$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c3372dd-c768-3808-8128-5ce618ba37f9.roa File: 3c3372dd-c768-3808-8128-5ce618ba37f9.roa (raw, json) Hash identifier: +DxReM15IJrSKLfz8YWGL+5TDkuwvj+tOtxu+UsvF2o= Subject key identifier: 49:46:02:76:20:F1:DC:F5:FB:F7:7C:CA:D1:1E:32:63:0F:3E:2D:49 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26E834911C60015EE7780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c3372dd-c768-3808-8128-5ce618ba37f9.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6e:83:49:11:c6:00:15:ee:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b9bafde7-ceb4-48df-a4cf-126a947cadd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:11:63:7c:0c:07:1d:07:d6:05:00:76:1c: bb:37:c9:c8:22:7b:1b:8e:2f:dc:c8:f2:e2:c1:e2: 9d:72:21:42:cb:c6:a8:b3:e7:81:61:27:1f:29:db: fe:9b:43:52:df:86:a0:49:b8:7c:fe:e7:00:e6:77: ad:18:9f:7b:90:69:45:6e:79:43:c8:14:28:87:eb: a9:e6:b4:e2:95:85:57:7d:2e:eb:2e:42:eb:05:92: 02:41:78:a5:a7:5b:7c:72:5e:79:6d:74:b0:35:db: c6:69:d3:06:e1:5f:12:45:f1:42:a8:1c:7b:f6:44: 2b:bc:25:27:b1:9d:12:c1:35:02:52:45:bc:7f:81: fe:56:58:6c:8f:d0:1b:43:06:56:f0:bc:d0:fb:3d: 8e:df:c4:6a:e7:b7:4a:b9:4a:53:4f:f9:82:b9:d1: 25:11:c2:8f:a6:10:9c:6e:03:f4:a0:5b:f2:47:58: 3a:85:3f:08:2b:e8:ef:b5:7c:94:ff:dc:9e:f8:87: f3:4b:38:be:bf:6b:d4:7f:a6:39:96:72:a5:9f:fa: e6:41:58:49:c2:74:15:b6:7c:1a:14:c4:08:17:17: 42:f7:ea:e5:45:d3:3f:94:b8:bf:93:b9:82:8d:27: 55:b5:c0:20:04:f4:44:5f:67:f4:58:9d:0d:a5:43: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:02:76:20:F1:DC:F5:FB:F7:7C:CA:D1:1E:32:63:0F:3E:2D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c3372dd-c768-3808-8128-5ce618ba37f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:eb:da:55:a3:94:3e:73:aa:97:69:7f:b4:2f:c8:6e:82:a2: c8:15:19:93:0e:81:66:ac:1f:ec:65:49:63:d5:bb:75:3c:30: d3:90:3d:c0:22:e9:19:ab:17:78:42:6a:f3:ed:a2:84:6b:95: 7f:f5:8b:6d:33:a9:4d:3e:e8:c6:38:aa:a5:f4:ec:e7:f0:a9: 43:e2:62:f5:1f:6c:6d:bb:ce:fb:00:34:07:55:23:18:52:64: ce:22:12:67:57:2b:61:ef:25:d1:94:35:82:05:8a:47:1d:94: 79:d1:64:2d:b2:29:31:4a:76:ab:cb:93:5f:e8:5d:93:27:06: a0:c9:f9:1c:bd:b8:a9:e6:9b:cb:70:fd:16:52:56:68:f1:79: 6e:ca:84:5b:8b:ec:19:df:ae:36:f0:41:5b:e6:9b:16:e2:2b: c6:23:20:9a:88:54:4e:12:bb:c2:82:b2:4d:8f:aa:df:d7:88: 48:5b:83:90:e4:0a:9e:5a:c2:ab:a2:58:f6:97:ae:20:5b:c4: 07:7e:76:da:c1:62:4a:58:14:8c:bf:7f:ff:89:99:77:0e:86: 59:f4:75:7a:cf:52:1a:c0:0c:81:11:8d:65:48:68:d7:35:eb: 2f:b1:f0:cf:38:55:a8:4f:e4:05:07:69:51:1f:f7:dd:c0:cf: 0c:f8:c6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m6DSRHGABXud4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjliYWZkZTctY2ViNC00OGRmLWE0Y2YtMTI2YTk0N2NhZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLcRY3wMBx0H1gUAdhy7N8nIInsbji/cyPLi weKdciFCy8aos+eBYScfKdv+m0NS34agSbh8/ucA5netGJ97kGlFbnlDyBQoh+up 5rTilYVXfS7rLkLrBZICQXilp1t8cl55bXSwNdvGadMG4V8SRfFCqBx79kQrvCUn sZ0SwTUCUkW8f4H+Vlhsj9AbQwZW8LzQ+z2O38Rq57dKuUpTT/mCudElEcKPphCc bgP0oFvyR1g6hT8IK+jvtXyU/9ye+IfzSzi+v2vUf6Y5lnKln/rmQVhJwnQVtnwa FMQIFxdC9+rlRdM/lLi/k7mCjSdVtcAgBPREX2f0WJ0NpUPmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElGAnYg8dz1+/d8ytEeMmMPPi1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2MzMzcyZGQtYzc2OC0z ODA4LTgxMjgtNWNlNjE4YmEzN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3r2lWjlD5zqpdpf7QvyG6CosgVGZMOgWasH+xlSWPVu3U8MNOQPcAi 6RmrF3hCavPtooRrlX/1i20zqU0+6MY4qqX07OfwqUPiYvUfbG27zvsANAdVIxhS ZM4iEmdXK2HvJdGUNYIFikcdlHnRZC2yKTFKdqvLk1/oXZMnBqDJ+Ry9uKnmm8tw /RZSVmjxeW7KhFuL7BnfrjbwQVvmmxbiK8YjIJqIVE4Su8KCsk2Pqt/XiEhbg5Dk Cp5awquiWPaXriBbxAd+dtrBYkpYFIy/f/+JmXcOhln0dXrPUhrADIERjWVIaNc1 6y+x8M84VahP5AUHaVEf993Azwz4xjs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:27 2025 by rpki-client