$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cc08d43-63a1-3d73-a145-e40f73e576b5.roa File: 7cc08d43-63a1-3d73-a145-e40f73e576b5.roa (raw, json) Hash identifier: faQAB/cyndOrKdIJBzyDeV+pTW2KKxGtzAtsqO1W3Lk= Subject key identifier: C4:3D:CD:9C:9D:DC:24:61:08:9A:7B:F2:CD:B7:0E:F3:60:EB:D5:67 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26B3CA382E1E8DCC23100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cc08d43-63a1-3d73-a145-e40f73e576b5.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:3c:a3:82:e1:e8:dc:c2:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=07974a39-4a02-4def-867a-88193ac0f106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:2a:79:34:3e:1c:6b:65:04:5a:3d:f1:fa: 32:1c:4b:7f:c3:c4:5b:b1:6b:00:3a:1f:e9:f6:c4: 02:94:e3:09:a9:54:71:4c:f8:ea:ac:fd:be:d8:4b: 36:79:b4:ef:34:e2:d8:18:c5:6c:ef:43:5c:79:f0: 69:21:09:c2:e8:42:55:5f:c9:61:b3:de:32:d7:84: b0:ff:b2:ff:be:bc:d1:34:c0:3b:dd:32:0d:58:f1: 56:58:1f:60:b3:99:8b:b6:63:88:14:bb:e7:03:62: 4e:d6:37:22:47:cf:62:75:80:47:10:93:82:1a:8f: d7:f1:8a:76:b7:9e:c3:d2:e4:80:16:55:97:8c:37: 84:e0:c4:1b:50:aa:25:7d:5e:6d:a5:e1:f9:77:87: a4:f4:7a:d7:cd:b4:42:eb:1b:2d:f8:fa:19:8e:76: 84:77:ab:e8:f6:92:0b:b5:70:c8:45:a1:65:12:e9: c1:05:1b:46:93:06:38:6e:ee:00:3a:15:38:d5:60: ac:0f:0a:33:bb:ba:2a:27:b1:90:98:d4:05:a2:d1: 07:79:5c:8c:53:f4:4c:34:8c:fb:a1:4d:64:31:a3: c4:f9:c9:d9:a8:1a:9d:23:6c:cc:31:1b:2a:3d:14: 7b:dc:67:0a:52:71:cc:4f:31:f1:3a:ae:8e:fa:b9: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3D:CD:9C:9D:DC:24:61:08:9A:7B:F2:CD:B7:0E:F3:60:EB:D5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cc08d43-63a1-3d73-a145-e40f73e576b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:82:86:e6:20:24:45:8b:5a:e0:b9:53:66:e6:fa:66:35:4f: 1d:9b:cc:e8:61:98:b0:c1:a5:2e:64:dd:64:a8:7d:dd:e6:2b: 43:a9:3e:5a:5e:66:1e:2b:56:5a:d5:c8:08:a7:a9:65:10:0f: d3:95:1a:e0:00:50:74:1c:87:33:2e:2c:8d:b4:52:b5:2b:2f: bb:ee:60:27:74:49:2d:1b:58:d5:2d:ad:2b:a4:6b:fe:bb:6c: 66:be:6a:21:46:c6:40:eb:c3:02:c7:c4:1b:5f:f1:6e:80:80: 79:19:52:50:1a:36:74:ac:6d:00:02:1b:91:95:06:d8:f4:08: db:4a:cd:54:b0:c5:87:24:51:7d:78:ef:46:20:5d:a2:4c:e9: 12:78:ee:92:5f:da:76:79:93:dd:c1:f0:05:08:4d:85:4c:1e: d6:a0:ee:d1:f3:4f:09:1a:a0:fe:74:e9:d4:e3:d4:e6:51:2e: 70:f0:da:6d:d6:ee:98:58:2d:1d:3c:ce:81:14:9c:2a:8d:3f: 25:f2:dc:fb:0e:18:31:fa:fe:f4:f0:17:55:a0:5a:31:bf:ab: 8c:e0:3d:13:0a:5c:dc:35:85:2e:3c:83:63:f2:18:c3:5b:6f: 59:96:fe:81:2a:92:42:d2:17:9f:6d:01:6a:6f:a7:6e:29:e7: 15:f9:7e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0ms8o4Lh6NzCMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDc5NzRhMzktNGEwMi00ZGVmLTg2N2EtODgxOTNhYzBmMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk8qeTQ+HGtlBFo98foyHEt/w8RbsWsAOh/p 9sQClOMJqVRxTPjqrP2+2Es2ebTvNOLYGMVs70NcefBpIQnC6EJVX8lhs94y14Sw /7L/vrzRNMA73TINWPFWWB9gs5mLtmOIFLvnA2JO1jciR89idYBHEJOCGo/X8Yp2 t57D0uSAFlWXjDeE4MQbUKolfV5tpeH5d4ek9HrXzbRC6xst+PoZjnaEd6vo9pIL tXDIRaFlEunBBRtGkwY4bu4AOhU41WCsDwozu7oqJ7GQmNQFotEHeVyMU/RMNIz7 oU1kMaPE+cnZqBqdI2zMMRsqPRR73GcKUnHMTzHxOq6O+rk4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ9zZyd3CRhCJp78s23DvNg69VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2NjMDhkNDMtNjNhMS0z ZDczLWExNDUtZTQwZjczZTU3NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+ChuYgJEWLWuC5U2bm+mY1Tx2bzOhhmLDBpS5k3WSofd3mK0OpPlpe Zh4rVlrVyAinqWUQD9OVGuAAUHQchzMuLI20UrUrL7vuYCd0SS0bWNUtrSuka/67 bGa+aiFGxkDrwwLHxBtf8W6AgHkZUlAaNnSsbQACG5GVBtj0CNtKzVSwxYckUX14 70YgXaJM6RJ47pJf2nZ5k93B8AUITYVMHtag7tHzTwkaoP506dTj1OZRLnDw2m3W 7phYLR08zoEUnCqNPyXy3PsOGDH6/vTwF1WgWjG/q4zgPRMKXNw1hS48g2PyGMNb b1mW/oEqkkLSF59tAWpvp24p5xX5foQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:37 2025 by rpki-client