$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d94befaa-73ca-30ae-a0b1-af5657949570.roa File: d94befaa-73ca-30ae-a0b1-af5657949570.roa (raw, json) Hash identifier: /ylWoI3VX1ee10F7Ra8idy28OPcBCYzNVwP/wb5hIe8= Subject key identifier: 3B:A5:37:71:AF:CE:67:60:CA:0E:84:FA:A7:E2:63:41:5A:23:4B:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD21BB4CF97C11B77F860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d94befaa-73ca-30ae-a0b1-af5657949570.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396613 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d2:1b:b4:cf:97:c1:1b:77:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=60a62a50-7518-4d65-b48a-fd4e7d45beb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:7b:30:81:36:da:9f:8e:cf:d4:b4:83:72: 32:b0:ac:ce:98:b4:c3:69:8e:a7:fc:06:32:c6:29: e5:79:d2:f5:83:97:7a:46:5a:45:08:8e:07:5b:4e: 7c:84:87:7f:84:83:87:ed:ea:03:74:fe:70:65:08: c3:55:55:87:55:74:06:42:74:7b:f8:83:e5:16:4c: 51:c6:4e:e0:a9:11:7c:82:3c:b7:87:23:be:ba:fb: e8:c6:e5:a2:2f:46:b9:1d:ce:11:f7:b1:03:3f:26: ce:62:53:34:00:6a:07:84:fd:46:c0:9a:ad:ff:09: 80:16:b3:34:d6:4b:e0:e2:52:08:b3:8f:b1:0d:b1: d7:9f:81:77:d6:0a:25:d0:fa:00:9e:1d:5c:e3:63: a8:00:14:c5:02:f8:70:3f:72:24:0e:c3:fc:55:d7: 8c:d3:c1:c7:14:c2:aa:82:80:a0:ae:e1:1f:58:dd: e6:cb:8f:5c:15:cb:3b:f5:85:c1:8f:77:58:9a:e5: d2:4a:86:5f:d8:30:38:df:2b:b3:18:70:72:34:1b: ad:ab:2f:a8:38:b2:48:5f:b3:fc:e1:72:a8:e9:f8: e6:5c:26:5d:19:67:e0:4e:ba:28:1a:c3:32:1c:c3: 5e:9a:e5:95:48:08:99:ef:a1:15:25:6f:4a:c9:1b: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A5:37:71:AF:CE:67:60:CA:0E:84:FA:A7:E2:63:41:5A:23:4B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d94befaa-73ca-30ae-a0b1-af5657949570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4b:dc:a1:08:9a:d8:8c:2a:fd:6a:4b:c7:c9:4f:bb:07:45: 55:f9:32:ad:82:81:95:99:87:0f:85:30:14:dd:52:ca:a0:d2: e9:a9:22:f7:16:7f:c1:fa:f8:60:f1:87:62:de:bb:9a:86:62: 16:33:6d:c3:73:b1:ee:e2:15:e3:ae:4e:23:18:4e:ae:82:11: e2:bd:5e:5a:5f:76:cf:94:63:c6:b4:7f:e5:12:4a:98:69:22: 80:51:ee:97:d3:37:92:75:c5:ca:fd:b3:84:5e:d2:e3:32:ea: 56:e6:86:3f:b8:8d:ce:24:19:a3:bf:66:70:39:e8:67:95:3b: 0c:33:e8:d7:d1:17:a5:4a:02:dd:8a:2e:c0:c9:0a:9f:e1:f7: d8:2c:9a:78:e5:bb:6e:9b:c2:ed:e8:f2:09:0a:26:aa:f4:d8: d9:e9:ec:dc:a2:04:64:a8:33:91:34:5b:71:7d:25:a6:d7:fb: 1b:ef:4f:50:2c:01:97:d2:48:61:e4:f0:dc:f0:5d:87:3b:8e: cb:18:3a:d6:47:39:de:0a:45:b2:09:26:aa:81:86:45:ce:67: d6:4a:e6:21:1f:7a:c6:d2:4b:70:4a:73:f4:70:2e:1e:15:69: 63:ac:90:e5:aa:e2:20:6b:dc:43:b0:82:d9:41:49:41:cd:bf: da:bc:73:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNIbtM+XwRt3+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NjBhNjJhNTAtNzUxOC00ZDY1LWI0OGEtZmQ0ZTdkNDViZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzp7MIE22p+Oz9S0g3IysKzOmLTDaY6n/AYy xinledL1g5d6RlpFCI4HW058hId/hIOH7eoDdP5wZQjDVVWHVXQGQnR7+IPlFkxR xk7gqRF8gjy3hyO+uvvoxuWiL0a5Hc4R97EDPybOYlM0AGoHhP1GwJqt/wmAFrM0 1kvg4lIIs4+xDbHXn4F31gol0PoAnh1c42OoABTFAvhwP3IkDsP8VdeM08HHFMKq goCgruEfWN3my49cFcs79YXBj3dYmuXSSoZf2DA43yuzGHByNButqy+oOLJIX7P8 4XKo6fjmXCZdGWfgTrooGsMyHMNemuWVSAiZ76EVJW9KyRuPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDulN3Gvzmdgyg6E+qfiY0FaI0sCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk0YmVmYWEtNzNjYS0z MGFlLWEwYjEtYWY1NjU3OTQ5NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFL3KEImtiMKv1qS8fJT7sHRVX5Mq2CgZWZhw+FMBTdUsqg0umpIvcW f8H6+GDxh2Leu5qGYhYzbcNzse7iFeOuTiMYTq6CEeK9Xlpfds+UY8a0f+USSphp IoBR7pfTN5J1xcr9s4Re0uMy6lbmhj+4jc4kGaO/ZnA56GeVOwwz6NfRF6VKAt2K LsDJCp/h99gsmnjlu26bwu3o8gkKJqr02Nnp7NyiBGSoM5E0W3F9JabX+xvvT1As AZfSSGHk8NzwXYc7jssYOtZHOd4KRbIJJqqBhkXOZ9ZK5iEfesbSS3BKc/RwLh4V aWOskOWq4iBr3EOwgtlBSUHNv9q8czQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:18 2025 by rpki-client