$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa File: a998f21f-effb-392c-abf8-e55e5270da70.roa (raw, json) Hash identifier: +/1ESnPvZ9NsZRigydm8ojlfaz9ZQEnficfHXaoFTbU= Subject key identifier: 21:5F:B0:15:F9:AA:E0:FE:3E:E7:75:72:E0:F7:72:95:A3:D1:A6:21 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D2584736B17BF3A0858F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:58:47:36:b1:7b:f3:a0:85:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c1b3f4c0-bcd1-47f2-b8a5-186e8bf7ba74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:42:d2:80:39:cf:05:d2:b6:10:cf:66:09: 33:bf:ef:bd:30:2e:17:a4:c3:e2:6e:85:ca:fb:da: 62:da:e6:b1:38:9f:c9:38:45:5e:83:f8:1f:c7:4f: 94:5b:b1:e0:09:ab:cb:a7:19:f0:62:0a:9f:45:b4: c4:7c:00:60:49:4b:aa:bc:33:7c:14:d3:90:79:63: 6d:40:9d:85:15:f9:fd:cd:dc:2b:27:06:7c:39:72: 93:7b:95:ad:73:96:a3:c2:bf:2d:34:bd:5c:e5:0c: 6c:b2:63:70:5f:dd:a0:87:b5:ea:6b:6c:fa:f2:0c: fa:4a:46:9b:54:20:5f:a4:48:27:34:39:58:ed:05: 0a:fb:b8:3b:26:67:17:60:a3:ad:9a:0b:09:9f:5b: 55:25:ef:5e:3a:58:95:2a:2d:27:47:79:bc:34:2d: 82:c0:9f:b7:dd:a5:ed:16:f0:df:2d:c8:49:7a:a9: 7d:d4:a4:e9:42:9e:df:9b:0d:32:9d:a3:ee:94:97: a8:3c:f6:89:0c:52:23:0e:ff:6c:ef:76:1b:5c:b3: 11:38:d0:45:ed:b4:c3:0d:1f:ab:f4:50:e3:ab:d2: aa:e5:96:7c:53:1c:39:3b:a5:c1:5b:00:4b:ea:bd: 5d:43:06:b5:b7:89:bc:c8:cc:c0:4a:6b:06:42:bb: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:B0:15:F9:AA:E0:FE:3E:E7:75:72:E0:F7:72:95:A3:D1:A6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:9a:aa:fb:80:44:e8:a1:a0:6e:56:7f:09:7b:06:20:43: a1:c7:29:83:6c:39:96:1c:2a:b4:d4:61:60:2a:90:04:9c:f2: bb:d5:e6:bc:dc:8b:61:d3:f0:67:c3:eb:31:5b:41:56:48:9b: 21:f2:f8:fb:1d:85:67:c8:76:77:96:4f:0b:2b:f2:87:55:29: e6:16:29:a7:1e:2a:e6:76:9e:1f:4c:13:88:fa:30:17:f8:8e: b9:9c:a0:dc:2b:04:0f:38:d7:ab:21:43:53:ad:ac:71:29:01: 01:6e:38:ad:74:a0:cd:b9:37:23:13:f1:a0:2f:91:ff:da:46: 8d:bf:b0:ca:57:23:0f:a8:62:9e:1c:1b:86:d0:5a:4d:48:17: 7c:91:30:f8:62:8b:ed:19:68:0d:28:8d:24:29:50:9a:3a:dd: 06:52:6f:ba:9c:d2:ed:c7:7b:75:3d:15:77:a7:b0:ee:4b:17: 2c:36:9b:ea:e4:d3:bd:ad:4c:47:39:e2:20:d4:24:5d:1d:21: 69:cb:bd:71:de:1e:98:72:27:76:23:00:29:fc:c1:47:af:af: b2:db:f9:2a:9a:db:da:96:ef:4a:ac:be:92:87:2e:29:0d:35: 87:49:3f:d3:40:72:87:5e:f9:2c:ec:b6:46:90:17:3f:7e:f6: a5:40:12:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lhHNrF786CFj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzFiM2Y0YzAtYmNkMS00N2YyLWI4YTUtMTg2ZThiZjdiYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9dC0oA5zwXSthDPZgkzv++9MC4XpMPiboXK +9pi2uaxOJ/JOEVeg/gfx0+UW7HgCavLpxnwYgqfRbTEfABgSUuqvDN8FNOQeWNt QJ2FFfn9zdwrJwZ8OXKTe5Wtc5ajwr8tNL1c5QxssmNwX92gh7Xqa2z68gz6Skab VCBfpEgnNDlY7QUK+7g7JmcXYKOtmgsJn1tVJe9eOliVKi0nR3m8NC2CwJ+33aXt FvDfLchJeql91KTpQp7fmw0ynaPulJeoPPaJDFIjDv9s73YbXLMRONBF7bTDDR+r 9FDjq9Kq5ZZ8Uxw5O6XBWwBL6r1dQwa1t4m8yMzASmsGQru/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFfsBX5quD+Pud1cuD3cpWj0aYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTk5OGYyMWYtZWZmYi0z OTJjLWFiZjgtZTU1ZTUyNzBkYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn2mqr7gETooaBuVn8JewYgQ6HHKYNsOZYcKrTUYWAqkASc8rvV5rzc i2HT8GfD6zFbQVZImyHy+PsdhWfIdneWTwsr8odVKeYWKaceKuZ2nh9ME4j6MBf4 jrmcoNwrBA8416shQ1OtrHEpAQFuOK10oM25NyMT8aAvkf/aRo2/sMpXIw+oYp4c G4bQWk1IF3yRMPhii+0ZaA0ojSQpUJo63QZSb7qc0u3He3U9FXensO5LFyw2m+rk 072tTEc54iDUJF0dIWnLvXHeHphyJ3YjACn8wUevr7Lb+Sqa29qW70qsvpKHLikN NYdJP9NAcode+SzstkaQFz9+9qVAEiQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:13 2025 by rpki-client