$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa File: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (raw, json) Hash identifier: ALTxmglIje0nMID4b1gxZQHe/j8Z62CmQX+oIxQHBK0= Subject key identifier: A4:9E:CA:20:52:10:15:4F:7A:2B:8C:27:66:51:51:AF:51:69:40:4B Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584B84E77B8AF0875544E2A724FC Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 19449 IP address blocks: 198.99.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7b:8a:f0:87:55:44:e2:a7:24:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=486d8db1-8105-4caf-a403-b950b0cda611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:50:c7:4a:d3:f0:87:a7:a1:af:6c:9b:b8: 5a:95:ec:c1:7c:c9:5c:9e:4e:a2:c6:8a:45:e8:3f: 5a:32:82:38:02:ee:eb:51:6e:1b:9f:f7:d3:08:12: 29:6b:6d:f2:2e:39:f9:69:25:14:e1:03:0c:c1:20: 7a:fe:0b:c6:29:84:d3:86:fa:fb:c3:d8:40:b9:b0: d5:6f:4d:f4:03:94:71:ca:87:55:52:14:de:22:0f: 15:08:49:b7:43:77:c4:d2:f8:54:b2:29:c6:39:0d: 0c:94:f8:61:cc:6c:d3:85:c4:a1:e6:af:78:da:3e: a2:d1:f0:23:f6:ac:e8:9f:f6:ff:b4:b3:65:37:25: ba:78:70:2d:f4:52:f2:ef:60:f4:ee:10:4d:83:d2: 35:f8:a2:c9:05:fd:21:72:30:df:04:cb:a5:c0:4b: 0f:ad:7e:bc:fa:61:17:20:83:3a:e3:86:86:dc:99: 62:88:05:0c:e2:1e:ba:6e:81:4f:77:bb:fb:43:20: 84:53:ca:58:20:f8:99:33:d7:03:74:61:3d:12:f4: 91:91:46:99:b6:03:71:f0:b3:5e:86:9c:60:c9:2f: e3:2e:3d:93:74:ef:d9:8e:18:0d:21:a9:7b:fe:c1: da:9f:53:4e:f9:90:c6:48:a3:b8:ab:28:92:b0:b2: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9E:CA:20:52:10:15:4F:7A:2B:8C:27:66:51:51:AF:51:69:40:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:57:64:2b:5b:59:75:be:d6:7a:bc:80:c4:ed:ce:2b:e3:3e: b4:1e:35:21:d2:34:ab:fd:60:10:ce:88:d0:bb:60:45:6b:72: 16:80:7c:aa:d0:18:66:55:90:a3:9a:3e:7a:4f:15:67:95:77: 1c:95:39:38:7c:8e:80:79:38:a4:2f:59:00:5f:63:31:0d:82: 13:ec:78:3c:88:86:17:38:e0:7f:c3:a4:d6:c8:6a:9d:ed:40: 4a:8c:bd:4c:00:da:22:e0:f8:17:86:72:74:8e:be:89:35:c2: 00:9d:d8:e8:32:fa:13:a7:62:56:b1:3b:85:1f:fa:b4:a2:68: 67:3f:e7:4e:cc:25:0b:f2:5c:65:d2:63:38:c8:85:14:90:75: c3:77:da:a9:fe:ec:e3:f3:2c:4d:78:5d:55:72:f7:12:de:5a: f6:e1:a6:7f:25:25:c3:5c:37:e2:e3:f0:1d:48:41:bc:c4:4c: 16:d9:eb:b4:d7:35:ef:60:6f:9f:83:87:2e:96:a1:d9:c5:87: ff:56:e6:8c:0b:54:ff:a0:42:ed:ba:f7:4e:e0:a2:a6:0c:02: 0a:7a:0d:28:9d:c8:fe:1c:8d:03:04:86:14:a0:8c:82:ee:30: 04:9d:99:52:9b:c3:e3:8f:3b:be:eb:cb:5c:d8:ac:f4:6a:5e: 9b:9d:ef:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53uK8IdVROKnJPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NDg2ZDhkYjEtODEwNS00Y2FmLWE0MDMtYjk1MGIwY2RhNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfhQx0rT8Ienoa9sm7halezBfMlcnk6ixopF 6D9aMoI4Au7rUW4bn/fTCBIpa23yLjn5aSUU4QMMwSB6/gvGKYTThvr7w9hAubDV b030A5RxyodVUhTeIg8VCEm3Q3fE0vhUsinGOQ0MlPhhzGzThcSh5q942j6i0fAj 9qzon/b/tLNlNyW6eHAt9FLy72D07hBNg9I1+KLJBf0hcjDfBMulwEsPrX68+mEX IIM644aG3JliiAUM4h66boFPd7v7QyCEU8pYIPiZM9cDdGE9EvSRkUaZtgNx8LNe hpxgyS/jLj2TdO/ZjhgNIal7/sHan1NO+ZDGSKO4qyiSsLJCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSeyiBSEBVPeiuMJ2ZRUa9RaUBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvZmU2NTVjNTktZjU0Yi0z MzdjLWFmYjAtZWRiNjA4YTZiYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmNrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlXZCtbWXW+1nq8gMTtzivjPrQeNSHSNKv9YBDOiNC7YEVrchaAfKrQ GGZVkKOaPnpPFWeVdxyVOTh8joB5OKQvWQBfYzENghPseDyIhhc44H/DpNbIap3t QEqMvUwA2iLg+BeGcnSOvok1wgCd2Ogy+hOnYlaxO4Uf+rSiaGc/507MJQvyXGXS YzjIhRSQdcN32qn+7OPzLE14XVVy9xLeWvbhpn8lJcNcN+Lj8B1IQbzETBbZ67TX Ne9gb5+Dhy6WodnFh/9W5owLVP+gQu26907goqYMAgp6DSidyP4cjQMEhhSgjILu MASdmVKbw+OPO77ry1zYrPRqXpud7wU= -----END CERTIFICATE-----Generated at Tue Oct 21 10:49:01 2025 by rpki-client