$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa File: e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa (raw, json) Hash identifier: sWiglnrD7SqglCMaG8qVi8+//j7DLD3vVwzNNU1DGcA= Subject key identifier: 7B:D7:78:9A:8A:5D:86:C5:26:4F:3E:E7:FA:90:5E:93:DE:CD:09:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD283CE51F950EACF3180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396615 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d2:83:ce:51:f9:50:ea:cf:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=cdc024e0-833f-4b3f-893a-a724fd0f9d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:02:df:fd:5a:41:98:84:70:fd:1f:58:3d: 99:9b:ce:b5:e9:ae:ec:6c:00:bf:67:e7:39:c4:c0: 1a:18:8f:7d:68:a1:4e:37:c6:e4:93:21:d9:3a:8b: 47:90:56:92:b9:0d:8f:50:d5:ae:1c:1b:76:cb:9b: 8b:ff:b0:e6:5a:3d:fd:6a:44:fc:09:68:83:3b:ff: 67:28:0a:60:ef:c7:08:4b:7b:1f:f9:b5:f9:b3:e8: 75:f2:db:54:ff:13:1b:17:a1:b4:b1:1a:5e:30:8d: f0:d8:eb:b1:65:a4:ed:96:d2:ba:44:c9:0f:a5:38: 05:26:06:0b:e4:43:e4:d1:29:c6:24:5d:e9:82:de: 8f:93:ca:58:d6:0c:f6:74:1f:1f:e3:d4:96:b0:f8: 2f:89:9b:64:0c:fc:7f:72:f9:b4:85:a8:84:83:c0: 85:d5:18:21:04:13:b0:8e:f7:79:2d:25:f3:10:1f: c6:91:a2:b6:95:af:f7:da:32:4e:8c:d1:f8:82:9e: 47:bc:97:60:88:76:52:d8:4c:2a:8b:24:40:46:8d: fa:07:d2:6d:34:11:89:69:53:80:6f:cd:04:c9:56: 0e:27:3d:ae:48:f5:5c:6f:46:4a:0d:94:49:3d:ce: 1c:4a:7c:5c:db:59:e8:e2:3d:f3:3d:21:45:3a:41: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:78:9A:8A:5D:86:C5:26:4F:3E:E7:FA:90:5E:93:DE:CD:09:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97e3d2e-81a6-32f2-8bde-66f7753d9f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:92:1d:79:00:2f:77:e5:e5:14:bf:8d:12:60:51:60:6d:5c: 33:52:c3:e5:ca:4d:57:cd:92:0c:39:3f:ab:ac:ff:03:ca:13: f5:78:df:8f:5c:c2:18:0f:29:91:fd:28:2b:e3:b3:5c:1b:b7: 32:10:59:a3:dc:cf:48:53:92:fc:64:49:d3:a2:2c:71:5b:d6: e2:96:eb:74:3e:58:ea:1f:af:07:79:7b:47:aa:20:72:94:eb: c6:75:5e:31:58:2a:70:c0:97:fe:ce:61:20:7d:9a:d4:8c:fe: fd:20:d5:9d:d4:73:0c:43:aa:b5:25:83:8a:69:f3:f1:90:1f: f8:d3:d0:8d:5c:9d:bc:1b:c9:65:e3:00:03:24:4a:9c:ba:22: c9:36:6f:24:73:15:a0:0c:5a:3d:8e:f2:de:21:e4:7c:13:09: bc:7d:ab:cf:ea:45:4f:6f:34:a8:dc:77:55:cf:fa:7e:29:48: ea:ed:c3:d5:a8:a8:56:70:b1:84:03:14:03:4a:2e:47:16:b6: f7:3a:56:a8:f6:95:9f:86:b4:a3:1f:66:67:77:fd:58:f1:e4: b9:de:1c:c0:3a:1e:4d:46:94:3e:fe:49:68:9e:cf:b9:45:51: 13:49:55:b3:b2:86:41:80:16:b7:bf:a0:6e:ff:af:c8:75:21: 4c:0a:af:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNKDzlH5UOrPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk Y2RjMDI0ZTAtODMzZi00YjNmLTg5M2EtYTcyNGZkMGY5ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69cC3/1aQZiEcP0fWD2Zm8616a7sbAC/Z+c5 xMAaGI99aKFON8bkkyHZOotHkFaSuQ2PUNWuHBt2y5uL/7DmWj39akT8CWiDO/9n KApg78cIS3sf+bX5s+h18ttU/xMbF6G0sRpeMI3w2OuxZaTtltK6RMkPpTgFJgYL 5EPk0SnGJF3pgt6Pk8pY1gz2dB8f49SWsPgviZtkDPx/cvm0haiEg8CF1RghBBOw jvd5LSXzEB/GkaK2la/32jJOjNH4gp5HvJdgiHZS2EwqiyRARo36B9JtNBGJaVOA b80EyVYOJz2uSPVcb0ZKDZRJPc4cSnxc21no4j3zPSFFOkGuUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvXeJqKXYbFJk8+5/qQXpPezQk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk3ZTNkMmUtODFhNi0z MmYyLThiZGUtNjZmNzc1M2Q5ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKSHXkAL3fl5RS/jRJgUWBtXDNSw+XKTVfNkgw5P6us/wPKE/V4349c whgPKZH9KCvjs1wbtzIQWaPcz0hTkvxkSdOiLHFb1uKW63Q+WOofrwd5e0eqIHKU 68Z1XjFYKnDAl/7OYSB9mtSM/v0g1Z3UcwxDqrUlg4pp8/GQH/jT0I1cnbwbyWXj AAMkSpy6Isk2byRzFaAMWj2O8t4h5HwTCbx9q8/qRU9vNKjcd1XP+n4pSOrtw9Wo qFZwsYQDFANKLkcWtvc6Vqj2lZ+GtKMfZmd3/Vjx5LneHMA6Hk1GlD7+SWiez7lF URNJVbOyhkGAFre/oG7/r8h1IUwKr0c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:25 2025 by rpki-client