$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab004-35fa-3495-960b-0efa6fc01884.roa File: ab8ab004-35fa-3495-960b-0efa6fc01884.roa (raw, json) Hash identifier: EeAn78BHNGTJOk6yfVE97U3aGHNslQE7ua0UgdenyoY= Subject key identifier: CF:DB:93:6E:90:7A:E7:5D:E4:72:6A:2A:B6:D7:E1:C8:21:2E:24:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCA6C723AB2170042C780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab004-35fa-3495-960b-0efa6fc01884.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396565 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:ca:6c:72:3a:b2:17:00:42:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=a1355d51-5de5-4713-b726-3910a72b98c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:4f:8e:18:21:33:e0:71:fb:e7:67:07:d5: 80:a7:fe:a3:4a:e6:2e:a6:02:be:55:e4:ed:14:60: 64:04:5d:37:7f:e0:13:43:99:6b:00:9d:c6:af:cf: d5:96:40:2f:c8:e1:db:fd:d7:a1:9f:36:d8:11:c0: 92:4d:ed:c9:0a:cf:80:43:5d:9f:96:ac:b7:e5:8d: 21:8b:d7:ff:06:9f:dc:4b:5c:91:eb:b8:d5:ff:43: ca:9a:fc:7a:76:51:54:26:f0:f6:b4:59:09:6e:f3: 8d:33:d2:b3:89:e8:66:12:89:a8:03:4d:a0:94:11: 19:3e:3f:eb:40:4e:00:7c:9f:46:bc:87:a0:c1:dd: 6e:92:4d:72:7d:2d:02:39:b4:d4:1d:53:ed:8e:93: 7d:cd:f1:18:bf:22:1b:ba:46:72:be:88:74:f9:f9: 1f:66:7a:b0:aa:4c:f8:c6:01:7f:74:97:86:7e:f4: 4d:2e:07:8a:cc:80:2a:9f:c0:1b:e5:fc:74:9f:a5: 5b:27:d5:91:4d:f1:13:22:f1:63:06:b7:58:63:47: 6f:b9:17:ce:9a:be:9b:0b:eb:37:24:b9:ff:3e:ec: ef:2c:ab:ba:c1:fe:84:31:3f:8d:6e:8d:5a:22:32: c7:82:0c:33:b7:a4:b1:da:df:1a:f7:a5:ff:09:dd: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DB:93:6E:90:7A:E7:5D:E4:72:6A:2A:B6:D7:E1:C8:21:2E:24:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab8ab004-35fa-3495-960b-0efa6fc01884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:40:6a:c2:2d:bb:bb:aa:5e:8f:31:58:28:bd:d6:62:4d:65: 30:0c:60:40:66:e2:52:3d:d8:6b:2a:8f:b0:1e:32:c1:b7:0f: 65:2d:54:5c:78:69:d7:fb:3f:34:97:61:28:39:88:a6:80:2c: ce:28:78:60:57:d2:e0:ea:51:22:af:82:d2:15:89:00:40:f9: 0f:86:4c:d5:04:ad:8d:b6:f8:7e:86:32:ca:76:84:ea:cc:e4: eb:a4:8e:12:4d:3d:84:64:e3:df:dc:af:63:cc:af:fd:44:34: 2d:15:9e:d3:9c:7f:48:e0:df:d6:1f:88:12:86:16:34:f6:02: 0d:a2:5a:9f:b1:2e:23:09:80:2c:ae:6f:2e:6b:7a:13:47:e2: 86:a9:40:08:5f:c1:ac:fa:14:85:79:6c:2f:de:2e:8a:ed:9c: 19:73:75:72:54:97:17:25:b8:2d:65:72:25:80:0b:1e:25:25: fd:54:1a:96:2f:ce:5b:14:7b:f9:a6:b3:5c:46:da:0e:6c:33: d7:99:06:b8:55:61:86:46:20:fb:1d:25:31:fb:88:dc:d1:64: 9f:41:00:e6:63:a6:97:38:17:71:67:70:55:7b:da:0f:b1:ca: fb:e7:cf:5e:c0:af:1f:7f:c1:4b:dd:28:60:ca:19:78:a2:39: 98:20:1d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMpscjqyFwBCx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk YTEzNTVkNTEtNWRlNS00NzEzLWI3MjYtMzkxMGE3MmI5OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7xPjhghM+Bx++dnB9WAp/6jSuYupgK+VeTt FGBkBF03f+ATQ5lrAJ3Gr8/VlkAvyOHb/dehnzbYEcCSTe3JCs+AQ12flqy35Y0h i9f/Bp/cS1yR67jV/0PKmvx6dlFUJvD2tFkJbvONM9KziehmEomoA02glBEZPj/r QE4AfJ9GvIegwd1ukk1yfS0CObTUHVPtjpN9zfEYvyIbukZyvoh0+fkfZnqwqkz4 xgF/dJeGfvRNLgeKzIAqn8Ab5fx0n6VbJ9WRTfETIvFjBrdYY0dvuRfOmr6bC+s3 JLn/PuzvLKu6wf6EMT+Nbo1aIjLHggwzt6Sx2t8a96X/Cd1TxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/bk26Qeudd5HJqKrbX4cghLiRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI4YWIwMDQtMzVmYS0z NDk1LTk2MGItMGVmYTZmYzAxODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9AasItu7uqXo8xWCi91mJNZTAMYEBm4lI92Gsqj7AeMsG3D2UtVFx4 adf7PzSXYSg5iKaALM4oeGBX0uDqUSKvgtIViQBA+Q+GTNUErY22+H6GMsp2hOrM 5OukjhJNPYRk49/cr2PMr/1ENC0VntOcf0jg39YfiBKGFjT2Ag2iWp+xLiMJgCyu by5rehNH4oapQAhfwaz6FIV5bC/eLortnBlzdXJUlxcluC1lciWACx4lJf1UGpYv zlsUe/mms1xG2g5sM9eZBrhVYYZGIPsdJTH7iNzRZJ9BAOZjppc4F3FncFV72g+x yvvnz17Arx9/wUvdKGDKGXiiOZggHV0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:17 2025 by rpki-client