$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa File: 2b46d545-80ed-316a-9f61-25e9d1763c81.roa (raw, json) Hash identifier: KBc217oW4heBNgGsdQk5nKQRO1s14r6Am/nXpryh1eQ= Subject key identifier: D1:D0:F3:E7:C4:B1:1D:94:CA:2C:D6:51:59:49:FA:5F:CA:88:10:6C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D2423117FE3EAD21EF33C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:42:31:17:fe:3e:ad:21:ef:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=fe8fcca0-0a1e-475d-b1e5-af6a4f0fa5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:c2:c2:2a:e3:a8:15:ef:70:bb:10:b0:af: fa:1a:ad:4f:c7:e3:b1:2f:2a:70:8b:63:70:48:4a: 56:05:66:9a:d6:44:05:65:7a:b5:8b:b0:ba:71:17: d2:27:42:de:de:42:c9:c9:23:3e:c3:46:91:19:a1: 1c:47:e2:07:71:91:62:0d:76:95:c5:ec:5f:39:7f: d0:47:9f:e8:0e:68:f5:ce:fa:53:21:35:ef:df:0b: 3f:81:15:a1:39:e5:08:59:5a:7b:cb:3a:88:a9:5d: 8c:26:0d:89:e6:3f:da:a1:d0:6a:6c:91:19:f4:06: 1b:2f:20:4d:da:61:92:30:71:4c:4d:69:fb:de:2c: 40:b5:ed:5e:60:2b:d5:a5:2c:03:a5:75:a6:31:ed: 6c:33:ac:bc:ce:aa:98:0d:2d:2e:38:a9:ac:c5:33: be:6f:e2:e5:9a:97:f8:38:c5:f8:0a:04:4f:93:94: 19:e3:9e:01:27:ea:d5:56:87:78:fb:f8:5a:aa:24: c4:ab:c9:3f:b4:da:67:e6:ad:a5:6e:21:60:bf:43: 30:d5:b5:04:75:9d:c9:06:67:37:c5:ea:3e:bb:48: 4d:39:81:12:ec:47:2e:a4:3c:cf:4d:d0:76:e7:46: ce:db:e5:b3:cb:4b:3e:4a:5a:88:49:b3:d5:b2:fa: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:F3:E7:C4:B1:1D:94:CA:2C:D6:51:59:49:FA:5F:CA:88:10:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7c:53:a1:91:75:d3:b7:9a:8d:36:35:23:0c:ba:6d:ed:be: cd:20:b5:17:27:57:7b:2e:65:f6:a8:23:64:87:c6:34:f7:64: 1e:9e:24:f3:a3:86:71:b9:dc:e0:e2:de:9d:af:53:3a:86:27: 22:2a:12:c8:54:ac:f8:ea:32:1a:1a:9d:e5:db:61:f0:df:74: 00:78:64:16:49:1b:27:c8:a8:92:54:d0:42:87:62:cb:27:a0: 49:c3:84:59:d9:4e:0c:1f:1b:de:a9:c4:40:c1:ae:22:1b:e2: bb:f4:8e:1c:ee:aa:e1:83:43:3e:7d:7e:08:27:20:6b:09:ad: e4:0c:72:6e:0b:08:64:69:5f:15:10:b0:72:85:5a:2a:11:be: 2d:90:fd:c3:c2:34:7a:30:b1:c6:88:60:61:59:6b:cd:d2:93: 09:42:6f:4b:29:2c:a8:b5:3f:7c:a6:9f:54:01:ff:05:b6:b3: 1a:ed:af:dc:cb:37:48:9c:9b:1d:cb:d9:25:a3:fb:4e:d4:fd: 39:36:d2:8c:f0:87:f2:f0:a5:c1:9e:3e:0f:bd:58:f1:22:ce: ca:2f:94:17:13:4b:49:ce:67:6a:bb:29:6f:48:ac:dc:75:a7: 0a:b7:03:ca:27:f2:ac:a9:7f:76:45:bb:82:ed:fc:79:05:9b: 41:ad:91:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kIxF/4+rSHvM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZmU4ZmNjYTAtMGExZS00NzVkLWIxZTUtYWY2YTRmMGZhNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+HCwirjqBXvcLsQsK/6Gq1Px+OxLypwi2Nw SEpWBWaa1kQFZXq1i7C6cRfSJ0Le3kLJySM+w0aRGaEcR+IHcZFiDXaVxexfOX/Q R5/oDmj1zvpTITXv3ws/gRWhOeUIWVp7yzqIqV2MJg2J5j/aodBqbJEZ9AYbLyBN 2mGSMHFMTWn73ixAte1eYCvVpSwDpXWmMe1sM6y8zqqYDS0uOKmsxTO+b+Llmpf4 OMX4CgRPk5QZ454BJ+rVVod4+/haqiTEq8k/tNpn5q2lbiFgv0Mw1bUEdZ3JBmc3 xeo+u0hNOYES7EcupDzPTdB250bO2+Wzy0s+SlqISbPVsvqu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHQ8+fEsR2UyizWUVlJ+l/KiBBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI0NmQ1NDUtODBlZC0z MTZhLTlmNjEtMjVlOWQxNzYzYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ8U6GRddO3mo02NSMMum3tvs0gtRcnV3suZfaoI2SHxjT3ZB6eJPOj hnG53ODi3p2vUzqGJyIqEshUrPjqMhoaneXbYfDfdAB4ZBZJGyfIqJJU0EKHYssn oEnDhFnZTgwfG96pxEDBriIb4rv0jhzuquGDQz59fggnIGsJreQMcm4LCGRpXxUQ sHKFWioRvi2Q/cPCNHowscaIYGFZa83SkwlCb0spLKi1P3ymn1QB/wW2sxrtr9zL N0icmx3L2SWj+07U/Tk20ozwh/LwpcGePg+9WPEizsovlBcTS0nOZ2q7KW9IrNx1 pwq3A8on8qypf3ZFu4Lt/HkFm0GtkaM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:37 2025 by rpki-client