$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa File: 7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa (raw, json) Hash identifier: Ve3U1cGLYkuHRMVm6OJWhHnvuS0zcpMPqBth6cnLWNY= Subject key identifier: A1:89:86:D7:7C:12:D1:59:05:1E:D5:90:11:11:6F:C9:DC:2C:C9:6F Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584B79BCBFE9AF77C52088932F80 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 8987 IP address blocks: 198.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bf:e9:af:77:c5:20:88:93:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=8b62eb40-3430-4edc-8b05-1bc09fb46e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:76:49:dd:91:a3:ca:6d:d9:92:28:0e:9d: 19:66:a4:ed:6c:c6:88:e1:f7:84:7c:6c:28:15:88: bb:e8:3a:83:8e:bf:76:c1:7a:a0:19:6d:9e:ca:a0: 5d:68:63:76:7d:b9:bc:06:df:cc:16:42:69:6d:5f: 2b:87:81:0a:c1:d5:9e:32:4a:96:3a:10:3c:ee:9a: d1:45:9a:81:43:73:51:8e:96:62:fc:94:db:f8:1b: 31:34:06:df:30:50:fe:1e:16:41:c2:bf:10:4c:75: 55:fe:e6:cd:16:d6:d5:d9:5c:84:35:c2:08:e2:7e: 08:5b:64:29:3c:db:f7:df:57:07:82:7b:19:7b:92: d1:7c:fd:f8:9b:8b:f8:5e:79:76:d2:58:5e:57:12: 2e:1d:b2:fe:a3:cc:bf:2a:47:c4:e8:6e:d3:5c:60: 1b:6f:89:64:bb:46:70:88:34:58:57:85:fe:24:f6: 88:d1:c9:9b:18:47:03:a6:dc:0c:c0:4f:35:52:27: 3b:47:42:d8:3b:63:5a:2c:f2:bd:47:2f:e6:b7:9a: 10:a1:ed:f2:6c:07:ac:2b:16:a9:33:c0:14:50:3a: ab:50:ac:8a:15:9f:c2:f3:c9:35:47:52:64:aa:ab: 8b:b9:f6:4c:b9:aa:ee:d8:5f:48:46:cb:15:a6:55: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:89:86:D7:7C:12:D1:59:05:1E:D5:90:11:11:6F:C9:DC:2C:C9:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 198.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c4:db:39:53:bc:57:6d:cf:4f:e8:92:f0:b9:55:7b:c4:ec: ee:00:d4:1b:dd:80:79:ef:e2:ff:9f:24:95:7a:07:e9:01:c0: 84:9b:f1:c3:27:1f:ea:11:c1:ec:dd:70:0f:d9:2f:57:e1:c3: c5:fb:3b:86:23:b4:db:b2:6a:5c:5d:96:d6:03:6f:2e:62:d2: 7d:ed:40:a6:7f:5f:0f:51:96:64:85:b1:7c:61:46:9e:2a:d0: ef:b3:d1:29:65:11:c6:c7:e2:28:e3:57:1c:47:d5:ed:a7:7f: 70:6e:52:eb:a6:32:21:91:4e:7d:66:1a:3c:3f:43:63:21:e3: ff:01:0b:1d:e9:c2:b5:01:13:b3:c3:0b:ce:f5:d4:aa:86:11: e2:8e:7a:c7:a4:1a:31:a0:9d:eb:62:07:89:2b:f6:ec:2c:43: 58:3a:74:ff:be:19:a8:d0:d9:56:b6:4e:86:1a:4b:b2:28:c6: e5:5a:6a:bd:c2:ef:ae:a8:c4:71:7e:54:86:41:d5:13:58:f3: d9:92:05:8a:fb:f1:63:6d:2a:f6:60:da:d9:6f:76:68:e1:49: 5c:9e:b7:1e:91:3c:f2:af:66:80:84:76:0d:b1:d7:0d:f3:b2: b8:44:02:be:4b:f3:2a:34:9a:7b:75:30:93:4b:b1:2d:58:c8: 97:04:ca:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL/pr3fFIIiTL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OGI2MmViNDAtMzQzMC00ZWRjLThiMDUtMWJjMDlmYjQ2ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmF2Sd2Ro8pt2ZIoDp0ZZqTtbMaI4feEfGwo FYi76DqDjr92wXqgGW2eyqBdaGN2fbm8Bt/MFkJpbV8rh4EKwdWeMkqWOhA87prR RZqBQ3NRjpZi/JTb+BsxNAbfMFD+HhZBwr8QTHVV/ubNFtbV2VyENcII4n4IW2Qp PNv331cHgnsZe5LRfP34m4v4Xnl20lheVxIuHbL+o8y/KkfE6G7TXGAbb4lku0Zw iDRYV4X+JPaI0cmbGEcDptwMwE81Uic7R0LYO2NaLPK9Ry/mt5oQoe3ybAesKxap M8AUUDqrUKyKFZ/C88k1R1JkqquLufZMuaru2F9IRssVplUW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGJhtd8EtFZBR7VkBERb8ncLMlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvN2NmZTg3YTctMzlhNi0z YjFkLTg2YmMtN2NlNjQ0YTkyNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvE2zlTvFdtz0/okvC5VXvE7O4A1BvdgHnv4v+fJJV6B+kBwISb8cMn H+oRwezdcA/ZL1fhw8X7O4YjtNuyalxdltYDby5i0n3tQKZ/Xw9RlmSFsXxhRp4q 0O+z0SllEcbH4ijjVxxH1e2nf3BuUuumMiGRTn1mGjw/Q2Mh4/8BCx3pwrUBE7PD C8711KqGEeKOesekGjGgnetiB4kr9uwsQ1g6dP++GajQ2Va2ToYaS7IoxuVaar3C 766oxHF+VIZB1RNY89mSBYr78WNtKvZg2tlvdmjhSVyetx6RPPKvZoCEdg2x1w3z srhEAr5L8yo0mnt1MJNLsS1YyJcEyhQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:45 2025 by rpki-client