$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa File: 29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa (raw, json) Hash identifier: ks3r9W14p7TlWq9Et/ufVscD+sjMBagN5gl+NiUQJYg= Subject key identifier: 86:CD:86:A6:76:45:9B:5A:7B:02:76:97:92:1C:48:3C:9E:8D:D4:95 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D26256B63C0D9E0409B0E0 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.104.0/24 maxlen: 24 198.164.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:62:56:b6:3c:0d:9e:04:09:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=eaf95b45-36b1-4122-bc65-6accb0f40526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ac:76:6c:93:db:f2:43:f2:41:f5:0c:b8:40: e6:1b:b1:18:86:fc:aa:32:f5:12:79:9e:1e:72:f7: 07:91:94:f9:e6:2a:31:fa:2f:d0:ed:56:d7:21:06: 7b:c8:7d:67:e7:13:06:4c:f0:76:9c:ce:28:22:7d: 41:f3:56:87:5d:04:ca:bb:72:3c:a5:2c:cd:29:89: 7b:c0:3c:ae:ea:cb:74:65:08:d9:3b:1e:83:c8:35: 12:a4:42:7f:e0:11:b0:8b:64:75:2e:fb:22:ea:c4: 90:4b:d6:a0:ad:bc:ed:3d:da:37:f5:f3:a3:92:d9: be:55:39:50:97:95:5d:0b:5e:57:7c:82:04:0e:e4: b8:f8:69:41:a6:bc:f2:54:3f:14:07:4a:83:81:cc: 72:89:13:5d:43:99:5d:af:e7:aa:95:df:78:9f:2a: 52:e7:91:67:a6:6f:19:6e:e4:a8:2b:dd:2f:16:57: 15:b9:82:1f:1c:95:b2:52:68:4b:f0:42:f0:64:a0: 02:7a:09:c7:59:e4:82:fa:2d:5c:44:91:50:7e:a7: 83:3d:7d:6e:4d:f1:ba:19:80:1f:d8:e7:00:ee:d3: db:dd:aa:a7:ff:f3:8b:fe:d8:06:9e:3b:bd:a1:5b: a5:bc:b3:48:33:64:eb:63:c4:81:cc:68:dc:4a:01: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CD:86:A6:76:45:9B:5A:7B:02:76:97:92:1C:48:3C:9E:8D:D4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:14:e5:4f:29:e5:e6:f3:39:de:93:59:a8:e9:04:77:4f:b5: c5:c7:c5:68:c0:80:88:64:be:f8:24:69:14:8a:86:c0:90:c1: 9f:f3:b2:e9:fe:03:91:ee:46:45:d1:ff:c3:77:82:76:f6:3a: c3:6a:ec:f6:b8:c2:e0:95:16:0e:ef:a5:a4:6c:3f:6b:78:1c: 59:a7:58:37:bd:14:a2:d0:e7:3b:95:e2:45:f4:86:4d:7b:8e: e8:2c:7c:79:87:d9:4c:a0:b7:dc:08:65:34:ff:05:92:92:0d: 3c:1d:77:d5:64:cd:38:e9:07:9c:5c:50:06:be:4d:87:84:63: a9:24:ef:b5:c7:44:76:cf:e0:fa:6f:2d:18:76:92:41:5f:da: 0c:2a:a8:00:99:35:b9:44:1b:7e:f0:b8:87:df:92:a0:e6:ca: 7d:1c:8f:14:27:0e:94:43:c1:e7:b7:11:7f:90:18:be:c5:cf: 94:22:ea:76:10:af:d6:d9:1a:9a:55:8b:34:2f:97:ba:55:dd: cb:54:cd:0a:c6:2f:41:69:c2:7c:f2:c7:a2:80:ee:98:cb:2b: bf:b9:7e:bb:fe:3e:fa:2d:a5:0c:8a:fc:2e:72:8f:9a:21:aa: 58:9b:08:d0:4b:f8:61:82:5e:76:c0:61:94:21:20:33:ec:c9: a0:4a:a4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mJWtjwNngQJsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZWFmOTViNDUtMzZiMS00MTIyLWJjNjUtNmFjY2IwZjQwNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqx2bJPb8kPyQfUMuEDmG7EYhvyqMvUSeZ4e cvcHkZT55iox+i/Q7VbXIQZ7yH1n5xMGTPB2nM4oIn1B81aHXQTKu3I8pSzNKYl7 wDyu6st0ZQjZOx6DyDUSpEJ/4BGwi2R1Lvsi6sSQS9agrbztPdo39fOjktm+VTlQ l5VdC15XfIIEDuS4+GlBprzyVD8UB0qDgcxyiRNdQ5ldr+eqld94nypS55Fnpm8Z buSoK90vFlcVuYIfHJWyUmhL8ELwZKACegnHWeSC+i1cRJFQfqeDPX1uTfG6GYAf 2OcA7tPb3aqn//OL/tgGnju9oVulvLNIM2TrY8SBzGjcSgHfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbNhqZ2RZtaewJ2l5IcSDyejdSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMjkzMDhkNDYtZjU1ZC0z NmE0LTg4YjUtY2MyYWZkY2M3Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQU5U8p5ebzOd6TWajpBHdPtcXHxWjAgIhkvvgkaRSKhsCQwZ/zsun+ A5HuRkXR/8N3gnb2OsNq7Pa4wuCVFg7vpaRsP2t4HFmnWDe9FKLQ5zuV4kX0hk17 jugsfHmH2Uygt9wIZTT/BZKSDTwdd9VkzTjpB5xcUAa+TYeEY6kk77XHRHbP4Ppv LRh2kkFf2gwqqACZNblEG37wuIffkqDmyn0cjxQnDpRDwee3EX+QGL7Fz5Qi6nYQ r9bZGppVizQvl7pV3ctUzQrGL0Fpwnzyx6KA7pjLK7+5frv+PvotpQyK/C5yj5oh qlibCNBL+GGCXnbAYZQhIDPsyaBKpLY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:00 2025 by rpki-client