$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa File: ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa (raw, json) Hash identifier: zpVyZT+dTD/M5k2VwZUvMGF7m1q8Euinq8MDwxor7zQ= Subject key identifier: 4A:26:BA:78:1A:B8:8D:58:13:92:D8:AE:23:AE:2A:E4:3E:D2:35:33 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26D73A938BA248C846320 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 198.40.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6d:73:a9:38:ba:24:8c:84:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c3951dad-d43b-4a0c-9bc4-aaf7fbfd97e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:35:58:f2:b8:7b:8a:40:be:fb:59:e2:86: 47:2b:0a:5d:49:10:a8:83:26:a0:72:1b:85:8e:c7: e6:aa:41:b9:a9:39:89:51:2c:7a:d1:cd:5f:31:d7: 08:5a:a6:53:ee:fb:7f:aa:30:57:f9:18:ed:c0:3d: 4a:74:d9:20:1e:77:e5:7d:4e:5c:9b:f9:46:34:6e: fe:5d:79:2d:71:8e:bb:59:76:c8:7f:2e:ce:be:c7: 09:fc:02:45:51:79:79:7c:fa:0c:dc:51:93:f6:09: d3:5e:18:dc:f3:c7:f7:1d:f9:d6:01:45:c1:6f:37: ad:e3:ca:c2:5b:74:d9:8a:cd:5a:76:7b:9e:44:17: 0f:22:05:99:70:27:eb:59:39:f7:c6:3a:c7:09:7d: e1:c7:0f:62:d8:de:79:7a:f9:ea:63:d2:65:f6:dd: 70:1b:3a:05:36:a0:cd:30:8d:3a:38:ad:8d:ec:a7: 93:ce:b2:77:5c:1a:f5:9f:fc:3c:29:16:1e:52:63: 89:bf:ba:14:8e:26:7c:33:cb:2e:f6:f8:f2:0e:88: 8e:17:73:fc:9d:b6:ca:67:61:9a:b4:eb:c2:be:4d: ed:fc:fe:8a:8e:e2:57:db:d7:1b:06:ab:a2:e8:27: 77:20:14:f2:bc:3c:bd:32:ed:f1:3f:39:e8:b9:4c: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:BA:78:1A:B8:8D:58:13:92:D8:AE:23:AE:2A:E4:3E:D2:35:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:48:53:a7:d1:73:66:fc:e0:cb:0e:03:26:51:4c:90:ac:00: ad:78:4b:66:33:aa:4f:3f:fa:8e:b6:50:67:6b:48:99:a1:e1: e4:cd:35:5f:45:8a:f1:3f:8a:1d:90:a7:19:9f:ce:0c:35:c0: cf:c1:04:8f:95:ac:1a:89:8f:76:e1:ae:23:75:0f:75:b2:43: d0:82:b6:e6:90:57:a6:5d:d6:3a:6e:ba:69:17:0d:b4:84:56: 2a:be:24:c0:31:f2:0f:2a:ff:00:3e:eb:46:be:01:77:99:92: 1d:0d:7b:83:e9:d8:07:3c:b1:87:8f:5d:dc:6b:5c:a4:38:b5: f8:9f:b9:2a:bd:ba:e1:60:37:08:c5:ca:10:f4:ee:70:e2:26: e8:67:96:20:c2:9a:e0:e0:9f:77:01:e8:c1:e0:41:f3:c2:88: 8c:30:91:ac:7b:33:f1:a8:6d:45:d8:77:e3:bc:c2:18:8a:1d: 78:0a:df:8d:b7:68:90:d9:b2:b7:cc:4c:85:c4:eb:79:b3:b4: 2a:3c:83:32:25:a8:92:e3:57:b0:22:7e:a6:39:82:fe:72:3a: 17:9c:80:d2:f2:e3:dd:f8:37:ef:67:1a:51:c3:67:c9:a4:63: c3:0f:73:bc:73:92:be:af:e6:64:a9:7e:35:96:37:94:63:c3: 4d:7e:c3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m1zqTi6JIyEYyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzM5NTFkYWQtZDQzYi00YTBjLTliYzQtYWFmN2ZiZmQ5N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU41WPK4e4pAvvtZ4oZHKwpdSRCogyagchuF jsfmqkG5qTmJUSx60c1fMdcIWqZT7vt/qjBX+RjtwD1KdNkgHnflfU5cm/lGNG7+ XXktcY67WXbIfy7OvscJ/AJFUXl5fPoM3FGT9gnTXhjc88f3HfnWAUXBbzet48rC W3TZis1adnueRBcPIgWZcCfrWTn3xjrHCX3hxw9i2N55evnqY9Jl9t1wGzoFNqDN MI06OK2N7KeTzrJ3XBr1n/w8KRYeUmOJv7oUjiZ8M8su9vjyDoiOF3P8nbbKZ2Ga tOvCvk3t/P6KjuJX29cbBqui6Cd3IBTyvDy9Mu3xPznouUyCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEomungauI1YE5LYriOuKuQ+0jUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWU4YzVmODMtZGY4Zi0z ZDIwLTkyYjEtZjdlOGEyMTEzZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpIU6fRc2b84MsOAyZRTJCsAK14S2Yzqk8/+o62UGdrSJmh4eTNNV9F ivE/ih2Qpxmfzgw1wM/BBI+VrBqJj3bhriN1D3WyQ9CCtuaQV6Zd1jpuumkXDbSE Viq+JMAx8g8q/wA+60a+AXeZkh0Ne4Pp2Ac8sYePXdxrXKQ4tfifuSq9uuFgNwjF yhD07nDiJuhnliDCmuDgn3cB6MHgQfPCiIwwkax7M/GobUXYd+O8whiKHXgK3423 aJDZsrfMTIXE63mztCo8gzIlqJLjV7AifqY5gv5yOhecgNLy4934N+9nGlHDZ8mk Y8MPc7xzkr6v5mSpfjWWN5Rjw01+w4c= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:25 2025 by rpki-client