$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa File: b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa (raw, json) Hash identifier: 1lEP0h6XV3U17Zjbeq1t6Pa2AU8hScc4gisD3QKWiIk= Subject key identifier: F9:79:A3:56:49:3F:FF:D7:72:D9:42:F2:63:6D:23:64:10:9C:8E:D3 Certificate issuer: /CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723 Certificate serial: 010D0C9F4328584B8EACD98A0C7A6869084AEC80 Authority key identifier: 35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 11230 IP address blocks: 198.183.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d9:8a:0c:7a:68:69:08:4a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=3251f1f5-469b-4282-935f-8c7a2e101f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:9a:68:2b:a3:9b:08:e2:65:3d:a1:d6:44: 09:dd:9d:c7:31:5d:28:0f:23:ae:e1:41:89:91:6d: fc:ee:10:80:12:7b:d1:86:7f:ad:cb:b2:24:36:36: 6e:c1:66:ee:3c:be:4e:d2:49:3f:47:9a:70:d5:a4: eb:35:d6:16:0e:1a:d9:07:93:37:ba:35:5a:36:a1: ad:6d:74:5a:bb:4f:84:9a:9a:2c:95:4d:71:18:b3: 11:50:5e:79:1a:ae:c5:fc:30:8e:5b:68:00:0c:94: 21:0b:37:5a:e2:09:da:a4:21:d4:5d:f5:c7:0e:e4: 76:63:98:9e:be:8f:e4:46:d1:52:5d:28:f6:25:af: b8:6c:ac:de:15:8d:45:92:35:9f:eb:02:b2:74:29: f6:e5:50:8d:f1:34:7e:de:d7:cc:9e:8d:2e:1d:52: e7:1d:2e:da:05:6d:94:91:67:5a:a5:bf:cb:86:f2: e3:3a:ce:da:8c:b1:55:38:1d:07:db:0a:09:84:c2: 5f:d6:b9:a6:59:4b:a6:53:e9:56:43:9d:ed:8c:d8: 84:7f:87:0e:a9:26:e9:b5:71:70:9e:e3:db:fe:6a: fe:a5:ef:a8:76:40:93:3a:e5:d1:7f:c0:a9:ff:93: 53:fb:cb:9d:1d:2b:cf:bf:b1:43:63:77:1b:01:51: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:79:A3:56:49:3F:FF:D7:72:D9:42:F2:63:6D:23:64:10:9C:8E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl X509v3 Authority Key Identifier: keyid:35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer sbgp-ipAddrBlock: critical IPv4: 198.183.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b9:79:28:c1:bf:e7:b7:8d:d9:60:7f:8d:8d:9b:4b:bd:f0: 7e:35:12:2d:c2:be:3b:a2:0f:91:2a:ae:5b:07:65:72:6e:54: 9a:67:a5:9c:be:c2:d8:10:b8:ae:e8:91:22:d9:ba:fe:8b:84: 22:48:69:08:b3:f4:e5:17:0f:32:1a:ee:b0:59:b3:5d:ab:9e: d7:15:c5:47:dd:0f:62:da:de:d1:fa:09:c7:7d:e1:04:ce:33: dd:04:6d:99:fd:a6:ef:36:0e:27:02:6f:65:50:ce:45:e8:9c: 61:71:65:21:df:88:ca:51:b4:78:51:51:b9:e8:87:66:25:94: 47:35:54:f4:99:78:fd:9f:03:5f:c7:57:6b:e0:91:73:92:c9: d6:be:e4:8e:47:00:22:90:5c:9b:6e:6a:9b:54:c8:c4:c2:2d: 9b:e6:32:6a:2d:0f:61:ab:fb:c4:7e:ea:a2:7d:71:57:cb:f2: 06:2e:cd:51:90:a2:e8:9d:49:f4:d3:fd:85:92:41:50:10:09: c9:43:bb:ac:52:21:f6:9c:2b:fc:7b:2f:72:a0:2a:d2:af:fa: d1:63:59:d1:b7:b2:dd:18:80:3c:ac:b7:0a:18:a0:82:2e:ae: d3:dd:61:dc:ae:9a:59:a7:c8:27:02:27:62:6b:cb:c3:21:aa: d7:26:28:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNmKDHpoaQhK7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5NmIzOGUtMWJjNS00NjdlLTg3MmQtZjdiMjBkNGZm NzIzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MzI1MWYxZjUtNDY5Yi00MjgyLTkzNWYtOGM3YTJlMTAxZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAGaaCujmwjiZT2h1kQJ3Z3HMV0oDyOu4UGJ kW387hCAEnvRhn+ty7IkNjZuwWbuPL5O0kk/R5pw1aTrNdYWDhrZB5M3ujVaNqGt bXRau0+EmposlU1xGLMRUF55Gq7F/DCOW2gADJQhCzda4gnapCHUXfXHDuR2Y5ie vo/kRtFSXSj2Ja+4bKzeFY1FkjWf6wKydCn25VCN8TR+3tfMno0uHVLnHS7aBW2U kWdapb/LhvLjOs7ajLFVOB0H2woJhMJf1rmmWUumU+lWQ53tjNiEf4cOqSbptXFw nuPb/mr+pe+odkCTOuXRf8Cp/5NT+8udHSvPv7FDY3cbAVHzhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl5o1ZJP//XctlC8mNtI2QQnI7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZDk2 YjM4ZS0xYmM1LTQ2N2UtODcyZC1mN2IyMGQ0ZmY3MjMvYjBhNjViZDQtMTRhZC0z YTg2LWIyZjYtNmQ3OTQzMDY0NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2Q5NmIzOGUtMWJjNS00NjdlLTg3 MmQtZjdiMjBkNGZmNzIzL2NkOTZiMzhlLTFiYzUtNDY3ZS04NzJkLWY3YjIwZDRm ZjcyMy5jcmwwHwYDVR0jBBgwFoAUNZELdooWaY17ENFTNiitKqgXq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZDk2YjM4ZS0xYmM1LTQ2N2UtODcyZC1mN2Iy MGQ0ZmY3MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxrfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq5eSjBv+e3jdlgf42Nm0u98H41Ei3CvjuiD5EqrlsHZXJuVJpnpZy+ wtgQuK7okSLZuv6LhCJIaQiz9OUXDzIa7rBZs12rntcVxUfdD2La3tH6Ccd94QTO M90EbZn9pu82DicCb2VQzkXonGFxZSHfiMpRtHhRUbnoh2YllEc1VPSZeP2fA1/H V2vgkXOSyda+5I5HACKQXJtuaptUyMTCLZvmMmotD2Gr+8R+6qJ9cVfL8gYuzVGQ ouidSfTT/YWSQVAQCclDu6xSIfacK/x7L3KgKtKv+tFjWdG3st0YgDystwoYoIIu rtPdYdyumlmnyCcCJ2Jry8MhqtcmKFM= -----END CERTIFICATE-----Generated at Wed Oct 22 02:46:56 2025 by rpki-client