$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa File: 85a980f7-1633-31c8-98a3-b870d25c413a.roa (raw, json) Hash identifier: 5okEvsTnNcDkQPWv9Wi15Mew2gQWqKIag/8DtSzGp2E= Subject key identifier: 62:9D:3A:88:B8:12:8B:FA:66:48:4B:A5:1A:56:CB:0E:80:2A:A8:CA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403FDBF67D18DC1A3E31C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 198.87.182.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3f:db:f6:7d:18:dc:1a:3e:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=eca0baad-78d6-4667-bbfa-32f01dacfc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:c2:a9:f6:73:0b:8f:e3:6f:3d:f8:d8:8b: 39:c5:83:71:ca:b6:df:e4:09:a0:c8:4b:c5:62:b1: 20:c5:18:d0:75:c2:dd:00:6a:3d:6a:76:68:0c:e5: d3:6a:25:64:28:c5:68:bb:0b:60:6e:e9:e8:8e:db: 29:68:37:6d:ad:6e:12:45:f7:c4:da:f9:22:05:67: ce:34:1d:20:d1:b7:c3:4f:57:26:60:38:5b:83:de: 57:de:c5:af:02:e9:dc:bc:23:42:be:85:47:7d:55: 0c:52:c9:f2:47:95:36:f6:20:42:37:c3:c6:24:2a: 70:7a:1a:79:02:6e:95:ae:f6:39:7d:60:6d:72:3e: 26:8b:31:a0:5e:cf:6b:ad:b7:f9:35:d8:de:3b:41: ed:2b:49:03:c4:64:e4:a9:cb:07:c9:dd:c3:01:07: fb:58:b6:32:cc:ef:3b:df:9d:4b:40:5d:ff:72:75: 52:4f:e7:5c:b2:ef:e5:dc:ec:29:49:74:e3:9a:8f: 48:bc:15:47:af:9b:24:15:af:03:11:cd:3e:c8:e5: 06:42:0b:63:ac:17:79:29:bc:d8:a4:8f:cf:bd:2f: 70:e7:95:d9:60:80:95:78:58:34:35:06:ce:ca:3a: 37:42:24:5f:8b:c0:2d:58:3f:ca:e8:41:ea:6e:0c: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:3A:88:B8:12:8B:FA:66:48:4B:A5:1A:56:CB:0E:80:2A:A8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.87.182.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:36:f7:da:04:63:bb:36:c1:38:44:64:02:1a:43:f3:24:5e: 49:5b:0f:f1:79:64:70:81:33:9d:89:4d:28:f6:17:8d:28:12: 8f:df:1d:91:34:aa:bb:42:1f:22:73:13:87:2a:bd:ab:03:1b: 7b:7c:6f:0c:cf:ba:d3:50:86:4b:cf:31:21:42:38:70:91:71: 04:93:6d:54:5d:99:b4:b0:87:93:d5:8b:bb:4b:af:af:f6:ce: d0:3f:e6:8e:16:31:ec:98:98:34:44:e6:6e:8d:34:1a:87:b1: 2d:7e:99:77:ff:60:76:04:d8:5f:89:43:ba:b3:88:7c:62:b0: 1a:a7:3d:de:0b:c0:c7:0c:b7:c8:ca:36:67:c4:94:71:7e:e8: fa:47:43:b1:63:2d:bd:bd:9c:8f:d2:ff:80:3d:59:7e:bf:30: 32:e5:91:fb:5d:f7:47:7a:ec:d2:f2:91:16:80:97:9a:78:ea: 6c:2c:65:25:8a:2f:46:30:97:f5:fa:c0:f1:e6:84:a1:de:18: 9d:79:70:7b:b5:f1:55:3d:ed:b5:35:72:1c:a9:dd:9d:0b:10: f3:67:f6:5c:22:58:77:b5:5c:ce:68:98:f2:7b:73:bd:3a:28: 87:11:13:ee:14:a9:c1:07:6d:64:16:ba:f6:0f:dd:cc:3d:33: ba:96:82:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QD/b9n0Y3Bo+McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWNhMGJhYWQtNzhkNi00NjY3LWJiZmEtMzJmMDFkYWNmYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ejCqfZzC4/jbz342Is5xYNxyrbf5AmgyEvF YrEgxRjQdcLdAGo9anZoDOXTaiVkKMVouwtgbunojtspaDdtrW4SRffE2vkiBWfO NB0g0bfDT1cmYDhbg95X3sWvAuncvCNCvoVHfVUMUsnyR5U29iBCN8PGJCpwehp5 Am6VrvY5fWBtcj4mizGgXs9rrbf5NdjeO0HtK0kDxGTkqcsHyd3DAQf7WLYyzO87 351LQF3/cnVST+dcsu/l3OwpSXTjmo9IvBVHr5skFa8DEc0+yOUGQgtjrBd5KbzY pI/PvS9w55XZYICVeFg0NQbOyjo3QiRfi8AtWD/K6EHqbgxhLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGKdOoi4Eov6ZkhLpRpWyw6AKqjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODVhOTgwZjctMTYzMy0z MWM4LTk4YTMtYjg3MGQyNWM0MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHxle2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDBNvfaBGO7NsE4RGQCGkPzJF5JWw/xeWRwgTOdiU0o9heNKBKP3x2R NKq7Qh8icxOHKr2rAxt7fG8Mz7rTUIZLzzEhQjhwkXEEk21UXZm0sIeT1Yu7S6+v 9s7QP+aOFjHsmJg0ROZujTQah7Etfpl3/2B2BNhfiUO6s4h8YrAapz3eC8DHDLfI yjZnxJRxfuj6R0OxYy29vZyP0v+APVl+vzAy5ZH7XfdHeuzS8pEWgJeaeOpsLGUl ii9GMJf1+sDx5oSh3hideXB7tfFVPe21NXIcqd2dCxDzZ/ZcIlh3tVzOaJjye3O9 OiiHERPuFKnBB21kFrr2D93MPTO6loJH -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:08 2025 by rpki-client