$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa4b997f-0af0-3fe2-a07e-4815be855094.roa File: fa4b997f-0af0-3fe2-a07e-4815be855094.roa (raw, json) Hash identifier: 96A4OkqPbwjl3sGq7Lz4tE4fJ8xjnKfpUp6j+hz3jNE= Subject key identifier: C1:0F:82:14:9A:2B:D7:8D:92:0F:8A:60:C1:5B:78:BD:F2:8C:2E:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD30675CD6AE542094E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa4b997f-0af0-3fe2-a07e-4815be855094.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 36619 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d3:06:75:cd:6a:e5:42:09:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=69f6bc7f-3508-4a97-8e9d-81b725277f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:1a:9a:9b:14:73:cd:3d:d0:77:e9:e6:31: 4c:e5:19:88:f5:77:f6:41:f1:34:65:18:f4:d1:8d: 8e:99:6f:fe:ae:50:38:1b:c8:1e:09:5a:4e:00:b8: 12:b3:06:7e:59:2b:7d:79:ba:58:bc:47:1f:50:98: 23:7d:8d:fd:da:cd:fe:d6:c5:8a:1e:00:13:6d:b5: bb:12:77:ba:9a:8c:8a:a9:e9:65:bb:ae:b8:08:1e: 7e:6e:71:3d:cb:08:53:9c:e6:63:cf:d2:32:62:ac: 8d:cb:51:25:96:f1:01:dd:77:33:63:36:ce:80:44: 66:49:c5:9a:f3:dd:67:23:84:ad:fb:cc:eb:ba:a2: 23:98:71:de:4f:11:21:33:ee:30:ac:ee:a1:f1:a4: f1:b9:e3:86:24:c0:f6:d2:ac:c5:ba:27:c0:4d:98: fa:2a:16:3e:df:29:01:61:37:7e:03:6a:bb:36:ec: a6:86:97:f7:07:c5:99:e3:6b:11:4c:76:76:b9:c3: 61:37:90:d3:43:75:ca:cd:10:83:8b:69:5a:4e:ce: 39:b7:d1:f7:bd:ce:2c:fb:68:44:f5:12:57:b3:5d: bf:46:3f:fd:ff:3b:7d:d3:31:10:88:75:15:9c:f8: de:62:a9:dd:11:74:18:2d:0e:8e:b8:78:f0:30:63: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0F:82:14:9A:2B:D7:8D:92:0F:8A:60:C1:5B:78:BD:F2:8C:2E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa4b997f-0af0-3fe2-a07e-4815be855094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:46:ee:d3:49:6a:99:0b:54:1c:9e:1e:66:7d:48:fd:4b:45: ea:1e:f5:2a:6d:0c:11:78:0d:3e:df:f2:f5:02:ef:1b:e8:d0: 64:21:8a:6d:a4:e8:33:a3:8c:80:a4:e7:2a:a1:44:19:de:f1: d6:f6:e3:fb:7b:57:6e:c6:02:b9:f1:8f:12:86:3c:38:a9:5a: 8b:17:69:4e:ce:e1:59:03:0f:2f:b1:0d:97:8d:5c:88:bf:02: 98:4b:60:57:92:4d:14:b6:dc:23:e1:5e:eb:06:ab:4c:d1:42: 94:a9:e6:34:b0:f4:15:48:86:9a:a0:b3:81:8b:bf:a8:1e:a8: df:16:cd:40:2a:d1:2c:a2:58:e2:53:49:c3:4c:6a:4b:a5:9b: eb:0b:a9:2c:97:3e:67:81:ba:16:39:d4:10:1c:ae:c6:63:86: ce:bd:e1:98:1c:d1:4d:32:02:87:8d:2d:76:47:a6:c7:bc:14: 05:39:ab:8e:81:d9:ef:05:60:9c:26:dc:5d:a3:4b:3d:7c:79: 30:ab:af:18:b7:4a:42:a6:71:17:01:8d:09:7f:da:3f:47:dc: 7d:93:2f:1b:48:09:4f:df:3d:b1:37:c0:77:68:7b:d9:cf:42: 85:81:4e:cb:46:b5:38:6c:bf:af:28:69:a2:ed:9e:44:70:1f: 1e:c9:4e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNMGdc1q5UIJToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NjlmNmJjN2YtMzUwOC00YTk3LThlOWQtODFiNzI1Mjc3Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ8ampsUc8090Hfp5jFM5RmI9Xf2QfE0ZRj0 0Y2OmW/+rlA4G8geCVpOALgSswZ+WSt9ebpYvEcfUJgjfY392s3+1sWKHgATbbW7 Ene6moyKqellu664CB5+bnE9ywhTnOZjz9IyYqyNy1EllvEB3XczYzbOgERmScWa 891nI4St+8zruqIjmHHeTxEhM+4wrO6h8aTxueOGJMD20qzFuifATZj6KhY+3ykB YTd+A2q7Nuymhpf3B8WZ42sRTHZ2ucNhN5DTQ3XKzRCDi2laTs45t9H3vc4s+2hE 9RJXs12/Rj/9/zt90zEQiHUVnPjeYqndEXQYLQ6OuHjwMGMwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEPghSaK9eNkg+KYMFbeL3yjC77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmE0Yjk5N2YtMGFmMC0z ZmUyLWEwN2UtNDgxNWJlODU1MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANG7tNJapkLVByeHmZ9SP1LReoe9SptDBF4DT7f8vUC7xvo0GQhim2k 6DOjjICk5yqhRBne8db24/t7V27GArnxjxKGPDipWosXaU7O4VkDDy+xDZeNXIi/ AphLYFeSTRS23CPhXusGq0zRQpSp5jSw9BVIhpqgs4GLv6geqN8WzUAq0SyiWOJT ScNMakulm+sLqSyXPmeBuhY51BAcrsZjhs694Zgc0U0yAoeNLXZHpse8FAU5q46B 2e8FYJwm3F2jSz18eTCrrxi3SkKmcRcBjQl/2j9H3H2TLxtICU/fPbE3wHdoe9nP QoWBTstGtThsv68oaaLtnkRwHx7JTtA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:09:55 2025 by rpki-client