$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa File: 89a846c9-5a33-333a-a489-267263a98c98.roa (raw, json) Hash identifier: 9JyCZKLaL1CyzIBZ/PxWpHQXltOBcaCC5nHyWL3CEPA= Subject key identifier: 76:0C:D9:0A:97:23:E1:D2:5B:10:91:5B:20:DE:6C:42:FE:E6:5C:96 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584BA93252CF1710BC06BCE86840 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14593 IP address blocks: 198.54.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:52:cf:17:10:bc:06:bc:e8:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c72080cd-b7db-411f-b342-565ab088b1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:0a:7f:14:7f:71:3b:68:d1:80:93:45:1c: a6:10:69:47:ec:0a:4b:90:73:d7:b3:9f:94:98:46: d3:b4:0e:b8:59:db:02:00:c6:cf:79:3f:ee:83:02: 70:0e:ee:6c:d6:4e:02:04:f6:c7:3e:d6:01:77:26: ef:9b:8c:53:5d:81:00:f7:4d:92:de:ab:4c:65:d5: 6b:b0:c1:7c:e2:aa:eb:32:34:8d:ed:e9:b2:f3:d2: 94:b0:ec:ce:72:58:96:1c:8d:a1:19:3b:e8:2e:69: 5f:e5:74:89:ca:7f:ed:1b:30:ab:4c:9f:ba:d4:5e: 7f:f0:95:51:3e:7b:d8:fc:13:2c:44:38:b6:ae:27: 20:39:a8:95:cf:1a:f8:d9:fb:7b:3c:93:58:46:06: 6a:60:95:8a:d0:6c:8b:77:8a:4e:bd:f4:cd:0a:ff: 14:cc:1b:09:92:5f:46:18:5f:75:4a:89:b4:e0:d5: 70:7c:99:87:e5:8f:bb:1f:73:3f:8e:1a:43:2e:26: 65:1e:91:14:35:0f:8f:0c:e7:c2:e7:a1:ed:43:b4: 45:56:5a:9d:e1:3d:bb:da:93:45:3b:47:8f:51:46: 90:4a:41:0c:de:f5:f7:3e:b9:62:7b:25:36:e4:67: 01:89:4e:56:75:7b:d9:b6:b0:ff:dd:72:c8:12:11: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0C:D9:0A:97:23:E1:D2:5B:10:91:5B:20:DE:6C:42:FE:E6:5C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 198.54.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:12:b2:59:bf:90:16:c6:81:a8:20:98:1c:ac:0c:1b:09:26: 07:ac:b9:20:b0:d3:cc:23:01:2c:8f:b2:ea:1f:8f:c7:54:20: 3d:7a:16:25:75:3a:7f:f7:64:2e:2f:20:bb:43:ed:2e:2b:8a: 3b:8a:92:6f:fd:5b:af:44:e8:0d:84:d3:28:9c:02:04:6d:fe: b0:0c:2e:4f:c9:27:99:69:0c:1b:04:71:5d:db:a1:2d:56:00: 59:a7:83:8c:ee:cb:90:ab:6b:d6:36:d3:22:80:c3:df:9b:79: 8f:b7:99:6e:41:5a:3d:c5:d1:4b:e9:c1:00:74:ac:f6:fa:7f: 60:ee:57:0c:f2:a3:be:b9:e4:3a:e1:cb:55:10:2a:ad:72:f9: e0:48:22:52:76:f9:e0:5c:f3:d1:cb:25:5c:1e:c0:6d:10:2d: a1:a0:27:96:8f:62:d1:9b:f0:1e:90:e3:f7:f6:df:cd:f4:b5: 91:a1:c1:e6:20:90:a5:74:08:41:40:cc:bb:a6:22:28:b7:fb: 88:78:d0:f8:d8:9a:b6:5b:0d:29:04:f8:ff:42:6c:9f:d2:c8: dc:3f:2b:3a:7b:80:1a:e1:bd:67:a7:86:90:24:cd:ce:db:db: 5c:c9:af:5b:b8:ca:54:11:c9:f0:24:97:0a:81:ae:50:fa:6a: 2b:3f:e5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlLPFxC8BrzoaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzcyMDgwY2QtYjdkYi00MTFmLWIzNDItNTY1YWIwODhiMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsoKfxR/cTto0YCTRRymEGlH7ApLkHPXs5+U mEbTtA64WdsCAMbPeT/ugwJwDu5s1k4CBPbHPtYBdybvm4xTXYEA902S3qtMZdVr sMF84qrrMjSN7emy89KUsOzOcliWHI2hGTvoLmlf5XSJyn/tGzCrTJ+61F5/8JVR PnvY/BMsRDi2ricgOaiVzxr42ft7PJNYRgZqYJWK0GyLd4pOvfTNCv8UzBsJkl9G GF91Som04NVwfJmH5Y+7H3M/jhpDLiZlHpEUNQ+PDOfC56HtQ7RFVlqd4T272pNF O0ePUUaQSkEM3vX3PrlieyU25GcBiU5WdXvZtrD/3XLIEhHMKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYM2QqXI+HSWxCRWyDebEL+5lyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvODlhODQ2YzktNWEzMy0z MzNhLWE0ODktMjY3MjYzYTk4Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4Sslm/kBbGgaggmBysDBsJJgesuSCw08wjASyPsuofj8dUID16FiV1 On/3ZC4vILtD7S4rijuKkm/9W69E6A2E0yicAgRt/rAMLk/JJ5lpDBsEcV3boS1W AFmng4zuy5Cra9Y20yKAw9+beY+3mW5BWj3F0UvpwQB0rPb6f2DuVwzyo7655Drh y1UQKq1y+eBIIlJ2+eBc89HLJVwewG0QLaGgJ5aPYtGb8B6Q4/f23830tZGhweYg kKV0CEFAzLumIii3+4h40PjYmrZbDSkE+P9CbJ/SyNw/Kzp7gBrhvWenhpAkzc7b 21zJr1u4ylQRyfAklwqBrlD6ais/5ag= -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:14 2025 by rpki-client