$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dbef17c-42d3-3590-9c1e-171b16dad2f8.roa File: 3dbef17c-42d3-3590-9c1e-171b16dad2f8.roa (raw, json) Hash identifier: Cm7xHqShypF7HmU1SS6KOxmpIKXDfcK4E+q45Pt2YEE= Subject key identifier: 4D:3E:91:63:49:30:71:C9:03:33:66:E1:0C:C7:36:5F:A6:B4:8A:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCC533C94D70E0D9CCFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dbef17c-42d3-3590-9c1e-171b16dad2f8.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396597 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cc:53:3c:94:d7:0e:0d:9c:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=03a54ac9-67b4-46b4-b8b4-bd620526934b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:46:46:0a:2b:31:22:8e:07:4c:bf:e8:bc: 21:6a:05:4d:d2:6d:60:11:87:30:b6:dc:07:1d:73: d2:5d:9a:47:0b:db:de:6a:fa:56:b1:96:43:cd:62: 16:70:92:05:78:47:56:fe:66:35:6d:91:29:4c:bc: 67:04:a2:48:fe:13:c5:46:e1:4c:be:f5:19:31:21: 10:c5:62:3e:6f:94:0b:bc:39:77:1d:01:d6:49:95: 2e:74:87:20:2d:62:f9:63:8a:20:78:3f:ee:9d:d9: 1b:1d:e4:5f:03:2b:85:fb:34:7e:1b:fa:55:19:29: ce:33:b0:ad:73:b6:57:b4:7e:a9:08:29:49:7d:41: 7f:ef:2c:f1:0a:ae:fa:29:94:aa:4f:8f:46:af:cc: a6:e9:fa:10:fa:9b:cc:32:9b:e5:b8:dd:4b:bc:79: 93:80:b0:76:1f:bc:f1:0a:20:e8:62:08:c8:bc:36: 63:25:34:f1:35:77:37:9a:e9:51:8a:9b:a1:20:29: b9:af:03:7a:2a:78:06:63:f5:93:07:7d:7c:ef:8f: 84:09:25:a1:13:8a:f9:63:38:b4:cb:0d:4d:01:79: d8:3a:b7:19:06:fa:e5:ee:a8:02:c6:70:c7:ad:f8: c4:5f:85:79:c3:41:87:4f:6e:03:b7:fc:bc:1e:fa: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3E:91:63:49:30:71:C9:03:33:66:E1:0C:C7:36:5F:A6:B4:8A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dbef17c-42d3-3590-9c1e-171b16dad2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6e:d6:f3:df:cf:a6:28:75:32:0a:12:dd:a2:14:a3:b8:87: 5f:c0:e9:3f:c8:18:94:1c:15:cd:3a:73:50:c4:5c:66:fb:df: 76:23:30:a8:c1:8f:9d:8b:20:27:6d:f0:b9:c8:b9:63:15:fd: 67:a7:33:f7:15:00:11:a7:10:c3:34:bb:82:8e:9c:7f:df:93: c6:ac:5d:d4:3a:ad:c8:ca:4f:a3:9c:2e:01:f0:3f:59:74:be: 65:e0:d8:9d:a0:7c:dd:02:f7:14:42:8f:83:76:65:21:18:12: 48:ac:1b:bc:03:08:e5:18:f8:17:22:fd:f1:b1:59:0d:dd:95: cb:d6:47:cf:05:c0:d3:88:46:24:47:e0:a8:02:e7:84:01:91: e6:7b:a8:3e:a9:2c:88:11:b1:5b:64:09:48:f8:fe:eb:ec:c3: cc:24:1e:60:e9:4c:83:bb:69:3d:dc:eb:00:11:0c:36:bd:cb: 6f:1e:c5:10:cc:d9:e8:b8:78:06:38:6f:8b:e8:d2:f4:0d:80: 8e:56:da:f9:86:28:06:93:08:53:1a:81:5e:29:6e:e7:c2:9b: 7a:33:8d:62:1d:d4:2b:f4:36:62:f9:02:0e:7f:72:3f:c1:fe: 45:7a:1d:73:40:60:b8:b4:44:4f:a5:c0:a5:93:9e:9d:aa:a8: 2b:e0:b5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMxTPJTXDg2cz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MDNhNTRhYzktNjdiNC00NmI0LWI4YjQtYmQ2MjA1MjY5MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkixGRgorMSKOB0y/6LwhagVN0m1gEYcwttwH HXPSXZpHC9veavpWsZZDzWIWcJIFeEdW/mY1bZEpTLxnBKJI/hPFRuFMvvUZMSEQ xWI+b5QLvDl3HQHWSZUudIcgLWL5Y4ogeD/undkbHeRfAyuF+zR+G/pVGSnOM7Ct c7ZXtH6pCClJfUF/7yzxCq76KZSqT49Gr8ym6foQ+pvMMpvluN1LvHmTgLB2H7zx CiDoYgjIvDZjJTTxNXc3mulRipuhICm5rwN6KngGY/WTB31874+ECSWhE4r5Yzi0 yw1NAXnYOrcZBvrl7qgCxnDHrfjEX4V5w0GHT24Dt/y8Hvpm9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0+kWNJMHHJAzNm4QzHNl+mtIo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RiZWYxN2MtNDJkMy0z NTkwLTljMWUtMTcxYjE2ZGFkMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxu1vPfz6YodTIKEt2iFKO4h1/A6T/IGJQcFc06c1DEXGb733YjMKjB j52LICdt8LnIuWMV/WenM/cVABGnEMM0u4KOnH/fk8asXdQ6rcjKT6OcLgHwP1l0 vmXg2J2gfN0C9xRCj4N2ZSEYEkisG7wDCOUY+Bci/fGxWQ3dlcvWR88FwNOIRiRH 4KgC54QBkeZ7qD6pLIgRsVtkCUj4/uvsw8wkHmDpTIO7aT3c6wARDDa9y28exRDM 2ei4eAY4b4vo0vQNgI5W2vmGKAaTCFMagV4pbufCm3ozjWId1Cv0NmL5Ag5/cj/B /kV6HXNAYLi0RE+lwKWTnp2qqCvgtY4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:25 2025 by rpki-client