$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30441c47-5ba8-3f79-86ac-b21186f3c342.roa File: 30441c47-5ba8-3f79-86ac-b21186f3c342.roa (raw, json) Hash identifier: CvEiFjZlGnRjHmlKwl7nEfdzZBcY1/pZZNT81UpVhR4= Subject key identifier: DD:35:8E:A6:8C:D9:D6:11:03:9A:72:C4:CD:95:52:C9:7C:6D:1B:13 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D259D5A05E610085D0ECA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30441c47-5ba8-3f79-86ac-b21186f3c342.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:59:d5:a0:5e:61:00:85:d0:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2e1f9a2b-8b01-4980-8de3-01432d17f9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:b3:f3:c9:aa:39:da:7d:3b:db:88:67:11: ec:e8:9d:67:2e:c5:04:a8:71:44:4b:8b:cf:22:d0: 10:b0:9a:5f:a3:8a:26:41:57:60:8b:c9:50:b1:1b: 7c:97:67:1c:b4:50:08:c7:22:a0:77:aa:75:05:f2: 2e:af:d8:16:1f:a0:94:b4:1a:ae:d5:21:e7:f7:0d: 82:14:d4:7d:13:02:3e:b8:1a:59:46:39:4f:22:7a: 1f:6e:64:d9:4d:d1:ed:0c:45:0b:08:d9:8b:17:68: c0:60:9d:c4:c7:a8:b2:53:81:95:c5:98:26:c0:84: f1:25:ef:59:22:96:d1:44:72:f8:e6:95:68:ad:49: 4d:11:4c:21:f1:a0:c8:df:56:d3:8d:17:fa:82:76: f1:2c:99:be:a2:4f:0f:a3:f4:84:f2:d6:60:a9:9a: c7:c2:89:ee:87:17:7c:a2:f0:9c:c7:a1:b6:cb:63: e0:bb:4a:68:cd:aa:ce:d7:5f:74:35:a7:fa:ce:42: c0:af:d7:53:7c:12:ee:c8:2c:6d:76:54:2e:b7:87: eb:08:77:38:df:fa:84:46:89:fb:ab:bf:c9:87:88: 6a:05:14:d9:f9:36:3f:61:60:97:0d:56:4f:39:dc: cb:30:d9:04:47:da:9a:18:45:e0:10:1e:af:ba:69: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:35:8E:A6:8C:D9:D6:11:03:9A:72:C4:CD:95:52:C9:7C:6D:1B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30441c47-5ba8-3f79-86ac-b21186f3c342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:f5:a1:7a:88:90:7e:5c:e6:81:f2:68:98:6b:72:f7:de: 26:03:a3:7e:50:fb:92:eb:d4:8f:55:7a:33:57:50:e0:ea:e7: 0e:59:7a:85:bd:3e:5f:88:92:80:bc:61:37:3e:32:49:62:36: 47:a6:c5:d1:93:3e:d6:57:b4:c4:d7:cb:a0:a8:e5:d3:2a:f7: 46:ac:10:40:f3:2e:08:e0:18:d2:fa:af:2d:c5:d0:af:8b:9f: c5:06:77:2b:f3:da:02:44:ab:0e:28:10:84:d0:ec:be:ee:c5: 42:55:f1:30:cb:d1:ce:5f:64:11:69:27:9a:ab:9a:b9:8f:7e: 97:6d:5c:62:f8:36:95:88:5b:ce:b1:2c:87:8b:b8:02:52:64: 8d:81:b8:0e:19:18:c5:3a:13:f6:03:e7:a7:f4:29:92:06:ac: 2e:14:81:17:6d:8e:a4:24:53:50:ed:dc:ad:ac:d0:2e:4d:2f: d7:b0:c5:15:dc:52:f1:d6:07:bc:d8:4e:ec:75:ec:b7:ed:01: 89:92:63:7f:fd:15:7a:40:74:56:e0:85:58:e6:58:3f:a5:1d: 4c:17:08:4d:f7:ac:2a:67:a3:cc:58:a3:35:31:db:eb:33:24: 05:bd:11:33:1d:16:5b:0b:b0:61:17:75:34:6e:2c:87:41:f5: 66:7b:1f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lnVoF5hAIXQ7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmUxZjlhMmItOGIwMS00OTgwLThkZTMtMDE0MzJkMTdmOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuz88mqOdp9O9uIZxHs6J1nLsUEqHFES4vP ItAQsJpfo4omQVdgi8lQsRt8l2cctFAIxyKgd6p1BfIur9gWH6CUtBqu1SHn9w2C FNR9EwI+uBpZRjlPInofbmTZTdHtDEULCNmLF2jAYJ3Ex6iyU4GVxZgmwITxJe9Z IpbRRHL45pVorUlNEUwh8aDI31bTjRf6gnbxLJm+ok8Po/SE8tZgqZrHwonuhxd8 ovCcx6G2y2Pgu0pozarO1190Naf6zkLAr9dTfBLuyCxtdlQut4frCHc43/qERon7 q7/Jh4hqBRTZ+TY/YWCXDVZPOdzLMNkER9qaGEXgEB6vumnOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN01jqaM2dYRA5pyxM2VUsl8bRsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzA0NDFjNDctNWJhOC0z Zjc5LTg2YWMtYjIxMTg2ZjNjMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaV9aF6iJB+XOaB8miYa3L33iYDo35Q+5Lr1I9VejNXUODq5w5ZeoW9 Pl+IkoC8YTc+MkliNkemxdGTPtZXtMTXy6Co5dMq90asEEDzLgjgGNL6ry3F0K+L n8UGdyvz2gJEqw4oEITQ7L7uxUJV8TDL0c5fZBFpJ5qrmrmPfpdtXGL4NpWIW86x LIeLuAJSZI2BuA4ZGMU6E/YD56f0KZIGrC4UgRdtjqQkU1Dt3K2s0C5NL9ewxRXc UvHWB7zYTux17LftAYmSY3/9FXpAdFbghVjmWD+lHUwXCE33rCpno8xYozUx2+sz JAW9ETMdFlsLsGEXdTRuLIdB9WZ7H0g= -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:29 2025 by rpki-client