$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa File: 5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa (raw, json) Hash identifier: 3JTkGjJIt+oUVWyAWtGl24c+/9BGaLLjdpEihTkZ16A= Subject key identifier: 1B:24:99:43:B1:69:88:1C:53:B9:C8:A3:52:DE:8A:40:BD:3E:07:99 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26CB337A5C6057DFA3780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6c:b3:37:a5:c6:05:7d:fa:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a839f464-fd9f-40eb-8306-38a6815d9fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:0f:3f:21:84:f4:5d:b8:1e:3a:51:e0:00: 25:ad:90:6f:81:b4:08:12:91:99:19:f5:6b:ab:88: 99:35:7f:fc:03:55:81:9b:b5:f1:4a:1d:f7:93:66: fb:c1:72:7c:ae:f6:7f:ba:6a:01:0b:ec:ec:98:d2: 63:9a:ef:12:8c:33:5a:78:61:db:5c:2c:ba:41:66: 0b:68:e2:60:b6:d0:df:7d:5f:13:19:a8:6e:75:cb: ba:56:6f:4c:fe:60:b3:97:11:ea:b0:c8:d1:ef:9e: 7a:67:f0:23:1e:b6:f9:6d:64:5d:73:81:0c:73:c6: 57:5b:99:0f:cd:a3:df:95:ad:15:af:3f:90:aa:df: e2:05:ee:63:ee:1f:e2:a1:01:b3:d3:99:bf:06:dc: 94:71:62:d8:e9:e0:e2:90:13:2f:ed:ab:2d:de:0f: 60:bb:b5:18:b5:39:c7:58:56:96:3a:f0:38:39:32: 9a:93:69:8e:1a:61:15:37:ea:73:fa:ac:e9:e2:64: e2:84:23:b9:b7:3c:11:e7:45:33:9d:43:f6:ef:b3: dc:de:db:80:13:e3:85:be:63:ee:80:95:ab:23:db: f1:ea:a6:49:6d:3e:f9:97:58:21:b2:88:18:cf:53: 6c:56:9a:a2:e1:c3:61:9b:a1:7a:b9:c1:82:0e:64: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:24:99:43:B1:69:88:1C:53:B9:C8:A3:52:DE:8A:40:BD:3E:07:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:05:a6:8f:9f:02:de:cb:8f:c3:34:88:0a:4a:e6:e8:be: 5e:53:92:6e:94:82:25:ed:14:77:dd:1a:a6:e2:eb:b2:3a:71: e1:50:13:e9:df:a2:66:b3:a3:07:41:7e:0d:50:8d:39:f2:f1: 07:06:e0:13:a7:50:bd:fe:82:51:0e:ee:56:e6:26:4d:4b:87: d6:29:31:24:9f:9f:34:6f:96:1b:f5:90:2c:a6:54:0d:f2:5a: 82:e1:fe:ce:c8:de:4a:b7:fa:cc:75:be:76:3d:36:63:ad:1f: 08:b4:c9:21:6e:52:fe:33:00:fb:59:84:d9:b1:f1:e9:32:e3: b6:b1:71:68:41:db:66:8e:3e:eb:1e:91:eb:04:95:a6:46:e4: f9:23:ac:ed:c6:9b:cd:2b:d0:2f:3e:40:6b:5c:89:3f:5e:3d: 7d:ce:54:2c:1e:55:6b:ce:30:25:02:66:07:75:37:a0:d4:aa: 7e:d3:f0:f3:d7:34:43:06:78:7e:fa:51:a6:c5:a1:64:7c:e8: e3:f1:51:2e:87:fc:17:e5:11:a3:50:6a:7f:66:d1:ff:23:e7: ca:f1:a6:aa:f0:a4:bd:cd:da:df:f3:8d:9a:d5:83:65:18:8e: 4f:dc:fd:ba:04:43:a8:1c:fc:1a:26:17:8a:4c:d0:d3:22:13: 63:90:27:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0myzN6XGBX36N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTgzOWY0NjQtZmQ5Zi00MGViLTgzMDYtMzhhNjgxNWQ5ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudoPPyGE9F24HjpR4AAlrZBvgbQIEpGZGfVr q4iZNX/8A1WBm7XxSh33k2b7wXJ8rvZ/umoBC+zsmNJjmu8SjDNaeGHbXCy6QWYL aOJgttDffV8TGahudcu6Vm9M/mCzlxHqsMjR7556Z/AjHrb5bWRdc4EMc8ZXW5kP zaPfla0Vrz+Qqt/iBe5j7h/ioQGz05m/BtyUcWLY6eDikBMv7ast3g9gu7UYtTnH WFaWOvA4OTKak2mOGmEVN+pz+qzp4mTihCO5tzwR50UznUP277Pc3tuAE+OFvmPu gJWrI9vx6qZJbT75l1ghsogYz1NsVpqi4cNhm6F6ucGCDmQDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBskmUOxaYgcU7nIo1LeikC9PgeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWI5ZDg3MDktY2Y3MS0z YjYxLWE5ZjYtNTJmOGEzMDNhNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmmBaaPnwLey4/DNIgKSubovl5Tkm6UgiXtFHfdGqbi67I6ceFQE+nf omazowdBfg1QjTny8QcG4BOnUL3+glEO7lbmJk1Lh9YpMSSfnzRvlhv1kCymVA3y WoLh/s7I3kq3+sx1vnY9NmOtHwi0ySFuUv4zAPtZhNmx8eky47axcWhB22aOPuse kesElaZG5PkjrO3Gm80r0C8+QGtciT9ePX3OVCweVWvOMCUCZgd1N6DUqn7T8PPX NEMGeH76UabFoWR86OPxUS6H/BflEaNQan9m0f8j58rxpqrwpL3N2t/zjZrVg2UY jk/c/boEQ6gc/BomF4pM0NMiE2OQJ2I= -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:33 2025 by rpki-client