$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa File: e00cab30-7063-3483-b958-18a8d3695a5f.roa (raw, json) Hash identifier: mdpPZmnvuB9K9b+78Jz3NQwqqQ3Mn0cBjCORdzYzIMo= Subject key identifier: 41:60:89:3C:6C:3F:99:38:86:9E:DB:98:CD:89:49:45:2A:19:E1:5E Certificate issuer: /CN=998a132f-4994-4d96-a767-25e4ce264bc4 Certificate serial: 010D0C9F4328584B917781812E0CFBFF34B0EFD0 Authority key identifier: 58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 19520 IP address blocks: 198.169.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:81:81:2e:0c:fb:ff:34:b0:ef:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998a132f-4994-4d96-a767-25e4ce264bc4 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=1b2be02c-5653-4ece-a3ce-e4a4827a45f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:57:d1:b0:9e:d5:96:19:31:cc:f8:05:bc: 1a:c8:10:a3:6f:81:d4:8e:c3:11:4c:ef:ee:e0:37: 7d:2d:2a:87:9c:f0:84:4e:7e:dd:1e:f2:a2:ad:90: 1e:6e:fe:b4:04:60:a7:2c:15:42:bf:b0:07:39:54: 1f:df:b0:60:53:70:93:1a:6a:77:f9:ab:b4:11:37: 6a:c6:73:b4:91:a0:ed:04:35:a2:75:c9:d2:de:88: 9a:35:77:93:a1:6d:f1:dd:2f:e9:e8:0f:0b:c6:10: b7:86:c8:6a:33:58:15:b4:52:a0:16:14:8e:31:a7: ae:af:d7:b1:3c:bc:c3:53:a5:90:3b:be:b3:31:bc: c4:c1:12:e3:cc:91:b8:e8:f9:4e:8b:2e:b8:27:74: c0:9a:98:7e:6c:03:cf:4e:87:22:f5:43:4a:5d:3f: 35:eb:4b:3b:82:46:db:f1:c5:5d:80:3f:66:18:b4: 08:f9:a3:70:28:ec:4b:c5:84:f1:f1:bd:c5:7f:bc: 88:3a:68:61:25:da:2e:1d:4b:66:72:57:fc:95:cc: 65:03:17:96:26:e7:01:f4:84:a4:49:d7:ac:f6:69: a9:22:45:d5:be:f4:d6:dc:f6:69:45:68:cb:ed:fc: de:84:9d:71:62:00:1a:d2:ef:bf:ec:95:07:c8:37: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:89:3C:6C:3F:99:38:86:9E:DB:98:CD:89:49:45:2A:19:E1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e00cab30-7063-3483-b958-18a8d3695a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl X509v3 Authority Key Identifier: keyid:58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:00:81:e0:39:10:6a:eb:10:fa:c2:c9:ee:a1:13:cb:03:bb: 26:b1:d3:59:67:c8:79:7e:cd:03:10:fd:30:03:b6:c6:af:62: 1e:2c:33:6d:92:d4:d9:81:ac:e8:06:28:e5:9b:c2:a7:56:c0: 4d:09:35:4a:f4:36:b2:e2:2c:19:f2:0f:46:b9:4f:5c:7a:1e: e6:34:33:8b:e2:3a:69:90:c7:35:7b:95:16:19:9f:07:b0:4f: b8:28:26:61:52:c6:db:64:ae:ad:82:75:87:f0:5b:f1:d3:b2: ae:ba:3c:62:aa:57:c8:db:08:0c:ab:a5:ad:90:a5:4c:46:e2: 7e:ec:87:1c:bf:aa:73:a7:79:63:93:82:69:60:ee:ef:fa:00: 61:84:17:2e:2f:17:3c:7b:89:72:74:7b:6e:71:da:51:38:f6: 8f:07:21:85:31:f9:d1:05:01:fb:b6:1f:7d:92:30:d6:c6:39: 71:95:d6:f6:d6:57:8f:1c:a0:d0:86:d6:44:e2:45:e4:3b:4e: 8d:0e:b3:0f:3b:6a:02:6b:b0:28:cb:58:84:ea:0d:81:37:8c: ad:d2:ce:6c:1b:75:cf:aa:e0:24:34:04:4e:1c:2f:a1:ed:71: 36:84:5c:b5:c6:ad:93:96:28:6f:54:61:c5:b6:ae:3c:47:64: 70:e3:99:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd4GBLgz7/zSw79AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk4YTEzMmYtNDk5NC00ZDk2LWE3NjctMjVlNGNlMjY0 YmM0MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk MWIyYmUwMmMtNTY1My00ZWNlLWEzY2UtZTRhNDgyN2E0NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvZX0bCe1ZYZMcz4BbwayBCjb4HUjsMRTO/u 4Dd9LSqHnPCETn7dHvKirZAebv60BGCnLBVCv7AHOVQf37BgU3CTGmp3+au0ETdq xnO0kaDtBDWidcnS3oiaNXeToW3x3S/p6A8LxhC3hshqM1gVtFKgFhSOMaeur9ex PLzDU6WQO76zMbzEwRLjzJG46PlOiy64J3TAmph+bAPPToci9UNKXT8160s7gkbb 8cVdgD9mGLQI+aNwKOxLxYTx8b3Ff7yIOmhhJdouHUtmclf8lcxlAxeWJucB9ISk Sdes9mmpIkXVvvTW3PZpRWjL7fzehJ1xYgAa0u+/7JUHyDeypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFgiTxsP5k4hp7bmM2JSUUqGeFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OThh MTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0Y2UyNjRiYzQvZTAwY2FiMzAtNzA2My0z NDgzLWI5NTgtMThhOGQzNjk1YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTk4YTEzMmYtNDk5NC00ZDk2LWE3 NjctMjVlNGNlMjY0YmM0Lzk5OGExMzJmLTQ5OTQtNGQ5Ni1hNzY3LTI1ZTRjZTI2 NGJjNC5jcmwwHwYDVR0jBBgwFoAUWGGZ16CbY9ajZ5IMA7S4KPHWLLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OThhMTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0 Y2UyNjRiYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkAgeA5EGrrEPrCye6hE8sDuyax01lnyHl+zQMQ/TADtsavYh4sM22S 1NmBrOgGKOWbwqdWwE0JNUr0NrLiLBnyD0a5T1x6HuY0M4viOmmQxzV7lRYZnwew T7goJmFSxttkrq2CdYfwW/HTsq66PGKqV8jbCAyrpa2QpUxG4n7shxy/qnOneWOT gmlg7u/6AGGEFy4vFzx7iXJ0e25x2lE49o8HIYUx+dEFAfu2H32SMNbGOXGV1vbW V48coNCG1kTiReQ7To0Osw87agJrsCjLWITqDYE3jK3Szmwbdc+q4CQ0BE4cL6Ht cTaEXLXGrZOWKG9UYcW2rjxHZHDjmfw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:38 2025 by rpki-client