$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa File: 5aa838e4-76b0-398e-bf6c-87040c977a3a.roa (raw, json) Hash identifier: cZX/4R5yBHC9/Am4kiuRCTNv0MdkXyGnSQC7LID9630= Subject key identifier: 82:3B:33:41:D0:90:54:2A:2A:EF:25:94:CA:10:99:15:3E:14:EE:48 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D2402FBCDD797E89951080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:40:2f:bc:dd:79:7e:89:95:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=76456916-d16b-4e4e-bd79-cad27c759a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:ea:11:0d:9e:7c:f3:09:a2:18:88:d3:d7: 79:8a:74:ce:d5:8d:dc:16:83:9c:88:ba:9b:f4:02: 6d:82:71:01:3b:a7:b7:9a:f8:1a:6a:17:f1:8f:1d: 6c:dd:07:a7:87:9a:4a:46:71:87:58:29:28:a3:75: ae:15:09:72:8e:ca:8c:9c:65:c4:da:be:16:9e:c0: 66:fd:58:f0:fc:82:67:fc:85:9e:33:05:90:71:7d: af:1d:89:25:32:ce:1c:cd:5d:e0:51:d1:e9:78:6e: 6c:5f:c2:f6:b5:93:b8:c7:5d:de:ca:62:63:81:31: 18:84:7c:60:05:b1:ba:67:75:a0:60:d8:cc:3c:03: 97:3d:27:94:70:ce:74:a2:3a:58:1f:5b:ba:fa:8a: 72:16:a2:cb:ba:8b:13:7a:4d:94:c9:8c:c6:9c:cd: f0:33:24:a4:45:99:55:b6:b3:89:b0:b0:99:0f:f6: 23:cf:29:a4:4a:6c:2c:9f:e6:e7:f9:7e:6e:1e:15: c7:14:69:7f:1e:4e:cc:c0:48:70:f4:4a:b2:1c:8a: 26:39:78:a9:b8:99:e9:a6:84:b5:0c:f3:7b:6b:1f: b3:21:cf:4d:aa:e6:f5:10:85:4c:5f:88:4e:c8:97: 26:7e:31:b2:61:d6:2b:be:24:f1:6f:b3:1e:e8:1c: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3B:33:41:D0:90:54:2A:2A:EF:25:94:CA:10:99:15:3E:14:EE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:81:f9:20:f9:9b:00:a3:79:70:97:8a:b8:bb:cf:57:e9:6f: 0c:9e:ab:2c:c1:66:1b:30:d2:86:c0:10:bf:99:33:45:b8:b5: cc:09:28:e1:d2:79:50:16:b8:9d:a1:33:ad:59:b1:32:f3:9a: 53:37:08:86:94:10:dc:b3:40:f4:dc:07:8c:8f:89:8b:54:d4: 39:03:46:a0:f0:4e:2b:92:4f:fd:2b:a1:e6:79:89:97:20:72: a9:f9:f7:be:15:07:33:f4:6f:b9:2f:a3:81:d2:fb:ad:90:32: 86:38:99:b5:81:0e:b9:5d:dc:7f:bf:77:03:38:55:70:b4:d6: c9:d1:d3:46:aa:f7:e3:bc:0e:77:dc:79:86:d6:18:66:ff:88: 59:84:10:c3:67:f2:39:af:c8:ee:fd:eb:d9:a2:74:a2:8e:91: ad:00:d6:36:8f:74:2c:4b:22:37:df:c9:98:40:7f:7b:fb:88: cb:a4:bb:86:a8:44:69:03:0f:7a:19:a2:7e:47:bf:4a:12:de: 1e:b7:ee:c1:b3:a7:bf:ec:f4:2f:51:e9:19:58:bf:95:15:86: 6f:77:33:47:ad:6c:c9:47:a9:38:68:83:41:4d:e2:32:18:ee: aa:f7:ea:8b:d1:83:fa:bd:f8:b8:41:79:2a:7e:3b:69:89:f5: d9:67:6b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kAvvN15fomVEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzY0NTY5MTYtZDE2Yi00ZTRlLWJkNzktY2FkMjdjNzU5YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCfqEQ2efPMJohiI09d5inTO1Y3cFoOciLqb 9AJtgnEBO6e3mvgaahfxjx1s3Qenh5pKRnGHWCkoo3WuFQlyjsqMnGXE2r4WnsBm /Vjw/IJn/IWeMwWQcX2vHYklMs4czV3gUdHpeG5sX8L2tZO4x13eymJjgTEYhHxg BbG6Z3WgYNjMPAOXPSeUcM50ojpYH1u6+opyFqLLuosTek2UyYzGnM3wMySkRZlV trOJsLCZD/YjzymkSmwsn+bn+X5uHhXHFGl/Hk7MwEhw9EqyHIomOXipuJnppoS1 DPN7ax+zIc9Nqub1EIVMX4hOyJcmfjGyYdYrviTxb7Me6BzUOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII7M0HQkFQqKu8llMoQmRU+FO5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFhODM4ZTQtNzZiMC0z OThlLWJmNmMtODcwNDBjOTc3YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeB+SD5mwCjeXCXiri7z1fpbwyeqyzBZhsw0obAEL+ZM0W4tcwJKOHS eVAWuJ2hM61ZsTLzmlM3CIaUENyzQPTcB4yPiYtU1DkDRqDwTiuST/0roeZ5iZcg cqn5974VBzP0b7kvo4HS+62QMoY4mbWBDrld3H+/dwM4VXC01snR00aq9+O8Dnfc eYbWGGb/iFmEEMNn8jmvyO7969midKKOka0A1jaPdCxLIjffyZhAf3v7iMuku4ao RGkDD3oZon5Hv0oS3h637sGzp7/s9C9R6RlYv5UVhm93M0etbMlHqThog0FN4jIY 7qr36ovRg/q9+LhBeSp+O2mJ9dlna4Y= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:55 2025 by rpki-client