$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa File: 8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa (raw, json) Hash identifier: FCdTJocThrSiPiakC3PXUbb51kSZ5qGLDAicSbTFnV0= Subject key identifier: E7:7E:18:FB:A1:31:F1:14:33:BF:43:28:CE:86:80:3F:19:B8:CF:EF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D241FB6A0BF34ECBF63640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:41:fb:6a:0b:f3:4e:cb:f6:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=20121e6a-8760-4255-b272-dcaee084c86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:6d:b2:96:cc:a4:ff:f9:bd:70:65:3d:ac: 5a:d3:3d:be:b8:af:2a:16:3b:83:8a:84:43:a4:5c: e0:6d:01:1c:e2:96:83:c7:15:0f:75:69:80:1c:19: b5:35:91:f8:33:1b:c4:a8:80:ad:b6:fc:3d:8c:ed: 5f:ed:5f:43:f7:d3:c8:09:31:36:cd:3b:12:0d:d5: c9:31:d9:1b:8a:3a:66:7b:2b:d0:5a:33:55:33:46: 13:11:2f:a3:1c:5a:0d:ba:87:11:a7:76:dc:23:34: 75:e2:0c:81:64:a2:ef:bc:0e:e3:62:fb:87:86:c3: 95:b1:e4:f7:f3:ee:cd:cc:71:94:9b:91:7c:be:21: c1:d0:3a:36:8f:55:1e:7c:f1:0d:10:53:53:8c:73: 10:af:a0:0d:ee:a8:d7:da:dc:ce:53:a6:55:48:a1: 47:85:36:00:29:58:63:a5:6a:d5:22:4c:8f:c4:ed: 80:b1:bd:87:e4:db:9d:75:fe:fe:1c:13:d4:bb:34: 37:ee:67:25:81:f7:7a:94:46:a9:b2:59:26:5f:9f: ce:82:93:eb:c7:fd:af:01:31:d4:56:d9:5b:f5:e0: e1:06:38:23:52:88:c6:99:b1:9e:ba:6e:a8:3e:e2: e6:1d:15:a6:90:23:b0:fb:32:cf:fc:5d:44:22:94: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7E:18:FB:A1:31:F1:14:33:BF:43:28:CE:86:80:3F:19:B8:CF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:68:60:cd:1f:04:38:1d:ea:5f:00:72:a7:9a:bf:7b:55:f2: bd:b3:68:56:49:5e:bf:19:31:35:89:ec:62:ae:ba:38:cf:5b: ea:66:e3:ee:fb:06:2c:64:ed:f7:12:d3:74:e3:b9:a6:40:a4: 3d:29:ba:ed:51:6e:54:dd:7b:ed:11:eb:db:51:e6:57:4e:16: ce:1c:bc:c1:91:a5:31:b2:82:e9:c6:42:aa:ec:2e:15:21:5d: b7:e7:68:e1:92:27:c6:64:8b:1d:5c:b5:7f:e1:78:15:c6:f5: 55:35:d7:b5:a0:04:b9:1c:88:1a:56:84:16:60:bc:f3:9a:0e: 4e:d9:92:66:e0:66:41:1a:4d:f1:1f:40:70:2d:21:6b:28:63: d4:d7:4f:2f:b2:f3:a4:10:a1:52:8a:7f:25:fc:d4:4a:02:34: 4a:46:c3:41:39:e5:de:0c:8d:25:20:5d:b0:03:33:f2:01:8d: e4:6f:36:22:f9:94:80:b9:26:1e:06:9e:b6:1f:20:ad:5f:c3: fc:cb:b0:d0:e0:3f:08:70:ab:a5:b2:53:7b:aa:b0:9e:14:7a: a7:8c:0c:6e:16:45:14:95:eb:22:d5:47:cf:7d:69:34:b0:9b: 62:42:3b:ca:62:2e:f7:71:fc:2b:63:77:5c:e6:74:f1:da:50: 70:70:a2:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kH7agvzTsv2NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MjAxMjFlNmEtODc2MC00MjU1LWIyNzItZGNhZWUwODRjODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngBtspbMpP/5vXBlPaxa0z2+uK8qFjuDioRD pFzgbQEc4paDxxUPdWmAHBm1NZH4MxvEqICttvw9jO1f7V9D99PICTE2zTsSDdXJ MdkbijpmeyvQWjNVM0YTES+jHFoNuocRp3bcIzR14gyBZKLvvA7jYvuHhsOVseT3 8+7NzHGUm5F8viHB0Do2j1UefPENEFNTjHMQr6AN7qjX2tzOU6ZVSKFHhTYAKVhj pWrVIkyPxO2Asb2H5Nuddf7+HBPUuzQ37mclgfd6lEapslkmX5/OgpPrx/2vATHU Vtlb9eDhBjgjUojGmbGeum6oPuLmHRWmkCOw+zLP/F1EIpR7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd+GPuhMfEUM79DKM6GgD8ZuM/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGM2ODYyYzctOWVhMS0z N2Y0LWI4MjktZmY2ZmRlNjhkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhoYM0fBDgd6l8Acqeav3tV8r2zaFZJXr8ZMTWJ7GKuujjPW+pm4+77 Bixk7fcS03TjuaZApD0puu1RblTde+0R69tR5ldOFs4cvMGRpTGygunGQqrsLhUh XbfnaOGSJ8Zkix1ctX/heBXG9VU117WgBLkciBpWhBZgvPOaDk7ZkmbgZkEaTfEf QHAtIWsoY9TXTy+y86QQoVKKfyX81EoCNEpGw0E55d4MjSUgXbADM/IBjeRvNiL5 lIC5Jh4GnrYfIK1fw/zLsNDgPwhwq6WyU3uqsJ4UeqeMDG4WRRSV6yLVR899aTSw m2JCO8piLvdx/Ctjd1zmdPHaUHBwogQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:54 2025 by rpki-client