$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa File: c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa (raw, json) Hash identifier: 2AmJe1yApqkldr4TQPZ3krrPxpw385t5vdiDWo+Guq8= Subject key identifier: E0:A3:BA:B6:CD:07:49:AF:72:00:19:17:60:F1:ED:0A:1C:D7:CF:80 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D283541F7284746C42206 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 198.64.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:28:35:41:f7:28:47:46:c4:22:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=57e578cd-d1ce-486b-b2be-a7faa3b46a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:45:b4:8d:d1:69:9d:87:8b:c0:18:bb:5c: a8:15:a4:29:87:e1:f0:a3:86:b1:2d:97:0d:e5:90: 0e:4a:5f:a1:e7:35:8c:b6:c3:cf:9d:cf:37:cb:5d: 7d:4a:c4:26:39:70:8a:65:c8:e8:f8:62:bf:6f:fa: f6:b6:d0:30:a6:2b:dd:a9:87:c9:be:c3:bb:ee:b2: f3:6a:93:91:fa:0f:b9:9f:43:0d:6b:b9:ba:ea:97: 5a:f7:71:89:87:a9:e0:c4:e8:95:5f:7b:4e:7b:6d: 14:9f:22:a5:f9:69:9f:0f:cd:60:86:d1:08:4e:b1: bd:b2:b5:b8:1a:2a:36:b8:d8:77:d1:3a:d1:07:ad: 7e:22:5b:86:7c:e9:78:53:55:84:83:26:42:b6:e2: 06:a8:e3:d3:4b:24:93:b8:d5:4a:2b:bc:35:2a:e9: 99:6a:7e:7e:5c:20:2a:7a:8a:f6:b0:21:b0:a9:59: 92:0b:f5:2b:9e:20:69:27:6f:6c:84:b7:f8:45:a6: 6a:e2:f4:27:62:b6:bf:11:79:40:f7:93:0e:98:c5: 53:46:cd:1a:86:bc:9c:9c:e7:dd:01:2d:fc:f4:d5: 4a:7b:8c:c9:34:8f:4a:c5:a6:76:73:fd:fa:b7:fd: 2f:ea:ae:08:2e:e4:5c:4c:8f:50:90:8b:45:d0:3d: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A3:BA:B6:CD:07:49:AF:72:00:19:17:60:F1:ED:0A:1C:D7:CF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:28:36:9b:8f:12:47:49:89:5e:e8:d5:2f:f5:8e:8f:06: a1:c8:ab:d1:c1:ef:1a:c5:22:2a:90:86:e2:f5:89:8f:eb:ca: 4b:ab:08:5e:2c:4d:18:3c:de:41:71:8d:ac:2f:13:ea:73:a4: 8d:2f:b1:ae:5a:5d:8e:04:65:5c:83:ae:a6:e0:83:29:d5:69: ac:cc:4e:41:96:89:cf:12:b6:2d:76:cc:0a:77:6a:f9:87:a8: 2c:41:0d:0b:83:a6:11:3e:28:44:d6:f0:37:df:7d:b6:99:3f: b7:cc:30:ca:c3:70:98:26:b4:da:5c:2a:bd:7c:f3:08:62:f1: 20:ea:d1:36:b5:67:29:79:b6:b4:62:4f:7c:a8:5a:8a:18:de: 27:ac:82:6a:63:48:f9:08:f0:7e:6d:03:72:cd:f2:65:dc:a1: d5:9b:ea:e8:f0:78:64:66:ee:1f:0d:d8:2d:6d:f1:c6:cf:b1: 49:a6:10:1a:dc:9b:f4:51:6a:a2:fa:6a:e0:64:15:80:dc:4d: b8:ba:01:72:52:94:b9:a8:53:88:b0:fc:82:b6:b9:90:ca:a8: f7:27:9c:dd:24:a2:15:68:cb:45:52:37:bb:6a:fa:d2:dc:83: bb:ab:c0:c9:ae:35:c7:01:a8:2c:dd:22:a7:66:6e:e7:2e:f7: c8:e2:5f:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSg1QfcoR0bEIgYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTdlNTc4Y2QtZDFjZS00ODZiLWIyYmUtYTdmYWEzYjQ2YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskBFtI3RaZ2Hi8AYu1yoFaQph+Hwo4axLZcN 5ZAOSl+h5zWMtsPPnc83y119SsQmOXCKZcjo+GK/b/r2ttAwpivdqYfJvsO77rLz apOR+g+5n0MNa7m66pda93GJh6ngxOiVX3tOe20UnyKl+WmfD81ghtEITrG9srW4 Gio2uNh30TrRB61+IluGfOl4U1WEgyZCtuIGqOPTSySTuNVKK7w1KumZan5+XCAq eor2sCGwqVmSC/UrniBpJ29shLf4RaZq4vQnYra/EXlA95MOmMVTRs0ahrycnOfd AS389NVKe4zJNI9KxaZ2c/36t/0v6q4ILuRcTI9QkItF0D0lQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCjurbNB0mvcgAZF2Dx7Qoc18+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzIzNjBkZDItNThkZS0z OTZkLWE1YmYtNWZkZjVhN2ZmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+OKDabjxJHSYle6NUv9Y6PBqHIq9HB7xrFIiqQhuL1iY/rykurCF4s TRg83kFxjawvE+pzpI0vsa5aXY4EZVyDrqbggynVaazMTkGWic8Sti12zAp3avmH qCxBDQuDphE+KETW8DfffbaZP7fMMMrDcJgmtNpcKr188whi8SDq0Ta1Zyl5trRi T3yoWooY3iesgmpjSPkI8H5tA3LN8mXcodWb6ujweGRm7h8N2C1t8cbPsUmmEBrc m/RRaqL6auBkFYDcTbi6AXJSlLmoU4iw/IK2uZDKqPcnnN0kohVoy0VSN7tq+tLc g7urwMmuNccBqCzdIqdmbucu98jiX6E= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:06 2025 by rpki-client