$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/539af042-ba8b-3d81-9daf-ef89dc41f734.roa File: 539af042-ba8b-3d81-9daf-ef89dc41f734.roa (raw, json) Hash identifier: gdCWu0Ccxf0rcyzzqe2Qd3hR83FR+KHosYgfoABUztA= Subject key identifier: 31:EB:3A:E7:44:76:A8:52:99:6F:D4:C8:44:B9:02:75:13:9A:ED:7F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26B4E84C62415AC0D7380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/539af042-ba8b-3d81-9daf-ef89dc41f734.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:4e:84:c6:24:15:ac:0d:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=f52d3be2-e0d7-47db-9eb5-42a682e0a980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:7b:27:63:6e:af:9f:11:0f:b5:f4:e7:ef: 28:34:31:2b:a4:b9:aa:6d:fd:b8:2b:06:30:de:96: 69:8f:7d:c4:04:a5:70:31:32:d4:84:44:68:3d:76: 25:b8:d4:a2:44:59:98:98:07:a9:8c:2b:d4:60:51: a9:68:59:c3:20:52:5b:36:9b:63:95:bd:16:6c:f8: db:df:de:06:61:27:2c:a1:22:c4:c3:5b:bd:74:1d: 34:22:34:20:f3:b3:ce:5a:42:c3:02:c9:dc:a9:ff: 43:3c:dc:1a:49:ad:3d:0b:1d:ec:d4:6c:43:63:67: 00:14:ec:af:a1:46:f2:12:1c:69:da:f8:18:5e:f2: bb:4a:9c:6d:d5:91:30:f3:1a:83:e9:ae:a4:c8:04: ab:92:ec:5b:26:e5:32:8f:f7:01:ca:8d:d9:cc:e5: ea:75:da:bf:d5:61:31:18:33:af:f3:30:65:08:87: e3:9c:b4:92:8a:c7:d5:4e:94:07:46:6a:10:09:90: 78:47:15:ea:29:0e:75:ce:23:f3:5f:c2:e1:ad:37: 03:78:61:94:19:33:3e:51:ab:e4:c9:67:76:6a:1e: 84:3e:c5:86:c6:82:2e:c5:e2:63:e9:ba:85:9d:2e: d1:e1:16:1b:50:ae:8c:d2:d2:ad:6d:45:5c:7b:aa: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EB:3A:E7:44:76:A8:52:99:6F:D4:C8:44:B9:02:75:13:9A:ED:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/539af042-ba8b-3d81-9daf-ef89dc41f734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:db:1b:f4:b5:6a:23:40:f6:77:b8:90:76:5a:68:41:d3:ce: cc:a9:44:8b:9a:96:08:0a:c9:2c:08:86:1d:79:12:74:8a:29: 6e:28:fa:86:dd:2f:36:97:d0:28:6e:6b:46:88:ac:ce:ca:38: 4f:b0:b4:a2:c7:c1:3a:84:ed:9e:11:c7:dc:27:fe:24:7d:3c: 3d:89:0b:c9:f6:fa:04:bc:21:31:2c:a0:38:07:b5:89:82:70: 78:63:3f:84:91:44:f2:2e:2d:37:01:1d:fb:2e:07:fc:85:91: c5:5c:c6:55:f4:08:90:f7:27:ad:9c:54:92:5b:a3:61:1d:15: 63:d6:a3:c3:bd:67:80:5d:03:6c:7a:43:de:2d:53:22:c2:45: ac:95:a2:81:1c:7e:70:db:e3:85:8c:26:53:d0:f9:c1:87:01: 69:06:94:bf:83:81:85:c3:8f:59:ad:df:75:12:11:d0:60:59: 23:a3:9f:58:ab:5b:d4:99:41:14:4c:d3:f7:fe:63:c8:75:f4: cd:12:bd:5e:50:01:12:97:6b:90:f8:40:9c:7e:e2:0b:1c:9c: 30:a9:c6:b8:27:9a:78:16:c9:6f:e2:dc:61:1e:04:cb:ff:44: 05:a1:0e:1e:73:b0:92:f5:42:ad:ef:7d:d1:92:f4:89:c7:54: 7c:c1:8b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mtOhMYkFawNc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZjUyZDNiZTItZTBkNy00N2RiLTllYjUtNDJhNjgyZTBhOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG97J2Nur58RD7X05+8oNDErpLmqbf24KwYw 3pZpj33EBKVwMTLUhERoPXYluNSiRFmYmAepjCvUYFGpaFnDIFJbNptjlb0WbPjb 394GYScsoSLEw1u9dB00IjQg87POWkLDAsncqf9DPNwaSa09Cx3s1GxDY2cAFOyv oUbyEhxp2vgYXvK7Spxt1ZEw8xqD6a6kyASrkuxbJuUyj/cByo3ZzOXqddq/1WEx GDOv8zBlCIfjnLSSisfVTpQHRmoQCZB4RxXqKQ51ziPzX8LhrTcDeGGUGTM+Uavk yWd2ah6EPsWGxoIuxeJj6bqFnS7R4RYbUK6M0tKtbUVce6rfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHrOudEdqhSmW/UyES5AnUTmu1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTM5YWYwNDItYmE4Yi0z ZDgxLTlkYWYtZWY4OWRjNDFmNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7bG/S1aiNA9ne4kHZaaEHTzsypRIualggKySwIhh15EnSKKW4o+obd LzaX0Chua0aIrM7KOE+wtKLHwTqE7Z4Rx9wn/iR9PD2JC8n2+gS8ITEsoDgHtYmC cHhjP4SRRPIuLTcBHfsuB/yFkcVcxlX0CJD3J62cVJJbo2EdFWPWo8O9Z4BdA2x6 Q94tUyLCRayVooEcfnDb44WMJlPQ+cGHAWkGlL+DgYXDj1mt33USEdBgWSOjn1ir W9SZQRRM0/f+Y8h19M0SvV5QARKXa5D4QJx+4gscnDCpxrgnmngWyW/i3GEeBMv/ RAWhDh5zsJL1Qq3vfdGS9InHVHzBi9M= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:08 2025 by rpki-client