$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa File: c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json) Hash identifier: WUcfI7sVIo5yXfpFA7LtKDaahd1EUEWvWEI0up5oGYM= Subject key identifier: A2:D1:12:98:E3:F2:3B:4E:95:44:C1:CB:6C:A5:B6:5B:9E:EB:88:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D27ECA479937BA9C05A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 198.64.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:27:ec:a4:79:93:7b:a9:c0:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a66a1dcf-8999-4fdb-997a-bb9fc2857198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:f1:2e:2c:33:6a:b7:12:70:cf:6c:4d:ca: 6a:4e:54:4e:26:b6:5a:eb:12:73:b3:3b:8a:1d:d1: 52:5a:eb:c0:66:e7:51:2d:b7:6b:be:5e:b8:02:8a: 23:9d:ae:fb:aa:72:06:6f:22:2e:6b:c6:e9:46:29: d4:b5:90:a9:68:22:1d:29:3a:9f:af:39:b2:58:e4: 57:9e:4e:06:53:56:02:5c:4b:f6:27:71:76:11:37: 7e:1b:0d:a8:c8:69:5c:0f:81:22:b6:7b:5c:c5:5d: 00:da:30:42:64:23:30:1e:76:1e:84:41:37:0f:50: ac:6c:9e:b6:e0:ac:e0:38:31:77:fe:96:c6:df:1f: b9:a3:64:b7:49:d2:df:0a:99:19:54:39:af:9d:64: e0:04:93:ac:22:90:26:2d:cd:7c:c2:3b:4a:ef:db: 70:dd:70:6a:6d:05:d4:bc:6b:a4:69:12:be:6c:a8: e7:47:85:f5:22:71:18:69:6e:bc:48:e8:c4:bd:77: ff:20:ca:34:ce:b9:00:6d:e3:45:99:0e:5f:2a:6a: f4:9a:98:15:70:99:96:03:80:8d:d1:5c:a5:2b:59: 91:38:83:2a:94:c4:4e:ac:5a:08:26:b8:ea:37:63: c9:65:48:b1:cc:1a:d7:a5:fc:3f:fd:89:14:37:71: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:12:98:E3:F2:3B:4E:95:44:C1:CB:6C:A5:B6:5B:9E:EB:88:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:cb:e8:6f:17:dd:09:2f:d9:9f:a2:3c:33:c2:80:87:5c:c6: da:1b:80:68:7d:57:35:0d:b8:5d:9c:79:05:15:1e:a7:91:58: 5e:e4:25:8d:3c:ed:90:8e:91:51:45:83:cb:a7:e8:fa:59:bf: 98:18:25:82:d0:ac:b6:d2:a9:5e:68:c0:ba:c1:23:42:89:f4: 21:f4:58:2b:13:d1:f7:1e:21:76:f6:8e:76:51:ac:87:fa:f9: f8:6b:af:8d:b0:d2:8a:0e:e0:7f:48:ac:ff:21:b7:70:e1:2b: 90:97:e6:96:35:ae:23:a2:e7:b0:8c:a4:74:c9:66:a3:50:8d: 73:9e:79:af:37:3b:20:fd:d9:2c:ba:b1:da:fd:26:a6:24:4a: b4:b1:64:14:b3:8f:d5:b9:87:f5:ab:ec:a6:3e:b1:96:13:6f: de:6a:eb:f9:91:39:45:a8:ad:61:1d:65:6d:df:bc:78:db:7a: 81:2b:1f:06:e1:39:98:d1:12:9c:07:15:54:e0:aa:97:68:0e: bf:aa:9c:38:9c:76:39:49:2c:eb:63:b7:f5:c5:af:db:33:e4: f1:1c:0b:5f:8f:4f:5c:c5:01:cc:62:27:5c:f5:59:59:18:ab: 52:ad:24:e4:fb:84:ab:d7:f2:35:c6:fe:22:bf:91:b5:cd:a5: 4b:4b:d4:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSfspHmTe6nAWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTY2YTFkY2YtODk5OS00ZmRiLTk5N2EtYmI5ZmMyODU3MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKnxLiwzarcScM9sTcpqTlROJrZa6xJzszuK HdFSWuvAZudRLbdrvl64Aoojna77qnIGbyIua8bpRinUtZCpaCIdKTqfrzmyWORX nk4GU1YCXEv2J3F2ETd+Gw2oyGlcD4EitntcxV0A2jBCZCMwHnYehEE3D1CsbJ62 4KzgODF3/pbG3x+5o2S3SdLfCpkZVDmvnWTgBJOsIpAmLc18wjtK79tw3XBqbQXU vGukaRK+bKjnR4X1InEYaW68SOjEvXf/IMo0zrkAbeNFmQ5fKmr0mpgVcJmWA4CN 0VylK1mROIMqlMROrFoIJrjqN2PJZUixzBrXpfw//YkUN3EbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLREpjj8jtOlUTBy2yltlue64ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA4MTVkMTctODNhNS0z NTQzLTg0MzctYzMzZjc2NWEyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxkAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3L6G8X3Qkv2Z+iPDPCgIdcxtobgGh9VzUNuF2ceQUVHqeRWF7kJY08 7ZCOkVFFg8un6PpZv5gYJYLQrLbSqV5owLrBI0KJ9CH0WCsT0fceIXb2jnZRrIf6 +fhrr42w0ooO4H9IrP8ht3DhK5CX5pY1riOi57CMpHTJZqNQjXOeea83OyD92Sy6 sdr9JqYkSrSxZBSzj9W5h/Wr7KY+sZYTb95q6/mROUWorWEdZW3fvHjbeoErHwbh OZjREpwHFVTgqpdoDr+qnDicdjlJLOtjt/XFr9sz5PEcC1+PT1zFAcxiJ1z1WVkY q1KtJOT7hKvX8jXG/iK/kbXNpUtL1PU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:48 2025 by rpki-client