$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa File: 328e9cd1-913a-34b6-8a22-f43efa6a3758.roa (raw, json) Hash identifier: DUl41HfivvHu59Pi/V5Di5yD5re8Jou3TaLyWi9+ybU= Subject key identifier: EA:72:41:32:33:E6:1C:54:D8:F5:00:89:A3:37:8D:1A:C2:E4:7D:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD2E33463DCD50EDFAFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396554 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d2:e3:34:63:dc:d5:0e:df:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=0db0fd9e-869b-499d-ae4b-03d83c461dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:b6:7d:a5:77:1e:08:2b:16:da:64:23:23: d0:97:a6:06:08:2d:17:eb:53:cc:bc:eb:7d:48:70: 92:5d:5e:18:73:63:2b:a3:66:90:db:ab:e7:bf:58: b6:03:d4:46:b8:ab:2b:57:61:c8:1e:5a:b7:f7:7f: b4:dd:c7:34:7e:39:02:3b:c5:5a:31:9d:cc:22:ca: 54:61:86:36:2e:67:47:b7:e6:16:f4:4b:f6:44:99: 95:cf:a3:c4:ce:02:6f:a3:59:49:c5:e5:49:3b:44: 1c:e9:f6:51:83:38:b0:9e:90:11:3d:c3:f5:d1:ff: 27:0b:59:90:e2:3f:56:7e:2e:36:5b:65:db:a9:d3: 9a:ba:e9:ff:38:45:8a:b9:71:9c:4a:f7:d9:a7:2a: 4d:97:15:29:38:da:95:fa:6d:79:d1:5d:89:48:69: 49:1a:a7:42:78:fc:e1:9c:8a:b5:d2:57:19:01:14: c9:0c:f2:ad:e6:75:08:74:af:c4:20:26:a4:17:98: 93:d0:43:8d:47:e5:a6:3f:d6:42:65:7c:ee:71:c5: 35:a7:4b:cc:ce:78:9b:9e:4e:61:1b:2b:4e:cd:ca: 5b:f8:42:8f:39:cf:cb:44:2f:c2:1f:3f:45:41:6d: bc:31:f2:b4:70:09:41:f1:7f:8f:37:93:dc:03:8d: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:41:32:33:E6:1C:54:D8:F5:00:89:A3:37:8D:1A:C2:E4:7D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2b:c1:3d:a2:b8:48:39:db:11:d1:78:f7:46:8c:b1:9b:23: d0:9a:3f:51:d4:b1:d9:fa:df:c1:5f:fa:42:d8:45:76:33:58: 1c:1b:7f:0f:34:d2:0d:9d:12:a3:3f:ba:6e:ed:c3:0f:9d:99: 96:85:25:36:24:96:3f:9d:ba:6a:37:75:3e:ed:5d:57:1b:b5: a8:a3:55:6d:16:25:65:4e:81:dd:71:4a:03:18:de:52:a9:60: bd:6f:08:8c:4c:1b:46:72:24:37:03:cb:4a:ed:2f:8e:39:41: f2:90:b6:8a:5c:8d:50:2d:97:b3:8f:2e:1b:30:6e:9f:42:08: 05:a8:ac:f4:b3:c7:4a:b0:0a:42:7a:d9:86:4b:53:c5:f9:d5: 2c:a2:2a:d5:41:41:62:7b:6b:09:b9:8c:62:4a:c9:25:ec:b4: ba:32:03:fd:82:f3:6b:ab:d7:2f:ea:15:2c:93:22:d3:7f:18: e7:bb:02:29:f1:bd:25:b4:f9:6e:90:ab:e2:12:b2:e1:9b:32: 36:f0:f5:33:fc:39:53:74:e8:c5:33:de:b4:eb:0a:c0:66:c6: 19:ee:55:99:be:b9:8b:63:f5:43:fc:da:5d:c0:ad:6a:1f:d9: 17:43:42:86:4c:5e:07:e0:a8:0b:38:45:ca:d1:2d:18:3f:4e: f3:10:9e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNLjNGPc1Q7fr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MGRiMGZkOWUtODY5Yi00OTlkLWFlNGItMDNkODNjNDYxZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5e2faV3HggrFtpkIyPQl6YGCC0X61PMvOt9 SHCSXV4Yc2Mro2aQ26vnv1i2A9RGuKsrV2HIHlq393+03cc0fjkCO8VaMZ3MIspU YYY2LmdHt+YW9Ev2RJmVz6PEzgJvo1lJxeVJO0Qc6fZRgziwnpARPcP10f8nC1mQ 4j9Wfi42W2XbqdOauun/OEWKuXGcSvfZpypNlxUpONqV+m150V2JSGlJGqdCePzh nIq10lcZARTJDPKt5nUIdK/EICakF5iT0EONR+WmP9ZCZXzuccU1p0vMznibnk5h GytOzcpb+EKPOc/LRC/CHz9FQW28MfK0cAlB8X+PN5PcA43FpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpyQTIz5hxU2PUAiaM3jRrC5H0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI4ZTljZDEtOTEzYS0z NGI2LThhMjItZjQzZWZhNmEzNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMrwT2iuEg52xHRePdGjLGbI9CaP1HUsdn638Ff+kLYRXYzWBwbfw80 0g2dEqM/um7tww+dmZaFJTYklj+dumo3dT7tXVcbtaijVW0WJWVOgd1xSgMY3lKp YL1vCIxMG0ZyJDcDy0rtL445QfKQtopcjVAtl7OPLhswbp9CCAWorPSzx0qwCkJ6 2YZLU8X51SyiKtVBQWJ7awm5jGJKySXstLoyA/2C82ur1y/qFSyTItN/GOe7Ainx vSW0+W6Qq+ISsuGbMjbw9TP8OVN06MUz3rTrCsBmxhnuVZm+uYtj9UP82l3ArWof 2RdDQoZMXgfgqAs4RcrRLRg/TvMQnhE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:11 2025 by rpki-client