$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5439dfbd-78b1-37d0-9af1-8970528f100c.roa File: 5439dfbd-78b1-37d0-9af1-8970528f100c.roa (raw, json) Hash identifier: l626XcjWIB6rJGYhAIxQvlOfoEBLIfULxlWVUjbWEtM= Subject key identifier: 6A:32:39:6A:48:14:9E:3C:DE:FE:81:0C:7C:42:7A:3F:A7:52:5C:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCC81536F6ED4C26C9600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5439dfbd-78b1-37d0-9af1-8970528f100c.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 397197 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cc:81:53:6f:6e:d4:c2:6c:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=ee8d30e9-5449-47bf-8637-1305d60446ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:97:26:9f:35:3c:c7:f2:e0:4b:31:60:90: 93:1e:fc:17:7d:ff:8f:92:c9:7e:7e:9f:ec:5f:b5: 9f:f8:2c:35:cc:3d:6e:1a:d4:a4:41:fa:31:25:43: 44:11:48:97:e1:f4:4a:aa:e3:7a:f6:a4:ec:08:7d: 59:ed:d9:c7:72:e7:cb:0d:ba:a3:fe:1b:0b:84:f7: 61:ae:4c:d1:a8:e5:0f:36:aa:b4:7b:db:d2:74:4f: 5c:18:8f:b2:cc:e1:af:17:eb:68:73:00:cd:0f:7b: a6:cf:e4:56:a2:d8:47:55:a4:80:e2:b6:c8:90:55: 75:90:0d:1b:9e:e2:f4:ab:7b:17:57:aa:f6:09:be: 75:06:0f:ed:13:b6:09:44:c0:75:8a:93:84:d1:8c: cb:08:58:99:db:f3:0e:b4:64:54:99:5f:76:9d:b8: ef:55:93:37:2c:84:7e:47:71:e8:ea:48:1d:f8:e5: 63:57:68:5c:ad:6d:00:3b:74:09:80:4c:6f:86:b9: 35:e3:08:25:a6:cb:e0:3b:e3:b8:71:c1:42:bb:d9: 76:77:1c:14:5c:84:90:60:6b:6d:64:d4:b6:0c:10: 0d:8e:f6:bd:e8:ac:da:1e:19:de:65:a3:f5:14:dc: 58:51:78:56:25:92:22:d3:42:28:53:8f:09:ec:88: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:32:39:6A:48:14:9E:3C:DE:FE:81:0C:7C:42:7A:3F:A7:52:5C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5439dfbd-78b1-37d0-9af1-8970528f100c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d5:c3:37:02:df:30:52:36:1c:06:a2:f1:da:08:06:a9:47: 33:63:df:9a:fe:16:1d:2b:67:e1:0a:d7:cf:85:28:1f:34:e9: 53:88:4f:3f:4c:69:32:b8:a6:d9:b0:0c:09:cd:b0:20:e4:91: a7:44:ac:7e:9f:80:de:08:06:1c:3e:d3:3f:af:9a:1c:3d:bc: a4:6f:02:0f:e5:42:cf:fe:bb:06:0c:c1:5a:c4:9b:4a:d9:5f: ab:68:fa:e4:1d:24:74:d3:ba:e7:52:98:08:ae:b8:16:4a:5f: 71:8b:81:d7:ee:40:1f:4e:2b:f2:09:41:db:f9:ce:b6:b7:0e: b1:6f:e1:13:2e:98:cb:f3:ef:53:9b:ab:eb:e2:81:63:15:f3: db:f9:95:ef:77:71:93:b7:cc:f0:7e:ed:f1:f1:89:ca:cb:73: a5:c0:32:50:ae:b6:61:26:a2:2f:bf:b8:ce:36:0a:d1:b9:01: 14:9b:23:b3:8f:ba:d1:51:03:89:4c:60:9c:59:89:c7:14:bf: 88:df:18:06:d8:83:ba:30:bf:97:a3:c1:4f:77:97:09:23:51: 03:80:63:ad:66:15:07:f8:51:30:29:b7:37:28:ff:cc:aa:66: ae:db:77:ee:1a:cf:1e:27:8c:8d:f2:64:00:05:10:92:ae:dc: 89:3e:3b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMyBU29u1MJslgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWU4ZDMwZTktNTQ0OS00N2JmLTg2MzctMTMwNWQ2MDQ0NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir2XJp81PMfy4EsxYJCTHvwXff+Pksl+fp/s X7Wf+Cw1zD1uGtSkQfoxJUNEEUiX4fRKquN69qTsCH1Z7dnHcufLDbqj/hsLhPdh rkzRqOUPNqq0e9vSdE9cGI+yzOGvF+tocwDND3umz+RWothHVaSA4rbIkFV1kA0b nuL0q3sXV6r2Cb51Bg/tE7YJRMB1ipOE0YzLCFiZ2/MOtGRUmV92nbjvVZM3LIR+ R3Ho6kgd+OVjV2hcrW0AO3QJgExvhrk14wglpsvgO+O4ccFCu9l2dxwUXISQYGtt ZNS2DBANjva96KzaHhneZaP1FNxYUXhWJZIi00IoU48J7Ii6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoyOWpIFJ483v6BDHxCej+nUlzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTQzOWRmYmQtNzhiMS0z N2QwLTlhZjEtODk3MDUyOGYxMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXVwzcC3zBSNhwGovHaCAapRzNj35r+Fh0rZ+EK18+FKB806VOITz9M aTK4ptmwDAnNsCDkkadErH6fgN4IBhw+0z+vmhw9vKRvAg/lQs/+uwYMwVrEm0rZ X6to+uQdJHTTuudSmAiuuBZKX3GLgdfuQB9OK/IJQdv5zra3DrFv4RMumMvz71Ob q+vigWMV89v5le93cZO3zPB+7fHxicrLc6XAMlCutmEmoi+/uM42CtG5ARSbI7OP utFRA4lMYJxZiccUv4jfGAbYg7owv5ejwU93lwkjUQOAY61mFQf4UTAptzco/8yq Zq7bd+4azx4njI3yZAAFEJKu3Ik+O3g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:12 2025 by rpki-client