$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa File: f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa (raw, json) Hash identifier: SY/6H1cgmpeK3jH+/t5fC9T/8egGToEie2BfqlHJGD0= Subject key identifier: D4:90:5B:4D:9B:67:AF:75:97:DE:0F:BC:B4:DE:CF:03:99:EA:06:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD10033074F2C2020A8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 396572 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d1:00:33:07:4f:2c:20:20:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=f712a220-6b01-4fbd-a193-bb7b21590871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:62:2c:15:09:e4:76:05:4d:d5:6b:2f:d1: 4a:b9:d2:ba:21:3e:b6:1d:1b:e7:3c:53:56:f4:1d: 4f:b4:11:4e:33:4b:2e:57:fe:51:32:52:61:01:ff: 8b:a7:40:15:27:3b:64:91:76:65:80:41:1e:84:d2: 90:af:2b:ed:ab:a3:44:a2:64:f8:f3:56:d0:16:34: 79:30:01:ab:b2:e9:f4:6a:58:07:ab:46:f3:85:24: 69:27:2c:7f:58:29:24:cf:6b:07:13:22:a0:3e:1f: 65:80:95:9a:e9:14:c4:fc:c1:aa:35:bc:46:94:7a: bd:aa:f2:33:a3:c4:f0:37:de:ba:ec:5c:98:f4:fd: b5:cb:e8:fa:d5:21:a4:99:d8:79:56:93:0e:79:94: f8:47:af:74:6c:13:7e:b2:e4:5c:bf:c9:35:ea:c7: 3c:4b:36:5a:21:05:85:4e:9e:5e:4b:89:6e:8a:ca: 32:19:96:3e:d7:f7:77:70:ba:96:14:5f:d0:7b:02: e8:65:df:40:f5:86:e4:99:7b:98:1f:71:cf:b7:13: 2a:14:0b:15:e3:9a:a8:ae:c4:23:4e:e4:1c:4d:cb: cb:26:ba:d3:7e:b6:18:6f:7e:6e:72:8f:16:ec:f2: b9:ae:d7:fa:13:dd:c5:d1:9f:96:e0:7f:17:cd:56: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:90:5B:4D:9B:67:AF:75:97:DE:0F:BC:B4:DE:CF:03:99:EA:06:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:94:9d:c6:86:f3:ce:b2:3a:57:bc:fe:b4:91:91:87:8a:b9: 8c:67:b6:d6:8d:a5:af:dd:fd:86:75:af:95:0b:d8:57:b4:f6: 38:26:69:ad:be:6f:cd:6c:d3:9f:85:b2:f7:d0:a3:63:bc:0a: d1:94:1d:2b:79:c9:cf:09:89:d0:d7:1b:b7:25:7e:d9:06:2e: 64:17:19:11:56:8a:14:f1:69:39:51:71:29:fb:5e:69:53:a8: 9b:c3:b6:8b:83:e3:e1:9a:d6:87:9e:dc:1c:0d:95:88:d0:03: 81:63:53:55:7c:70:b9:82:dd:30:a7:f6:22:10:80:29:d9:1c: e2:70:a9:79:fd:e7:33:d6:8b:04:3b:f1:88:5f:cc:83:94:d3: bc:2a:f5:af:ea:a0:4c:ed:08:21:60:e0:c4:b0:46:ec:a5:bf: c5:2a:10:02:bd:1b:5f:51:51:75:8b:05:c4:b2:97:27:ce:77: a0:68:fa:b2:b4:a8:e7:a4:12:02:96:50:80:a4:a6:c2:7b:e2: 41:d5:03:8c:31:0b:41:41:d0:7a:31:f4:f4:f6:b0:f0:68:09: 5f:76:28:a7:7d:1d:c9:03:74:6f:07:11:d2:7d:ae:cb:58:4b: 7b:94:2b:36:83:55:58:84:54:7c:6c:42:3c:cf:8d:99:af:dc: 68:86:68:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNEAMwdPLCAgqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjcxMmEyMjAtNmIwMS00ZmJkLWExOTMtYmI3YjIxNTkwODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4FiLBUJ5HYFTdVrL9FKudK6IT62HRvnPFNW 9B1PtBFOM0suV/5RMlJhAf+Lp0AVJztkkXZlgEEehNKQryvtq6NEomT481bQFjR5 MAGrsun0algHq0bzhSRpJyx/WCkkz2sHEyKgPh9lgJWa6RTE/MGqNbxGlHq9qvIz o8TwN9667FyY9P21y+j61SGkmdh5VpMOeZT4R690bBN+suRcv8k16sc8SzZaIQWF Tp5eS4luisoyGZY+1/d3cLqWFF/QewLoZd9A9YbkmXuYH3HPtxMqFAsV45qorsQj TuQcTcvLJrrTfrYYb35uco8W7PK5rtf6E93F0Z+W4H8XzVY2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSQW02bZ691l94PvLTezwOZ6gZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjAzMzFiZmUtMTcxMy0z YWFmLWEzYjktMDlhYmZmNTNkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2UncaG886yOle8/rSRkYeKuYxnttaNpa/d/YZ1r5UL2Fe09jgmaa2+ b81s05+FsvfQo2O8CtGUHSt5yc8JidDXG7clftkGLmQXGRFWihTxaTlRcSn7XmlT qJvDtouD4+Ga1oee3BwNlYjQA4FjU1V8cLmC3TCn9iIQgCnZHOJwqXn95zPWiwQ7 8YhfzIOU07wq9a/qoEztCCFg4MSwRuylv8UqEAK9G19RUXWLBcSylyfOd6Bo+rK0 qOekEgKWUICkpsJ74kHVA4wxC0FB0Hox9PT2sPBoCV92KKd9HckDdG8HEdJ9rstY S3uUKzaDVViEVHxsQjzPjZmv3GiGaK0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:55 2025 by rpki-client