$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f497681-3b5b-347b-9ba1-d8e6e0ba5e73.roa File: 4f497681-3b5b-347b-9ba1-d8e6e0ba5e73.roa (raw, json) Hash identifier: 7oQlWZMznvigztlHRAnpkbSMGv0Glf+N4EesFc/CzbA= Subject key identifier: D9:EA:23:B8:8D:86:37:5B:7A:61:45:85:A1:5A:88:90:44:64:3C:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD4D8ABA8226312ADE400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f497681-3b5b-347b-9ba1-d8e6e0ba5e73.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396549 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d4:d8:ab:a8:22:63:12:ad:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=c697a9df-73f4-49ba-aafe-d79209354afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:c9:92:99:90:5d:57:e6:7d:00:18:d6:6b: b1:56:bd:aa:ac:44:a0:51:6b:2b:d6:6e:f6:59:a4: c9:49:2a:d2:4b:f3:a3:a9:66:0e:8c:af:48:fa:94: cc:8f:6a:24:ed:60:75:ce:e2:48:02:bd:f5:21:c7: 97:2d:77:27:d5:17:c8:ed:6c:2f:72:e6:d9:df:9a: f6:53:1a:51:72:c4:99:29:2c:77:25:c1:09:57:64: 54:23:f1:1e:a3:8c:03:bf:4e:10:5c:cc:0d:c6:28: f3:1f:f5:8b:f9:93:1e:e7:cf:13:7c:33:db:49:b4: 97:fe:c7:cf:9c:78:81:21:1e:bc:02:95:89:37:81: b2:ee:76:a9:ff:f1:aa:09:cc:bf:b3:bd:19:f2:f3: 0f:c2:5c:a7:00:fb:5b:24:1d:51:2a:b3:7c:ad:94: 3c:38:95:d2:af:6b:93:a6:77:38:83:78:62:17:70: b4:ef:cf:3b:55:8d:76:7a:7e:9f:8f:75:32:0a:a6: f6:91:d4:a5:8a:e0:0e:db:c3:69:83:67:6e:2a:9a: 5c:7c:e6:a7:d3:98:d3:04:86:33:bc:c7:5d:40:48: 2b:94:ee:85:76:e1:06:04:71:c7:38:8b:cf:0a:19: ac:87:24:c2:4b:92:fa:d2:76:56:04:72:de:81:58: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:23:B8:8D:86:37:5B:7A:61:45:85:A1:5A:88:90:44:64:3C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f497681-3b5b-347b-9ba1-d8e6e0ba5e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:dc:96:18:9c:9c:4d:6a:85:a2:ab:3c:40:03:8a:d5:0f:01: d3:8c:62:89:b4:f8:64:29:4c:dd:8a:e3:8c:c1:83:3a:cc:08: a6:fd:a7:f6:18:e4:d1:78:6a:b8:7b:77:e8:54:22:d9:3d:b4: 06:37:ec:52:01:8b:75:f9:f4:b2:e9:34:d1:e0:2f:0b:14:33: 2c:08:0f:44:50:12:92:a4:36:83:04:1c:f5:4c:6e:94:62:34: 2f:66:1c:4a:8f:ed:4e:cd:f3:8a:e7:6a:e3:a9:45:48:db:b2: 92:b4:7b:e2:e4:e0:d3:e0:5b:32:5a:f4:92:39:a4:30:38:35: 99:5a:ef:eb:b2:60:b0:7e:1b:a4:b3:48:93:a1:34:32:13:3b: 60:47:5d:82:25:04:c4:f3:f5:29:ac:57:bc:bb:93:9f:97:51: 94:86:14:95:9b:00:9a:66:9b:c3:4a:0d:83:dd:03:66:4d:a0: 3f:2d:cc:0f:a9:ec:56:44:80:39:09:84:fe:9f:35:cb:87:e3: 36:1d:91:a7:6c:63:56:b2:26:8e:0f:42:9d:14:af:c9:fa:0a: 83:33:69:21:7c:b6:fb:47:12:aa:9a:e8:d9:3d:c7:ec:ec:76: 58:35:1b:62:23:df:09:6c:b0:be:ab:88:85:a2:52:fa:d0:54: 34:eb:73:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNTYq6giYxKt5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk YzY5N2E5ZGYtNzNmNC00OWJhLWFhZmUtZDc5MjA5MzU0YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwTJkpmQXVfmfQAY1muxVr2qrESgUWsr1m72 WaTJSSrSS/OjqWYOjK9I+pTMj2ok7WB1zuJIAr31IceXLXcn1RfI7WwvcubZ35r2 UxpRcsSZKSx3JcEJV2RUI/Eeo4wDv04QXMwNxijzH/WL+ZMe588TfDPbSbSX/sfP nHiBIR68ApWJN4Gy7nap//GqCcy/s70Z8vMPwlynAPtbJB1RKrN8rZQ8OJXSr2uT pnc4g3hiF3C07887VY12en6fj3UyCqb2kdSliuAO28Npg2duKppcfOan05jTBIYz vMddQEgrlO6FduEGBHHHOIvPChmshyTCS5L60nZWBHLegVgi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnqI7iNhjdbemFFhaFaiJBEZDxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY0OTc2ODEtM2I1Yi0z NDdiLTliYTEtZDhlNmUwYmE1ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnclhicnE1qhaKrPEADitUPAdOMYom0+GQpTN2K44zBgzrMCKb9p/YY 5NF4arh7d+hUItk9tAY37FIBi3X59LLpNNHgLwsUMywID0RQEpKkNoMEHPVMbpRi NC9mHEqP7U7N84rnauOpRUjbspK0e+Lk4NPgWzJa9JI5pDA4NZla7+uyYLB+G6Sz SJOhNDITO2BHXYIlBMTz9SmsV7y7k5+XUZSGFJWbAJpmm8NKDYPdA2ZNoD8tzA+p 7FZEgDkJhP6fNcuH4zYdkadsY1ayJo4PQp0Ur8n6CoMzaSF8tvtHEqqa6Nk9x+zs dlg1G2Ij3wlssL6riIWiUvrQVDTrcyE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:40 2025 by rpki-client