$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa File: a869d388-8367-3ca6-b27c-a77b7ecce0da.roa (raw, json) Hash identifier: 17vCeyQIRQ30oFZ8tEVAYh7dghTmBarxfU40XO+ucPk= Subject key identifier: CA:C0:2B:6E:11:B6:24:FA:D1:5D:9A:5C:67:65:FC:FA:C1:46:0B:C4 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584B80B762C70305249D92219DC0 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 20177 IP address blocks: 198.248.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:62:c7:03:05:24:9d:92:21:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=4c2ddf4c-1fd4-4f83-8bdd-96548042db46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:a3:b5:08:b8:c7:54:8e:ce:d8:57:e9:ed: 71:b4:17:22:03:ff:80:f7:99:05:93:a9:03:4a:7a: 04:3a:46:c8:ef:59:2b:da:a7:6c:02:42:30:56:70: ac:81:3c:0b:d5:96:55:c5:cf:ec:c8:1b:bc:cd:d4: 16:90:34:d3:8c:7d:e6:39:eb:dc:4d:2f:b9:e4:bf: 50:93:7e:3f:9a:6f:f7:25:88:40:88:da:27:db:ab: 51:5d:5f:a2:7e:4a:c3:d6:e7:fb:ac:be:4a:73:81: 31:cb:31:ef:28:46:0b:1b:6d:5f:f4:c2:ee:f7:de: d7:65:b0:43:7d:77:8b:6c:88:91:56:e3:fa:52:7a: 7b:13:d6:20:d2:89:60:fe:4c:cd:af:68:a4:81:21: 36:63:50:ce:e0:26:f6:5f:3a:07:9b:7a:ee:17:78: 7d:61:e3:f0:24:88:e7:7e:1b:15:aa:c4:68:13:68: 30:66:8e:16:c4:b9:c4:43:4a:fe:20:df:8e:1e:8e: b2:3d:5c:47:87:ac:3b:11:97:81:d9:ef:a6:31:bd: df:37:48:6f:c4:67:77:64:e2:e5:70:0f:2b:af:3b: 41:39:fe:fd:06:c0:c1:a5:fe:f6:9d:aa:ae:9c:13: a0:29:5b:22:28:ba:9a:7c:fc:26:78:83:5d:96:7e: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:2B:6E:11:B6:24:FA:D1:5D:9A:5C:67:65:FC:FA:C1:46:0B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3d:27:6e:38:9a:cd:c9:9d:51:f3:4b:58:c5:6b:c3:4f:46: 5c:7d:d4:d1:ed:eb:e3:39:c9:37:f5:98:e8:a3:cf:7b:3c:b6: c3:dc:29:ae:1b:ca:0c:57:06:9e:eb:5b:7f:b7:ae:1b:eb:ed: ee:98:2f:09:5a:5b:0c:2a:53:de:b3:25:5e:18:d1:e1:ba:e2: e6:4c:81:89:54:37:c6:0b:6d:e1:39:96:37:fc:1c:35:de:8f: 33:a4:66:ba:a4:56:96:4e:cc:de:1d:a8:aa:d9:4c:12:70:d3: 73:75:63:f5:cd:dd:bf:e9:d3:48:cc:eb:ce:91:0d:13:60:11: d3:aa:ca:21:68:92:e1:4e:7d:b5:b3:7d:43:d2:38:4d:64:5d: ce:5c:67:1c:b0:e0:51:dd:38:a1:7b:77:f2:0f:ee:91:96:a6: cb:8a:e7:aa:78:b8:17:1e:94:89:3a:52:f6:9e:ad:f3:07:86: bc:c5:d1:cc:f3:31:b6:74:3f:cb:88:0f:c3:aa:5d:3b:0e:61: 96:fe:a3:3b:87:87:2c:66:9e:4f:b4:ba:a2:2e:db:e6:f8:35: 30:cc:04:b4:f4:60:6d:e5:57:cd:8d:04:a5:a6:04:89:5e:a1: c4:df:64:6a:46:c7:4b:a1:6e:37:7d:02:34:e1:f8:ab:6c:de: 2d:fe:eb:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2LHAwUknZIhncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NGMyZGRmNGMtMWZkNC00ZjgzLThiZGQtOTY1NDgwNDJkYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCajtQi4x1SOzthX6e1xtBciA/+A95kFk6kD SnoEOkbI71kr2qdsAkIwVnCsgTwL1ZZVxc/syBu8zdQWkDTTjH3mOevcTS+55L9Q k34/mm/3JYhAiNon26tRXV+ifkrD1uf7rL5Kc4ExyzHvKEYLG21f9MLu997XZbBD fXeLbIiRVuP6Unp7E9Yg0olg/kzNr2ikgSE2Y1DO4Cb2XzoHm3ruF3h9YePwJIjn fhsVqsRoE2gwZo4WxLnEQ0r+IN+OHo6yPVxHh6w7EZeB2e+mMb3fN0hvxGd3ZOLl cA8rrztBOf79BsDBpf72naqunBOgKVsiKLqafPwmeINdln5SXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrAK24RtiT60V2aXGdl/PrBRgvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYTg2OWQzODgtODM2Ny0z Y2E2LWIyN2MtYTc3YjdlY2NlMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvgHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE9J244ms3JnVHzS1jFa8NPRlx91NHt6+M5yTf1mOijz3s8tsPcKa4b ygxXBp7rW3+3rhvr7e6YLwlaWwwqU96zJV4Y0eG64uZMgYlUN8YLbeE5ljf8HDXe jzOkZrqkVpZOzN4dqKrZTBJw03N1Y/XN3b/p00jM686RDRNgEdOqyiFokuFOfbWz fUPSOE1kXc5cZxyw4FHdOKF7d/IP7pGWpsuK56p4uBcelIk6UvaerfMHhrzF0czz MbZ0P8uID8OqXTsOYZb+ozuHhyxmnk+0uqIu2+b4NTDMBLT0YG3lV82NBKWmBIle ocTfZGpGx0uhbjd9AjTh+Kts3i3+65Y= -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:54 2025 by rpki-client