$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa File: 282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa (raw, json) Hash identifier: 6agsUF/FFeB6zUWcjqgWKOPw/u3aEwjYi6+n34epX7c= Subject key identifier: AE:7E:A4:14:F6:FA:FD:0A:92:68:B1:F8:47:D7:28:15:66:0B:9B:BD Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584BA39D23572F3AD605BFFDE980 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 198.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:23:57:2f:3a:d6:05:bf:fd:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=cb98b414-f3c3-469d-a316-e5eb596dd407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:72:27:6c:fe:dd:29:04:0a:5c:88:37:45: 08:ce:a1:83:bf:b2:d0:e3:20:aa:ed:a8:a4:4b:23: 1e:2a:bf:76:97:da:50:3c:8b:09:19:b2:07:16:c2: 16:32:25:7d:5a:4e:cc:90:58:1e:f7:f0:d4:e3:19: 83:a9:2b:1f:23:15:37:a3:14:da:14:39:6d:25:c4: 8a:a8:24:f2:eb:3d:ef:74:d9:c8:f1:ed:be:e7:be: fa:ca:8b:72:db:2f:6b:b8:2a:a4:90:8f:92:75:a5: 1b:50:a9:ee:3f:6e:e8:c3:f6:85:38:c4:ab:01:ec: a9:79:3a:df:2c:61:65:5d:cb:80:4a:28:f7:4f:03: 3f:fd:d2:1a:20:2f:1b:b5:2c:34:3f:ab:81:13:49: b0:15:35:55:85:57:c4:ca:c7:b6:8a:a7:6a:48:d2: ed:49:5a:94:84:a0:cd:e0:07:c8:f7:94:1c:97:ac: fb:87:6f:e9:b7:4a:6c:b9:9c:a7:1c:47:1d:8d:86: 55:92:0d:cb:42:75:91:d2:83:63:6e:b4:cd:c8:3e: ce:ea:9b:5b:4b:4d:ff:4b:1e:3a:c4:0b:ca:48:51: df:1c:03:f3:af:f8:34:91:b2:46:19:5e:23:5f:14: b8:7a:cd:fb:8e:16:dc:a0:c3:75:bb:02:56:85:26: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:A4:14:F6:FA:FD:0A:92:68:B1:F8:47:D7:28:15:66:0B:9B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 198.252.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:81:b8:52:50:35:51:4e:ed:28:77:d4:e1:e4:71:e4:e1:50: b1:78:8f:22:78:d1:05:38:4a:f2:1b:41:39:5c:e9:a2:75:ec: 66:5b:2f:4e:a3:dc:54:4c:65:6e:c1:a2:ca:bc:ff:40:6d:2a: 3e:9c:cc:61:ea:ed:d9:84:c2:a3:a0:c4:fe:71:25:f5:45:4b: eb:9c:0b:4f:4a:4e:8a:9f:64:37:07:c4:7b:58:8e:24:3c:17: 33:7b:98:bf:29:9a:5b:2d:d0:15:bc:8b:70:77:81:8f:b4:8a: a9:33:b4:d1:60:7c:c9:19:33:b8:54:47:3c:ed:fe:65:c4:54: 5d:af:e1:dc:92:0e:d0:d9:11:2c:99:db:dc:3c:3e:f4:b4:eb: d7:d3:ef:e3:d8:ef:53:67:ba:7e:e1:b1:e6:b4:85:a6:fa:77: c7:e8:14:d7:6f:b5:1f:8d:76:c8:e9:1f:c2:cd:0a:79:10:9d: e3:e4:ee:6f:17:d4:5e:70:bf:e1:05:01:01:a1:88:19:9f:78: 04:86:67:20:ac:e4:22:c4:37:ec:5d:fd:59:f3:63:f4:7f:12: 2e:73:33:3f:cc:82:a1:72:2d:ff:4c:d8:96:9a:5c:77:37:42: 0e:5d:f4:a6:a1:12:9a:d5:58:eb:1d:a1:93:61:28:39:0f:49: 2a:6e:c4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSNXLzrWBb/96YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2I5OGI0MTQtZjNjMy00NjlkLWEzMTYtZTVlYjU5NmRkNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigdyJ2z+3SkEClyIN0UIzqGDv7LQ4yCq7aik SyMeKr92l9pQPIsJGbIHFsIWMiV9Wk7MkFge9/DU4xmDqSsfIxU3oxTaFDltJcSK qCTy6z3vdNnI8e2+5776yoty2y9ruCqkkI+SdaUbUKnuP27ow/aFOMSrAeypeTrf LGFlXcuASij3TwM//dIaIC8btSw0P6uBE0mwFTVVhVfEyse2iqdqSNLtSVqUhKDN 4AfI95Qcl6z7h2/pt0psuZynHEcdjYZVkg3LQnWR0oNjbrTNyD7O6ptbS03/Sx46 xAvKSFHfHAPzr/g0kbJGGV4jXxS4es37jhbcoMN1uwJWhSZKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5+pBT2+v0Kkmix+EfXKBVmC5u9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMjgyZjllMzQtZWU4NC0z ZGI2LWJmYTUtM2M2MmQ3YTQ5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGBuFJQNVFO7Sh31OHkceThULF4jyJ40QU4SvIbQTlc6aJ17GZbL06j 3FRMZW7Bosq8/0BtKj6czGHq7dmEwqOgxP5xJfVFS+ucC09KToqfZDcHxHtYjiQ8 FzN7mL8pmlst0BW8i3B3gY+0iqkztNFgfMkZM7hURzzt/mXEVF2v4dySDtDZESyZ 29w8PvS069fT7+PY71Nnun7hsea0hab6d8foFNdvtR+NdsjpH8LNCnkQnePk7m8X 1F5wv+EFAQGhiBmfeASGZyCs5CLEN+xd/VnzY/R/Ei5zMz/MgqFyLf9M2JaaXHc3 Qg5d9KahEprVWOsdoZNhKDkPSSpuxAc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:30 2025 by rpki-client