$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa File: 762b713f-cd50-3156-9140-2a8d57854133.roa (raw, json) Hash identifier: 0E6BKmqghEhCtY7MKlpdwuCmDKLCHbS+UXyb9tGxkjY= Subject key identifier: DB:00:95:8E:1D:4A:E4:DA:E2:9E:09:A8:46:35:6E:90:31:A0:D8:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCDCDA2929E72A8A05E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 36621 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:cd:cd:a2:92:9e:72:a8:a0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=2c17d42f-b553-49cc-8f60-875b11129c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:74:a1:a8:b1:8e:25:79:9a:06:4b:73:be:58: aa:7c:6e:6c:1a:19:2e:9d:7f:e7:4e:f6:a6:ac:44: 8c:b4:dc:c7:24:d1:8f:00:51:21:4f:b6:8b:d2:60: 87:42:37:07:54:b7:d3:80:be:3a:79:a4:2f:07:5c: ef:5b:bb:13:98:41:c4:65:17:c5:34:68:7b:7a:df: 5e:b0:46:89:fc:b0:e6:27:2b:0e:b2:16:c2:3a:45: 5e:2a:b4:3e:43:3f:cb:77:24:1b:5b:c3:56:95:c2: de:19:63:9f:a6:13:12:92:05:db:54:a7:d5:eb:0a: e2:78:a0:93:f0:d6:ae:d0:32:7b:41:77:31:98:e5: 86:94:be:f4:a9:c9:1b:9a:01:ff:75:ea:b5:02:08: 46:5d:b7:90:d7:44:cf:59:85:f7:8e:3e:2c:ef:ed: 9d:9a:28:79:a9:22:40:c1:9f:69:cf:95:84:3e:0b: db:1c:4a:ac:d4:c0:95:51:98:13:ca:4e:a4:b0:1f: 93:1f:90:0f:41:5c:d2:71:69:ca:dc:97:17:be:f1: bc:e9:92:da:ae:8f:cb:41:d0:38:43:3e:67:1c:0f: 79:5e:ab:72:ed:64:05:bd:af:85:36:f5:34:78:6e: 94:88:31:1b:fb:9a:c6:cf:72:45:f5:f0:9e:ed:51: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:95:8E:1D:4A:E4:DA:E2:9E:09:A8:46:35:6E:90:31:A0:D8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bf:bb:1a:d6:8b:07:f0:8e:08:c2:87:f2:56:50:50:60:0a: b8:ee:96:e1:9c:e6:2a:b3:65:7e:a1:c3:5f:82:fd:11:d3:34: dc:9e:86:34:d0:88:1b:0f:be:4e:0a:eb:52:f4:e7:4b:4a:cf: c7:5c:c2:c6:13:2e:6c:11:da:b8:31:ab:a6:95:a4:44:78:e0: 5e:bc:0d:b1:a7:d0:42:21:f3:51:75:f0:70:f9:32:4e:70:aa: 56:31:e8:5f:26:db:04:b2:f0:ac:46:84:5e:89:1c:38:b4:a8: c1:77:aa:c7:e5:31:06:76:e5:b0:fb:e0:6c:a7:54:b5:d2:6f: d7:04:02:89:7b:a9:d6:83:4c:a3:12:fe:86:5c:30:c5:17:49: a8:60:50:66:14:4f:da:12:b4:db:c1:db:e6:b0:f5:6d:74:06: 35:4b:ba:16:d9:9d:9b:3b:81:43:b4:c6:b2:2d:cd:c6:fc:b7: 78:cf:35:63:1b:f8:44:5b:f2:64:2e:70:f9:32:fa:bf:81:39: 96:83:a1:26:f1:10:57:d5:1f:a7:f9:0b:3f:6a:0c:b4:6c:2a: da:ca:32:1d:c2:2a:11:5e:19:bd:0a:dc:d0:95:f7:76:78:f4: 85:8d:32:7f:6d:9d:6d:d1:09:a0:e1:0a:37:a9:f3:93:10:f4: 45:06:93:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfM3NopKecqigXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MmMxN2Q0MmYtYjU1My00OWNjLThmNjAtODc1YjExMTI5YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXShqLGOJXmaBktzvliqfG5sGhkunX/nTvam rESMtNzHJNGPAFEhT7aL0mCHQjcHVLfTgL46eaQvB1zvW7sTmEHEZRfFNGh7et9e sEaJ/LDmJysOshbCOkVeKrQ+Qz/LdyQbW8NWlcLeGWOfphMSkgXbVKfV6wrieKCT 8Nau0DJ7QXcxmOWGlL70qckbmgH/deq1AghGXbeQ10TPWYX3jj4s7+2dmih5qSJA wZ9pz5WEPgvbHEqs1MCVUZgTyk6ksB+TH5APQVzScWnK3JcXvvG86ZLaro/LQdA4 Qz5nHA95Xqty7WQFva+FNvU0eG6UiDEb+5rGz3JF9fCe7VFu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsAlY4dSuTa4p4JqEY1bpAxoNj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzYyYjcxM2YtY2Q1MC0z MTU2LTkxNDAtMmE4ZDU3ODU0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+/uxrWiwfwjgjCh/JWUFBgCrjuluGc5iqzZX6hw1+C/RHTNNyehjTQ iBsPvk4K61L050tKz8dcwsYTLmwR2rgxq6aVpER44F68DbGn0EIh81F18HD5Mk5w qlYx6F8m2wSy8KxGhF6JHDi0qMF3qsflMQZ25bD74GynVLXSb9cEAol7qdaDTKMS /oZcMMUXSahgUGYUT9oStNvB2+aw9W10BjVLuhbZnZs7gUO0xrItzcb8t3jPNWMb +ERb8mQucPky+r+BOZaDoSbxEFfVH6f5Cz9qDLRsKtrKMh3CKhFeGb0K3NCV93Z4 9IWNMn9tnW3RCaDhCjep85MQ9EUGk8I= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:35 2025 by rpki-client