$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa File: 1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa (raw, json) Hash identifier: QD+cOkDoB788p/GK4gzS9VzJW1A1eKbmod81WK6hSP4= Subject key identifier: 8B:08:4F:6C:8E:25:3A:79:FC:B1:12:84:F6:10:72:63:35:B0:43:13 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26E9274A34198D4358500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6e:92:74:a3:41:98:d4:35:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b18c1914-415f-4a85-9cb0-4a7d45da657f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:c5:20:56:d2:d6:f4:74:16:70:0f:19:a1: 8b:37:61:a3:de:b0:81:27:c8:b3:0b:eb:fb:ce:82: 09:da:63:9f:e5:1f:de:40:2b:4c:49:23:64:6b:28: 68:0b:2b:cb:36:1f:88:c4:00:3e:9c:08:01:96:70: d1:b4:f8:6a:5e:d9:3f:5c:f1:6d:16:87:de:97:16: b7:35:1c:c9:f3:a5:58:e2:3b:f0:59:fd:94:78:e7: 48:ed:87:48:8f:75:61:8a:90:33:ff:ff:b5:84:b3: a1:9a:5b:09:96:1e:60:7f:30:ab:0b:1d:11:d4:a1: d7:a5:84:54:d6:a5:46:f8:06:aa:7c:0d:90:2a:33: c7:4d:32:56:79:31:9b:d5:fa:7c:ef:0e:4b:80:78: 90:44:e2:91:2b:46:fc:c0:5d:67:da:38:de:12:f2: 9e:bf:f9:fa:07:bc:7c:91:62:f8:d5:78:05:1c:f0: 6b:d2:e3:a1:40:1a:14:c0:77:ba:21:6d:c7:b1:34: 40:98:9a:16:45:3d:c4:c4:a5:ae:c4:5d:96:de:64: 5d:6e:d1:10:87:91:66:25:f7:6b:83:8b:a8:19:e6: e4:2f:19:f5:92:2e:81:7d:86:7c:5d:08:27:5a:67: 4e:d8:bf:27:79:a9:b4:d8:7d:56:5c:d9:b1:b7:17: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:08:4F:6C:8E:25:3A:79:FC:B1:12:84:F6:10:72:63:35:B0:43:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6e:17:39:0b:6c:1a:b6:e1:5f:2a:75:e7:4c:a6:05:e9:7e: 77:05:cd:1a:40:1e:70:7d:49:95:c2:b5:1b:9e:f5:0c:ec:8d: 4e:f9:a0:39:46:40:e2:61:7e:d3:7e:a0:04:0a:39:d0:f9:12: 5c:ae:91:9b:5d:e0:7e:53:37:5b:52:b6:3b:21:77:89:72:63: b4:df:ce:d3:a3:83:6b:d2:3e:54:5a:45:51:83:34:39:3d:18: c1:41:90:07:37:fd:25:c9:6a:d3:32:79:7a:e1:58:61:8c:0f: da:be:42:c5:49:ee:4e:4a:fc:25:e8:36:a4:74:d7:c3:2d:26: 09:a7:de:78:35:fd:5e:66:47:5e:e1:72:a2:54:4a:f5:90:9f: 07:86:64:17:7e:5d:95:ab:64:32:eb:61:b8:f3:2b:b8:ae:ee: db:b4:a4:bf:0b:8e:d0:e7:69:74:23:ad:a9:ef:03:20:89:dd: e1:39:55:67:25:5f:9b:e5:6a:0e:7f:e7:87:fb:f4:b2:6e:68: f3:33:bc:82:12:c5:59:ca:ed:0f:a5:44:6a:50:a0:14:72:0d: 81:6e:07:46:22:6f:28:2c:4d:a5:15:51:65:96:7f:ff:74:41: d9:8c:e4:ea:5c:53:13:af:09:30:15:5e:f3:b0:01:7a:d4:d9: ff:9c:bc:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m6SdKNBmNQ1hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjE4YzE5MTQtNDE1Zi00YTg1LTljYjAtNGE3ZDQ1ZGE2NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbFIFbS1vR0FnAPGaGLN2Gj3rCBJ8izC+v7 zoIJ2mOf5R/eQCtMSSNkayhoCyvLNh+IxAA+nAgBlnDRtPhqXtk/XPFtFofelxa3 NRzJ86VY4jvwWf2UeOdI7YdIj3VhipAz//+1hLOhmlsJlh5gfzCrCx0R1KHXpYRU 1qVG+AaqfA2QKjPHTTJWeTGb1fp87w5LgHiQROKRK0b8wF1n2jjeEvKev/n6B7x8 kWL41XgFHPBr0uOhQBoUwHe6IW3HsTRAmJoWRT3ExKWuxF2W3mRdbtEQh5FmJfdr g4uoGebkLxn1ki6BfYZ8XQgnWmdO2L8neam02H1WXNmxtxdFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsIT2yOJTp5/LEShPYQcmM1sEMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWE1ZDlkMGEtM2Q0Yi0z YTA5LWE0NjYtYWFhMTQxZThiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFuFzkLbBq24V8qdedMpgXpfncFzRpAHnB9SZXCtRue9QzsjU75oDlG QOJhftN+oAQKOdD5ElyukZtd4H5TN1tStjshd4lyY7TfztOjg2vSPlRaRVGDNDk9 GMFBkAc3/SXJatMyeXrhWGGMD9q+QsVJ7k5K/CXoNqR018MtJgmn3ng1/V5mR17h cqJUSvWQnweGZBd+XZWrZDLrYbjzK7iu7tu0pL8LjtDnaXQjranvAyCJ3eE5VWcl X5vlag5/54f79LJuaPMzvIISxVnK7Q+lRGpQoBRyDYFuB0YibygsTaUVUWWWf/90 QdmM5OpcUxOvCTAVXvOwAXrU2f+cvLU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:56 2025 by rpki-client