$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2484f9c0-5950-32ad-a09b-5251314bde2d.roa File: 2484f9c0-5950-32ad-a09b-5251314bde2d.roa (raw, json) Hash identifier: qq9THQX8RJ2MkBCShr0Q89Mremc/4At30x/32WXZ4Hs= Subject key identifier: E9:F3:3C:9B:17:6E:96:50:45:7D:15:A7:5B:8E:1E:5A:EF:23:2D:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCD5CE1558A15FBED9600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2484f9c0-5950-32ad-a09b-5251314bde2d.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 36629 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cd:5c:e1:55:8a:15:fb:ed:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=2a82de1d-0508-4d54-99b0-86629dae0602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:5b:8a:d4:1e:8f:56:a0:8a:5c:6f:6f:af: 91:65:5d:95:6e:e0:20:b1:8c:c7:d7:25:31:7c:e5: 25:5b:42:35:66:08:e5:5d:6c:b6:06:5f:09:b5:5b: b4:10:04:6a:89:81:f5:ac:7b:34:bc:87:11:26:09: 33:52:e1:d3:1b:db:aa:64:cd:b3:7a:79:d2:a0:43: 5b:a4:20:24:bc:1f:f7:94:95:1f:d1:3f:d8:bc:ed: 22:79:06:f5:5c:a4:20:4c:0b:87:90:e7:f8:e6:29: 1b:c5:c1:17:81:23:8a:5c:bb:7e:84:75:d9:4a:12: 80:e9:76:b5:cc:17:78:bf:e5:34:9d:e7:ba:eb:3a: 09:d1:83:eb:59:8e:61:30:c4:b2:ab:b3:c7:a0:7f: 06:2a:f7:68:15:12:76:c5:74:35:a2:99:a8:26:6a: 41:21:e0:6a:5c:39:e6:81:74:ad:84:9d:c4:93:15: 04:47:9e:7b:84:17:29:c4:3f:b1:8e:67:53:ce:11: 61:e8:bd:61:c2:d9:e3:12:29:a2:6f:b2:3e:ed:3b: b6:b0:c8:2c:0b:15:da:d2:b4:c7:e9:a9:54:4a:58: 21:60:02:ae:e0:9c:20:fa:aa:b3:03:de:e6:a0:26: 43:09:67:ee:2f:26:bc:84:03:43:10:8e:1f:61:60: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:3C:9B:17:6E:96:50:45:7D:15:A7:5B:8E:1E:5A:EF:23:2D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2484f9c0-5950-32ad-a09b-5251314bde2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:af:6e:41:52:25:31:29:fc:7d:e6:ee:3a:43:55:94:b3:44: 0a:9f:1d:a0:66:7f:5e:29:d3:80:96:76:f8:58:bf:4b:f6:24: 7e:29:f3:89:81:e6:7c:3f:96:cd:f8:51:ee:ac:52:26:69:f5: 96:8b:67:34:02:b3:0c:09:36:b8:78:5a:1c:d8:f2:d4:0b:c6: 39:16:ec:29:8f:8a:ff:5f:71:70:ed:21:d3:79:ba:5c:34:8d: 59:f1:9b:f3:e8:66:9b:d8:ec:2c:01:d6:71:bf:8e:94:0e:0a: 5d:29:c1:1a:10:fe:84:21:81:9c:f9:1e:e2:dd:fe:e9:9b:0c: 16:fa:08:fa:db:be:c5:95:0b:a3:aa:6b:e0:13:fe:51:41:5e: 4f:e1:a7:1d:68:3b:44:de:37:28:8f:35:89:88:63:e7:79:6d: 69:f0:14:bb:10:9c:52:07:9e:45:c8:b6:1c:3c:f5:68:ad:4f: ee:1a:87:8c:be:34:15:32:9e:df:9e:7c:77:3e:f7:4c:b4:53: 2b:6e:3d:87:3c:e0:67:17:7e:04:ca:02:bd:a9:b7:3d:96:32: 0d:80:fb:60:25:87:d1:36:3f:9f:89:d4:1b:34:f0:d0:15:14: 6e:ed:ff:83:dd:ff:76:77:2b:73:99:27:e6:07:a2:6c:10:0a: c7:1c:9c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfM1c4VWKFfvtlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MmE4MmRlMWQtMDUwOC00ZDU0LTk5YjAtODY2MjlkYWUwNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9bitQej1agilxvb6+RZV2VbuAgsYzH1yUx fOUlW0I1ZgjlXWy2Bl8JtVu0EARqiYH1rHs0vIcRJgkzUuHTG9uqZM2zennSoENb pCAkvB/3lJUf0T/YvO0ieQb1XKQgTAuHkOf45ikbxcEXgSOKXLt+hHXZShKA6Xa1 zBd4v+U0nee66zoJ0YPrWY5hMMSyq7PHoH8GKvdoFRJ2xXQ1opmoJmpBIeBqXDnm gXSthJ3EkxUER557hBcpxD+xjmdTzhFh6L1hwtnjEimib7I+7Tu2sMgsCxXa0rTH 6alUSlghYAKu4Jwg+qqzA97moCZDCWfuLya8hANDEI4fYWARcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnzPJsXbpZQRX0Vp1uOHlrvIy31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQ4NGY5YzAtNTk1MC0z MmFkLWEwOWItNTI1MTMxNGJkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKvbkFSJTEp/H3m7jpDVZSzRAqfHaBmf14p04CWdvhYv0v2JH4p84mB 5nw/ls34Ue6sUiZp9ZaLZzQCswwJNrh4WhzY8tQLxjkW7CmPiv9fcXDtIdN5ulw0 jVnxm/PoZpvY7CwB1nG/jpQOCl0pwRoQ/oQhgZz5HuLd/umbDBb6CPrbvsWVC6Oq a+AT/lFBXk/hpx1oO0TeNyiPNYmIY+d5bWnwFLsQnFIHnkXIthw89WitT+4ah4y+ NBUynt+efHc+90y0UytuPYc84GcXfgTKAr2ptz2WMg2A+2Alh9E2P5+J1Bs08NAV FG7t/4Pd/3Z3K3OZJ+YHomwQCsccnNA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:43 2025 by rpki-client