$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa File: d0daa832-6d5a-36d1-bd07-231326754f9e.roa (raw, json) Hash identifier: TUbTPArFApm+MUfftPRI/sOscJwXx3NJJixNbIralr8= Subject key identifier: DC:06:87:0D:D6:11:97:88:18:4A:52:81:F0:9A:95:50:83:F4:2C:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CCAAB522E7B11BD22F280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 36625 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:ca:ab:52:2e:7b:11:bd:22:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=eabab035-9324-48a4-9918-de3959be3469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:f3:ff:0f:b0:a5:b8:1b:e0:4b:49:85:ee: 00:35:53:38:c1:b2:e7:41:78:71:5c:de:c2:20:6a: 8c:b7:23:c9:a5:11:2c:37:06:88:98:c5:ff:bd:fe: b5:ea:61:e2:d4:c3:4b:9a:c9:74:b5:a1:6e:84:9c: 81:db:3b:40:e3:b9:04:32:ac:6a:06:6a:86:01:13: 92:ed:0d:c6:d6:b7:e1:bd:84:06:87:f0:d3:1d:c9: f2:bc:90:32:65:91:19:8d:d5:84:dc:68:e7:58:f9: 22:e0:75:a1:be:e8:93:26:22:63:c1:32:16:90:f0: cf:bd:e1:e6:4c:70:c1:ef:56:e4:ba:90:48:2e:90: b5:d8:a7:10:53:aa:6d:96:36:8d:4c:3e:02:3c:46: b2:49:ca:1d:d3:06:47:d2:dd:dc:69:df:f1:69:18: d9:d6:59:fb:15:21:31:30:69:5c:fa:4f:56:7a:24: 42:6e:2a:02:8f:c2:14:59:69:fa:be:17:cb:5f:35: ef:ae:7a:85:63:4b:5f:d8:20:08:79:aa:87:d4:95: a3:9b:61:3f:89:d5:58:ed:a6:42:7f:78:a9:a5:d1: 4c:05:b6:a0:86:5b:1f:a3:a2:6f:30:fc:71:6d:b0: 11:94:74:e1:c5:fc:8e:68:03:85:2b:df:11:0a:7e: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:06:87:0D:D6:11:97:88:18:4A:52:81:F0:9A:95:50:83:F4:2C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ed:5b:02:8d:be:36:63:a5:67:f1:53:77:c5:c0:c2:fa:de: 36:24:f9:9d:e1:65:31:db:1f:2d:c3:a4:92:cb:40:fc:38:95: 46:1c:44:48:9d:ec:bf:2d:ff:5b:73:18:b1:9c:e8:08:a5:6a: 5d:bc:79:b6:ae:e7:03:25:67:01:bd:75:7f:fc:36:cd:92:0d: ec:29:41:af:ea:3a:da:89:68:1d:78:47:96:52:b8:55:53:55: 6c:ba:f9:b7:b4:15:e2:11:45:fb:41:ad:79:53:8d:63:74:5e: fb:63:39:e0:e2:df:02:39:84:89:46:bd:67:6b:dd:a5:ea:0f: 71:ee:53:94:48:e7:2d:fe:a7:02:33:79:6e:99:4b:1c:37:da: 8b:4f:97:6d:0a:35:3a:fa:3c:14:d5:77:e3:e2:e0:95:60:81: 28:49:5c:53:4e:04:fd:1c:ab:c7:56:03:31:72:bf:fe:50:8e: 1d:de:ec:04:cc:0b:38:29:50:39:44:31:f5:23:9d:bc:9e:16: c4:1e:9b:22:a5:7a:71:5c:a7:2d:b4:6c:af:a0:ed:8b:3d:d3: a5:49:19:0d:0c:5a:ec:8f:f1:ef:8d:9c:e8:e3:6d:7e:1b:0d: 24:ad:8a:ca:64:d5:49:a4:25:17:e1:aa:82:a9:95:2d:de:3a: 32:bd:e6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMqrUi57Eb0i8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWFiYWIwMzUtOTMyNC00OGE0LTk5MTgtZGUzOTU5YmUzNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS7z/w+wpbgb4EtJhe4ANVM4wbLnQXhxXN7C IGqMtyPJpREsNwaImMX/vf616mHi1MNLmsl0taFuhJyB2ztA47kEMqxqBmqGAROS 7Q3G1rfhvYQGh/DTHcnyvJAyZZEZjdWE3GjnWPki4HWhvuiTJiJjwTIWkPDPveHm THDB71bkupBILpC12KcQU6ptljaNTD4CPEayScod0wZH0t3cad/xaRjZ1ln7FSEx MGlc+k9WeiRCbioCj8IUWWn6vhfLXzXvrnqFY0tf2CAIeaqH1JWjm2E/idVY7aZC f3ippdFMBbaghlsfo6JvMPxxbbARlHThxfyOaAOFK98RCn6HNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwGhw3WEZeIGEpSgfCalVCD9CxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBkYWE4MzItNmQ1YS0z NmQxLWJkMDctMjMxMzI2NzU0ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3tWwKNvjZjpWfxU3fFwML63jYk+Z3hZTHbHy3DpJLLQPw4lUYcREid 7L8t/1tzGLGc6Ailal28ebau5wMlZwG9dX/8Ns2SDewpQa/qOtqJaB14R5ZSuFVT VWy6+be0FeIRRftBrXlTjWN0XvtjOeDi3wI5hIlGvWdr3aXqD3HuU5RI5y3+pwIz eW6ZSxw32otPl20KNTr6PBTVd+Pi4JVggShJXFNOBP0cq8dWAzFyv/5Qjh3e7ATM CzgpUDlEMfUjnbyeFsQemyKlenFcpy20bK+g7Ys906VJGQ0MWuyP8e+NnOjjbX4b DSStispk1UmkJRfhqoKplS3eOjK95gY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:28 2025 by rpki-client