$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa File: 67816620-6420-36e7-9bae-26d3f3b19c5e.roa (raw, json) Hash identifier: 7q5jGAPcMxWVO9ZObt3k1xQGz0249c4wFKKZ4giv7oc= Subject key identifier: 3B:6B:9E:0F:31:81:C5:15:D2:4A:67:F0:F7:13:16:C5:1C:38:D1:12 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D25CD20113A0A693D4D400 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.29.0/24 maxlen: 24 198.164.44.0/24 maxlen: 24 198.164.47.0/24 maxlen: 24 198.164.119.0/24 maxlen: 24 198.164.120.0/24 maxlen: 24 198.164.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:d2:01:13:a0:a6:93:d4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=35f70e8f-24b7-42f5-be12-ac94dd37d325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:62:d4:c7:ef:c6:38:98:87:f3:9a:0a:d9: 2d:6e:92:15:0b:a6:d3:cf:fa:49:18:be:f5:fb:23: f9:63:dd:5b:c7:18:1a:1d:27:ed:70:3b:9c:48:6d: 7b:15:e9:cc:67:f6:23:83:6b:85:ea:8b:83:86:e6: 73:0b:25:f0:70:d0:a6:21:dd:67:90:f7:ec:27:96: 6a:c5:14:52:72:6b:3f:02:5a:b3:9c:6f:b8:9e:7f: 44:a3:8d:d9:07:dd:be:64:ba:25:6c:d4:35:48:36: 89:d2:25:bb:4e:25:96:f4:1c:d5:f1:a7:f5:aa:a5: dd:db:23:f0:97:73:e3:64:ea:53:26:eb:1f:81:89: a4:06:d4:93:1b:93:61:11:c4:7d:c8:c2:dc:8d:dc: 36:38:b4:4e:c1:c4:83:cf:fd:58:a0:b8:a3:3a:10: 7a:40:50:c9:ee:1b:37:1c:0b:85:08:01:ea:ae:ea: cb:7d:c1:c1:bc:ac:b1:8f:fa:68:39:e5:64:15:e9: 57:a8:92:ff:49:27:e7:2e:83:da:3f:98:69:b3:fc: 5b:95:b9:03:91:de:3e:13:c3:49:a6:9a:dc:16:35: e7:9f:ae:77:a0:12:98:7d:a2:74:45:e3:16:a0:2c: eb:19:6a:d5:9f:ff:fd:1a:34:6b:3f:31:8d:3e:ad: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:9E:0F:31:81:C5:15:D2:4A:67:F0:F7:13:16:C5:1C:38:D1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.29.0/24 198.164.44.0/24 198.164.47.0/24 198.164.119.0-198.164.120.255 198.164.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:3a:ad:b1:88:17:48:1a:29:9d:f7:50:61:18:ec:55:cb:49: db:98:78:f4:45:12:a8:fd:25:bb:e9:3a:ef:87:3c:16:d2:a7: 78:9b:00:63:e3:65:76:f2:62:55:2f:20:b2:09:0d:40:9a:f2: b9:de:51:d8:ef:a2:74:a4:4a:ae:96:69:a6:54:88:13:ad:15: 4e:c3:e9:08:21:ee:97:b8:42:8b:75:10:b7:02:70:3a:54:e3: 75:15:d6:d4:45:3a:45:6a:21:1a:08:65:3b:b9:9b:ad:44:15: 7b:bc:5c:84:28:cd:da:c0:c0:eb:12:04:4c:f4:b5:55:b9:61: 56:c6:4f:1d:af:a8:3e:2f:bf:23:af:6a:1c:cf:48:81:89:56: 91:cc:62:92:58:84:0c:1f:8d:1c:40:09:1c:9b:10:d3:67:17: 0f:e1:3a:80:60:a7:18:63:d9:06:39:cd:f0:1e:11:f5:5e:46: 1a:49:cf:4b:22:e6:92:8c:22:df:af:93:18:13:7b:78:86:15: 97:64:5f:4e:c0:14:99:39:91:d8:4c:7e:b2:33:44:ed:56:f1: cb:f6:00:df:10:38:ff:8c:77:e8:ac:ea:99:46:3d:9c:b0:2f: 88:3f:ad:cd:4a:12:ab:df:23:92:d3:ed:90:69:d6:2f:43:1c: 22:42:a3:12 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEug0lzSAROgppPU1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzVmNzBlOGYtMjRiNy00MmY1LWJlMTItYWM5NGRkMzdkMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Ni1MfvxjiYh/OaCtktbpIVC6bTz/pJGL71 +yP5Y91bxxgaHSftcDucSG17FenMZ/Yjg2uF6ouDhuZzCyXwcNCmId1nkPfsJ5Zq xRRScms/AlqznG+4nn9Eo43ZB92+ZLolbNQ1SDaJ0iW7TiWW9BzV8af1qqXd2yPw l3PjZOpTJusfgYmkBtSTG5NhEcR9yMLcjdw2OLROwcSDz/1YoLijOhB6QFDJ7hs3 HAuFCAHqrurLfcHBvKyxj/poOeVkFelXqJL/SSfnLoPaP5hps/xblbkDkd4+E8NJ pprcFjXnn653oBKYfaJ0ReMWoCzrGWrVn//9GjRrPzGNPq3QLwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFDtrng8xgcUV0kpn8PcTFsUcONESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvNjc4MTY2MjAtNjQyMC0z NmU3LTliYWUtMjZkM2YzYjE5YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAxqQdAwQA xqQsAwQAxqQvMAwDBADGpHcDBADGpHgDBADGpKMwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAyjqtsYgXSBop nfdQYRjsVctJ25h49EUSqP0lu+k674c8FtKneJsAY+NldvJiVS8gsgkNQJryud5R 2O+idKRKrpZpplSIE60VTsPpCCHul7hCi3UQtwJwOlTjdRXW1EU6RWohGghlO7mb rUQVe7xchCjN2sDA6xIETPS1VblhVsZPHa+oPi+/I69qHM9IgYlWkcxikliEDB+N HEAJHJsQ02cXD+E6gGCnGGPZBjnN8B4R9V5GGknPSyLmkowi36+TGBN7eIYVl2Rf TsAUmTmR2Ex+sjNE7Vbxy/YA3xA4/4x36KzqmUY9nLAviD+tzUoSq98jktPtkGnW L0McIkKjEg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:34 2025 by rpki-client