$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa File: 229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json) Hash identifier: p6QKwNq12T/ZCbuYsgt1x42ipQ7eK6vDynSMwZgGguQ= Subject key identifier: F5:67:10:E7:29:3F:D8:6B:57:6C:49:1E:92:1D:F8:A3:93:32:E9:DC Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584B8917668D2FE58F5B1D7193C0 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 2906 IP address blocks: 198.38.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:66:8d:2f:e5:8f:5b:1d:71:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=8934a19a-9114-4b44-87be-517e7d363622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:f5:7d:ee:d8:3e:bd:c4:4b:24:24:49:2e: 3a:b2:d1:28:cc:6b:42:d4:25:91:24:37:30:59:e2: 6a:a1:15:8d:9b:17:89:48:20:16:fe:28:50:f2:2d: 8d:8f:93:0f:39:61:a5:7b:96:75:80:6d:91:ca:b8: a1:1f:bc:f4:f2:cc:5e:e7:7f:83:5c:96:e2:85:a6: b4:8e:e8:0a:bb:f1:00:9b:2b:36:35:2b:ce:3c:36: 67:34:a1:55:96:f2:e9:1f:09:88:f3:9f:48:f9:59: 34:e6:ea:f2:91:86:1d:09:a0:66:27:64:43:79:a9: f9:c2:ca:a8:4b:77:c9:37:01:ec:43:53:5d:3b:41: a1:62:41:8a:c6:a2:42:7e:4b:b3:b0:3f:cc:15:97: af:1a:7c:88:9a:44:bb:d4:91:b7:14:61:3a:a1:37: 61:bb:83:ce:cc:91:d3:51:36:d8:cf:50:e6:74:2d: 99:32:33:a8:94:b3:01:f3:d4:f7:81:46:27:ab:c6: 21:be:f3:1b:25:25:d5:54:39:d8:d8:ed:7f:41:21: 9d:73:a0:1b:58:62:84:08:60:b3:62:58:fc:ff:cd: c2:d0:28:43:cf:2a:f7:db:23:7a:d6:f0:60:25:ce: 44:8a:1a:d7:b9:e2:45:32:91:94:9f:92:89:38:09: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:10:E7:29:3F:D8:6B:57:6C:49:1E:92:1D:F8:A3:93:32:E9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 198.38.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:28:9d:7a:65:b9:83:63:c3:f5:c6:00:7b:47:2a:dd:a5:65: e6:02:14:d1:b3:42:74:84:05:bf:6b:72:9a:c4:aa:f5:b7:82: 15:c9:c3:00:90:de:e2:f7:7c:c2:5d:d3:07:b3:2c:00:56:82: 52:fd:e9:c5:60:f5:68:d0:be:a5:8a:fd:87:7c:06:91:24:94: 72:f4:7a:4a:12:7f:d0:e3:e9:11:6f:3d:9e:9e:12:19:41:73: 44:fc:f4:8b:74:98:9d:f4:65:82:f0:2d:6f:b2:d8:ee:7a:ff: 32:b2:0d:cd:76:2a:4c:5a:79:f1:08:d8:fb:60:cf:54:96:57: ad:cf:89:70:ca:68:fe:1e:08:ef:19:20:8b:c4:73:4c:30:cf: a0:a3:55:7a:fe:49:9b:0a:75:4a:24:30:34:01:6d:94:06:1f: f2:77:06:00:49:3b:30:c4:32:45:27:98:f6:44:ad:4f:4c:33: e7:6f:27:f7:5c:b2:26:8a:d3:4e:76:05:9f:54:d8:06:fd:b1: 0f:26:92:f7:76:9f:85:8c:f7:9d:4c:e8:df:7b:f6:6e:56:37: 90:5c:3e:d9:98:fb:54:7b:46:b4:53:7a:a0:ae:75:84:62:a6: a5:a4:26:11:0c:2f:81:bd:f1:af:b1:d0:c8:2c:8e:42:90:5d: f0:3f:3c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2aNL+WPWx1xk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODkzNGExOWEtOTExNC00YjQ0LTg3YmUtNTE3ZTdkMzYzNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ71fe7YPr3ESyQkSS46stEozGtC1CWRJDcw WeJqoRWNmxeJSCAW/ihQ8i2Nj5MPOWGle5Z1gG2RyrihH7z08sxe53+DXJbihaa0 jugKu/EAmys2NSvOPDZnNKFVlvLpHwmI859I+Vk05urykYYdCaBmJ2RDean5wsqo S3fJNwHsQ1NdO0GhYkGKxqJCfkuzsD/MFZevGnyImkS71JG3FGE6oTdhu4POzJHT UTbYz1DmdC2ZMjOolLMB89T3gUYnq8YhvvMbJSXVVDnY2O1/QSGdc6AbWGKECGCz Ylj8/83C0ChDzyr32yN61vBgJc5EihrXueJFMpGUn5KJOAnwWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVnEOcpP9hrV2xJHpId+KOTMuncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMjI5ZTI5ZmQtMmVmOS0z YTk4LWEzNDctZDhiNDkyYzZjODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxiZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgonXpluYNjw/XGAHtHKt2lZeYCFNGzQnSEBb9rcprEqvW3ghXJwwCQ 3uL3fMJd0wezLABWglL96cVg9WjQvqWK/Yd8BpEklHL0ekoSf9Dj6RFvPZ6eEhlB c0T89It0mJ30ZYLwLW+y2O56/zKyDc12KkxaefEI2Ptgz1SWV63PiXDKaP4eCO8Z IIvEc0wwz6CjVXr+SZsKdUokMDQBbZQGH/J3BgBJOzDEMkUnmPZErU9MM+dvJ/dc siaK0052BZ9U2Ab9sQ8mkvd2n4WM951M6N979m5WN5BcPtmY+1R7RrRTeqCudYRi pqWkJhEML4G98a+x0MgsjkKQXfA/PLQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:43 2025 by rpki-client