$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa File: b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa (raw, json) Hash identifier: bxsTla58RXLe+zEvszq6WH2rOwar6uTITq6DoYxnAms= Subject key identifier: 59:D3:D7:A4:FC:45:7B:1B:64:A4:4F:26:9D:68:94:A9:E0:1D:BB:F3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26DB65B0BE88F86361380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6d:b6:5b:0b:e8:8f:86:36:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2df756f7-05d0-4952-86be-aa23115a3ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:33:19:c0:ed:e4:df:a8:fb:c5:67:2a:79: fa:e7:30:ca:9a:0d:55:a0:29:7c:04:81:a0:b0:89: 46:cc:45:be:18:6e:2c:fd:b9:6d:76:16:ed:63:04: 44:2c:02:71:e2:db:41:7d:a6:96:76:46:a8:c6:02: 1c:84:2c:e3:43:fe:0c:8d:dc:3c:97:81:30:d4:c7: 87:27:4d:fa:60:17:e1:d0:de:b3:e9:ac:50:ef:f9: 73:c7:98:73:b4:e3:0d:31:24:07:ac:bf:6b:a4:3e: 9e:f8:07:cd:c4:d7:ce:36:c2:a3:fa:ce:05:55:ba: 0e:e7:64:c8:e6:ba:ff:d6:f1:e4:e1:3f:52:c5:e3: 0c:5a:49:b5:ea:d5:67:b0:0e:20:d6:e4:12:c2:9e: d2:18:33:4a:5b:d1:37:93:69:52:fd:54:fb:ec:7b: 6d:fd:3f:ba:35:44:0f:95:a4:34:38:db:2a:96:0a: 0b:a2:a8:9f:8b:31:29:45:39:7a:b1:66:0c:bd:9a: 2c:bb:84:b1:78:57:cb:fa:44:e1:52:d8:8c:e7:4c: 3b:12:8f:9f:08:d8:b5:94:40:ab:a4:b5:9e:15:a2: 3b:ee:45:bb:34:7e:33:cc:50:0a:6c:59:e6:98:00: 64:7a:98:32:e8:f7:06:36:8f:d4:96:86:2f:51:bd: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:D7:A4:FC:45:7B:1B:64:A4:4F:26:9D:68:94:A9:E0:1D:BB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:61:dc:34:1e:8b:6e:a0:f9:01:87:f0:dc:21:3a:46:a6:31: 6b:bf:92:a5:23:5f:b7:c4:31:c9:40:67:ba:f1:03:ac:ee:09: 85:ce:b9:13:fa:59:29:7b:a2:ab:ab:9c:9f:19:c3:56:51:f6: d7:d7:7c:69:c5:97:cc:af:1c:33:df:49:4b:be:28:08:60:87: 47:91:9a:83:d6:95:98:a7:66:f7:8b:de:82:de:bd:a1:da:1f: bd:b4:f0:ab:7d:72:86:67:df:82:b5:c7:05:d1:3f:56:c6:e9: f3:90:fb:df:58:8d:18:e7:5d:2c:2a:b7:8c:05:4f:a0:4a:df: d6:0d:cc:b5:2f:3c:dd:4e:5f:2e:60:7b:f6:32:aa:0d:b2:c0: c5:78:20:e7:5f:cd:97:91:c0:a9:9f:4e:44:3a:a2:fa:c1:44: 71:d9:db:46:fa:52:f9:51:95:e7:5d:d8:7e:2e:b2:5f:ed:69: 0b:24:f5:be:f0:e3:07:b6:6d:54:36:5d:1a:73:1d:03:22:24: 7e:23:42:fe:05:6d:08:85:6f:7b:dc:24:73:7b:79:dc:cb:42: d3:cf:37:6f:9d:00:88:2b:25:2e:b0:3f:54:96:42:1f:f9:cb: 8d:86:23:06:7b:a6:54:9d:2d:d3:ee:7f:9c:1b:89:d5:61:44: 51:90:18:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m22Wwvoj4Y2E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmRmNzU2ZjctMDVkMC00OTUyLTg2YmUtYWEyMzExNWEzZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLwzGcDt5N+o+8VnKnn65zDKmg1VoCl8BIGg sIlGzEW+GG4s/bltdhbtYwRELAJx4ttBfaaWdkaoxgIchCzjQ/4Mjdw8l4Ew1MeH J036YBfh0N6z6axQ7/lzx5hztOMNMSQHrL9rpD6e+AfNxNfONsKj+s4FVboO52TI 5rr/1vHk4T9SxeMMWkm16tVnsA4g1uQSwp7SGDNKW9E3k2lS/VT77Htt/T+6NUQP laQ0ONsqlgoLoqifizEpRTl6sWYMvZosu4SxeFfL+kThUtiM50w7Eo+fCNi1lECr pLWeFaI77kW7NH4zzFAKbFnmmABkepgy6PcGNo/UloYvUb2EWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnT16T8RXsbZKRPJp1olKngHbvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjFjYWYzNzUtNTRlNi0z NzE2LTllYTUtOTZiMGY5ZjY2YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9h3DQei26g+QGH8NwhOkamMWu/kqUjX7fEMclAZ7rxA6zuCYXOuRP6 WSl7oqurnJ8Zw1ZR9tfXfGnFl8yvHDPfSUu+KAhgh0eRmoPWlZinZveL3oLevaHa H7208Kt9coZn34K1xwXRP1bG6fOQ+99YjRjnXSwqt4wFT6BK39YNzLUvPN1OXy5g e/Yyqg2ywMV4IOdfzZeRwKmfTkQ6ovrBRHHZ20b6UvlRledd2H4usl/taQsk9b7w 4we2bVQ2XRpzHQMiJH4jQv4FbQiFb3vcJHN7edzLQtPPN2+dAIgrJS6wP1SWQh/5 y42GIwZ7plSdLdPuf5wbidVhRFGQGAI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:49 2025 by rpki-client