101D36580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 174 IP address blocks: 198.144.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:01:cd:26:94:de:01:01:d3:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d0c352a6-14fc-4aaf-8453-1a2b25dce558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:a5:4d:01:12:1e:44:15:71:1f:2d:68:9b: c4:ee:fc:83:ab:69:0d:8c:b3:8b:4c:d5:08:a8:61: a8:d4:bb:20:da:93:77:e9:ba:66:32:f4:1b:d3:d8: 26:02:71:45:59:79:46:7b:1f:11:f0:a1:d4:c0:47: 87:44:69:8e:ba:01:a1:c4:c9:22:d9:22:51:f5:96: 7b:23:bd:eb:9b:d9:66:62:42:42:b5:2c:9c:99:b0: e9:4d:34:b8:78:22:31:0d:5c:2f:7b:68:00:d5:c6: e0:2b:bb:27:94:78:fd:14:4b:ce:11:4a:09:dd:be: 33:f0:93:3b:9e:0e:48:3b:37:eb:8b:2a:62:71:f3: d3:1b:48:7e:c4:56:b8:25:2b:42:07:74:97:d7:26: 6c:9c:04:73:fe:1f:30:c1:45:d6:a4:83:3e:29:2c: e4:10:8b:d7:47:33:a6:91:cf:ad:8e:ee:31:cd:aa: eb:ec:61:97:9a:b4:43:a1:5e:e0:87:87:15:f2:4e: c7:f3:3d:ec:eb:f4:9a:08:1e:2c:69:8b:2c:ec:bf: e8:6b:64:7f:1a:b1:67:c6:6f:be:39:ee:c8:aa:76: 4e:41:7b:d2:90:b2:b5:d3:66:bc:65:71:4d:fb:7a: 7d:ab:ba:6d:2a:de:07:46:d0:14:22:4c:c7:21:72: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:42:EA:44:8E:9F:D6:10:F1:9C:90:5D:03:E8:40:3D:74:49:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.144.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c4:2f:01:8d:ef:5f:9c:cf:c2:b5:92:57:63:e8:15:90:8e: bd:70:4f:df:24:67:bb:6e:a2:f3:90:f4:d7:dc:52:94:d6:a1: d2:d2:ab:95:8d:26:72:7c:59:2b:59:09:2a:dc:0c:85:d8:a7: 3c:49:ff:cb:40:4c:ec:99:38:f8:18:2a:a6:8d:08:a6:61:af: 82:ab:8e:97:f4:80:75:95:4c:d9:89:ed:be:0e:27:4a:50:a7: ec:bb:60:f6:2d:5a:e5:c9:d1:49:20:bd:0e:36:a4:28:dd:d9: d0:57:4e:82:64:ba:a5:9a:97:c1:9b:1d:ed:72:c9:93:19:2f: 36:9a:d0:ec:d8:f0:b8:3d:b6:c4:52:26:2b:99:f1:4c:0d:15: 34:77:9b:e0:01:25:59:ce:79:b3:af:11:e8:df:5b:88:fb:58: e3:3d:1e:5e:11:c8:40:5c:a6:3b:2e:0a:fb:ad:98:10:a1:02: d7:f0:34:00:14:24:90:b4:45:cb:fa:9e:16:54:c6:c6:f1:19: b8:d7:51:89:f2:d4:a7:4a:fe:36:dc:b9:be:df:52:26:eb:cb: 00:c0:b5:4e:09:48:dd:f8:d1:1d:32:24:3b:67:0b:eb:95:d8: a2:dd:86:76:a3:64:aa:03:2a:d8:32:0a:94:b3:ef:c2:9e:c5: 22:b9:e7:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQHNJpTeAQHTZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDBjMzUyYTYtMTRmYy00YWFmLTg0NTMtMWEyYjI1ZGNlNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZKlTQESHkQVcR8taJvE7vyDq2kNjLOLTNUI qGGo1Lsg2pN36bpmMvQb09gmAnFFWXlGex8R8KHUwEeHRGmOugGhxMki2SJR9ZZ7 I73rm9lmYkJCtSycmbDpTTS4eCIxDVwve2gA1cbgK7snlHj9FEvOEUoJ3b4z8JM7 ng5IOzfriypicfPTG0h+xFa4JStCB3SX1yZsnARz/h8wwUXWpIM+KSzkEIvXRzOm kc+tju4xzarr7GGXmrRDoV7gh4cV8k7H8z3s6/SaCB4saYss7L/oa2R/GrFnxm++ Oe7IqnZOQXvSkLK102a8ZXFN+3p9q7ptKt4HRtAUIkzHIXL5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM1QupEjp/WEPGckF0D6EA9dEkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWViZDk5M2YtZWU3ZC0z NGNjLWFhOGUtNWFhMTFmMmYyMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPELwGN71+cz8K1kldj6BWQjr1wT98kZ7tuovOQ9NfcUpTWodLSq5WN JnJ8WStZCSrcDIXYpzxJ/8tATOyZOPgYKqaNCKZhr4Krjpf0gHWVTNmJ7b4OJ0pQ p+y7YPYtWuXJ0UkgvQ42pCjd2dBXToJkuqWal8GbHe1yyZMZLzaa0OzY8Lg9tsRS JiuZ8UwNFTR3m+ABJVnOebOvEejfW4j7WOM9Hl4RyEBcpjsuCvutmBChAtfwNAAU JJC0Rcv6nhZUxsbxGbjXUYny1KdK/jbcub7fUibrywDAtU4JSN340R0yJDtnC+uV 2KLdhnajZKoDKtgyCpSz78KexSK552E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:20:58 2025 by rpki-client