$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa File: ab86da4b-6cad-3670-b540-1336eb14127f.roa (raw, json) Hash identifier: Luvm4hGMA/kdBD0XUb0cikHnOdHw4G98yrjxBpPyEGk= Subject key identifier: 58:4E:B9:20:C7:B6:85:EE:81:A2:40:BF:22:F1:C2:9C:82:11:79:65 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D25A02A0ACCB1A93EE7960 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5a:02:a0:ac:cb:1a:93:ee:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=1764d0bb-db98-485b-a834-2efe0996fb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:98:88:6f:4b:08:a9:77:99:60:9b:04:66: 28:e5:b8:d2:a1:7f:86:69:4d:03:46:8b:e5:7f:52: 8d:da:72:c9:05:f6:79:83:f4:bd:4c:1f:47:9a:c2: 19:01:93:cc:f5:08:8c:89:b5:0f:82:d0:24:cf:e0: f0:c4:0f:90:0f:90:39:e6:03:70:4f:9a:e7:34:5e: 95:98:9e:54:ff:0c:81:ed:14:3d:ef:cb:37:a5:53: cc:f1:53:70:7a:bc:84:3d:5d:1e:7e:73:fc:66:8e: f9:ff:2f:28:c7:32:fc:af:16:09:2b:28:59:7e:86: 59:83:2c:95:59:28:58:ed:36:26:f6:fa:f8:eb:0c: 28:80:25:61:b8:43:49:8e:ad:77:7e:55:d6:28:25: 88:9b:35:44:f4:8c:d3:a1:68:d0:f7:67:68:34:5d: 2a:1e:3a:66:4c:a8:b9:a5:b3:c8:5c:70:1c:72:bd: 57:8e:43:c8:10:4b:fe:d3:96:c8:56:e2:36:9e:1e: bd:24:0e:7f:c7:90:73:df:02:5d:3b:9a:2d:4c:75: 5f:4e:5c:67:32:0f:0c:90:1c:4e:38:61:bd:41:87: 7f:8b:89:a4:ad:05:3c:05:2f:45:4b:9d:89:72:67: 6b:3b:9a:33:48:d3:c2:91:df:92:02:0d:60:96:67: ab:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:B9:20:C7:B6:85:EE:81:A2:40:BF:22:F1:C2:9C:82:11:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f8:96:c7:7f:37:35:81:7e:3d:6f:59:a9:ab:3e:9e:a0:45: e9:59:a9:a6:a1:8a:d7:d0:b6:bd:42:fd:bb:b3:32:68:af:ee: 35:c9:4d:fa:dd:ae:8b:7b:df:9e:42:28:e8:c3:e3:09:25:a2: 59:36:da:69:7e:90:5a:6f:6f:9d:1c:b1:79:07:e2:c3:da:1c: e5:52:4a:bc:14:94:3c:b2:37:4d:86:91:68:19:2a:e4:4f:e2: 3b:e8:09:92:af:2f:67:e2:7f:39:70:1a:93:15:a5:64:19:55: 86:00:5a:aa:ad:02:a7:d7:c0:7f:05:93:82:f9:22:46:a2:ec: 0c:23:1a:dd:26:33:2e:52:52:16:af:20:bc:6e:14:1e:1a:33: 64:b1:48:6c:f2:ba:d3:d9:26:ef:37:4c:65:c8:99:44:a4:0b: 42:c2:cf:ad:68:32:7a:0f:21:cd:13:08:5d:a3:0f:8e:d0:e0: 6f:72:d9:f5:8f:ab:ad:3a:55:cd:48:10:b6:95:3c:a4:e2:cc: 3b:3c:d9:4b:13:c5:a0:2c:53:17:af:fd:42:e9:f6:7a:61:a0: 00:28:09:e7:9f:39:4b:14:41:de:0c:1e:ab:8c:d5:2c:55:d0: d8:51:0f:3a:9a:d5:15:f8:09:d0:15:47:67:cd:0b:ad:b9:7e: 5f:22:43:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0loCoKzLGpPueWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MTc2NGQwYmItZGI5OC00ODViLWE4MzQtMmVmZTA5OTZmYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNyYiG9LCKl3mWCbBGYo5bjSoX+GaU0DRovl f1KN2nLJBfZ5g/S9TB9HmsIZAZPM9QiMibUPgtAkz+DwxA+QD5A55gNwT5rnNF6V mJ5U/wyB7RQ978s3pVPM8VNweryEPV0efnP8Zo75/y8oxzL8rxYJKyhZfoZZgyyV WShY7TYm9vr46wwogCVhuENJjq13flXWKCWImzVE9IzToWjQ92doNF0qHjpmTKi5 pbPIXHAccr1XjkPIEEv+05bIVuI2nh69JA5/x5Bz3wJdO5otTHVfTlxnMg8MkBxO OGG9QYd/i4mkrQU8BS9FS52JcmdrO5ozSNPCkd+SAg1glmerjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhOuSDHtoXugaJAvyLxwpyCEXllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWI4NmRhNGItNmNhZC0z NjcwLWI1NDAtMTMzNmViMTQxMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr4lsd/NzWBfj1vWamrPp6gRelZqaahitfQtr1C/buzMmiv7jXJTfrd rot7355CKOjD4wklolk22ml+kFpvb50csXkH4sPaHOVSSrwUlDyyN02GkWgZKuRP 4jvoCZKvL2fifzlwGpMVpWQZVYYAWqqtAqfXwH8Fk4L5Ikai7AwjGt0mMy5SUhav ILxuFB4aM2SxSGzyutPZJu83TGXImUSkC0LCz61oMnoPIc0TCF2jD47Q4G9y2fWP q606Vc1IELaVPKTizDs82UsTxaAsUxev/ULp9nphoAAoCeefOUsUQd4MHquM1SxV 0NhRDzqa1RX4CdAVR2fNC625fl8iQ3c= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:52 2025 by rpki-client