$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa File: 35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json) Hash identifier: VOmsElrP6/l6sLO+kCNZ4poqKtRVEeTLEtpO3iiXhuo= Subject key identifier: AD:A4:00:33:13:D6:0F:4C:C3:31:2D:DD:8D:F4:22:89:33:4F:A3:B0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D257A51CD152393A7ADC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:57:a5:1c:d1:52:39:3a:7a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=cac8755a-2abe-4276-8025-0caabe4e8d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:33:0a:41:43:f8:7e:b0:6c:ae:73:a5:1b: e3:61:dd:3f:9c:55:9f:16:b5:ab:3a:e7:71:f2:92: bb:d5:97:af:33:3d:fd:54:97:ab:a8:d9:ee:a4:df: 45:e4:ea:90:52:9b:df:7a:ea:ee:43:ff:24:d0:5a: 7a:99:14:8c:3f:9e:0b:98:3e:82:f8:9e:84:98:bd: d1:78:fc:f9:25:48:38:77:88:d2:5a:b8:6c:03:62: ba:16:92:19:11:06:93:79:2e:3f:e3:c5:ea:40:12: 1c:19:0f:61:8b:0d:5f:9a:47:19:8b:0c:be:f1:19: e4:0a:13:6f:41:96:3d:f3:72:f4:b8:a5:f2:11:99: ac:ce:f1:3a:14:82:8d:76:e3:d2:e2:25:2d:25:3d: 70:e5:06:ed:6e:7c:9e:5d:d9:d1:93:05:69:b0:ea: 7f:e5:a4:44:87:dc:53:1b:65:6c:f6:ab:d3:67:9b: 72:a8:cc:27:66:22:00:8e:2a:f5:34:82:47:06:5d: 49:e2:70:21:ba:49:6d:83:18:ce:99:dc:25:7d:9c: 23:19:50:8b:83:db:8b:8c:ad:40:21:18:cd:b9:28: af:2d:25:be:43:47:bb:56:0a:64:42:ff:d8:a7:77: ef:7c:7a:2a:ba:21:b8:66:1b:8f:88:24:35:a1:e7: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A4:00:33:13:D6:0F:4C:C3:31:2D:DD:8D:F4:22:89:33:4F:A3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2d:8e:e1:9e:61:4c:de:3b:1d:79:0a:d0:16:27:1a:ea:7d: 38:a3:1b:97:22:d0:cf:34:43:2f:dd:7a:4e:41:0b:29:4e:51: 7b:91:75:fe:b0:b4:4e:e6:05:e1:b9:ee:88:c7:09:63:4e:ca: a7:18:61:53:bc:4e:18:82:ce:2c:b1:ae:f1:35:c4:7b:2d:c0: 55:49:0a:31:f9:f8:92:f0:e2:08:d1:b3:b8:e1:56:e3:f5:6c: 75:85:72:28:95:3a:d2:76:34:ab:30:3f:5c:bb:57:7e:70:13: 4d:ce:1e:7f:9e:62:54:6b:30:45:11:24:c4:a6:78:13:39:c8: 99:bb:6b:2c:dd:0c:8c:7c:01:12:04:79:78:d1:2a:77:53:94: 6c:39:c6:7c:a8:f5:dc:0a:6b:6a:5e:0f:d9:e5:3d:10:1b:df: 0c:45:cf:6b:48:49:71:b7:42:52:22:5a:3c:99:b5:50:1b:6e: 1d:db:3c:a1:f3:12:85:66:d5:a1:08:ba:31:5f:cc:d6:11:8c: b0:04:5a:85:a9:ee:60:02:b2:32:d9:70:23:00:52:a9:70:52: e9:7b:37:f7:53:fd:6e:71:25:00:05:c6:50:41:42:d2:f0:3e: 9b:7a:fd:b5:1a:25:13:96:e5:8a:7e:c2:b1:f6:70:3c:fa:19: 62:a7:ee:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lelHNFSOTp63AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk Y2FjODc1NWEtMmFiZS00Mjc2LTgwMjUtMGNhYWJlNGU4ZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9wzCkFD+H6wbK5zpRvjYd0/nFWfFrWrOudx 8pK71ZevMz39VJerqNnupN9F5OqQUpvfeuruQ/8k0Fp6mRSMP54LmD6C+J6EmL3R ePz5JUg4d4jSWrhsA2K6FpIZEQaTeS4/48XqQBIcGQ9hiw1fmkcZiwy+8RnkChNv QZY983L0uKXyEZmszvE6FIKNduPS4iUtJT1w5QbtbnyeXdnRkwVpsOp/5aREh9xT G2Vs9qvTZ5tyqMwnZiIAjir1NIJHBl1J4nAhukltgxjOmdwlfZwjGVCLg9uLjK1A IRjNuSivLSW+Q0e7VgpkQv/Yp3fvfHoquiG4ZhuPiCQ1oeeb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2kADMT1g9MwzEt3Y30IokzT6OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzVkYjFhMjEtOWQxMy0z NmE0LTkyZmYtYzkzYzUwMjU1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADctjuGeYUzeOx15CtAWJxrqfTijG5ci0M80Qy/dek5BCylOUXuRdf6w tE7mBeG57ojHCWNOyqcYYVO8ThiCziyxrvE1xHstwFVJCjH5+JLw4gjRs7jhVuP1 bHWFciiVOtJ2NKswP1y7V35wE03OHn+eYlRrMEURJMSmeBM5yJm7ayzdDIx8ARIE eXjRKndTlGw5xnyo9dwKa2peD9nlPRAb3wxFz2tISXG3QlIiWjyZtVAbbh3bPKHz EoVm1aEIujFfzNYRjLAEWoWp7mACsjLZcCMAUqlwUul7N/dT/W5xJQAFxlBBQtLw Ppt6/bUaJROW5Yp+wrH2cDz6GWKn7lE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:36 2025 by rpki-client