$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json) Hash identifier: ifdkT74bOscshkVN5v1ja5lE7Df1WIVGJuvJvhlrO2U= Subject key identifier: B3:A6:10:86:80:98:F2:26:BB:D0:67:F9:4C:60:50:68:3C:F3:EC:60 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584BC10ADC92F6CB47882E797B40 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 19318 IP address blocks: 198.96.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:dc:92:f6:cb:47:88:2e:79:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=fec3ce05-dbce-4ccf-be50-e8687e83f019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:28:1a:84:ef:5b:25:49:47:ed:5d:19:e1: 78:33:c2:ef:69:75:8e:f3:6a:21:ba:6e:b9:57:77: db:20:58:b6:2e:f4:07:19:4c:ea:f9:1b:2a:09:b0: d6:f1:e7:ac:c5:97:54:ef:7e:1f:6d:03:34:0d:c3: 4b:97:6a:d1:fe:33:e3:3c:ad:71:86:12:c9:0b:b5: 79:df:ed:7b:eb:d2:93:95:c1:d1:2f:ca:b9:aa:a9: 1e:d3:0a:c5:44:8f:27:61:63:78:80:6b:45:2c:40: 85:4b:f9:10:c7:75:15:07:3e:35:5e:86:fe:4c:c3: b5:76:ff:ba:2c:6e:d1:c4:65:7b:19:10:06:e7:88: f8:9d:b6:9f:7c:e2:f1:01:76:98:01:01:be:ff:2d: c1:21:4a:3c:ed:92:57:27:c4:19:11:b4:ff:b5:ce: 9a:57:f1:58:e1:ca:27:31:72:52:25:10:76:bc:fc: 8c:5d:4d:d5:be:b6:b3:a4:ab:f0:c8:5e:e1:86:c7: c5:50:18:a8:18:40:b1:b9:01:38:e5:b6:14:78:56: e1:95:c7:a0:4e:30:7a:f5:2b:40:09:fc:1c:ed:d7: 94:74:e9:59:ae:14:10:e3:2c:95:3f:24:de:da:6a: d7:8a:83:44:48:df:a7:ac:30:f0:c8:41:53:5f:3a: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:10:86:80:98:F2:26:BB:D0:67:F9:4C:60:50:68:3C:F3:EC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 198.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e6:29:d0:a3:e2:9d:a6:b0:fd:78:fd:b7:50:e5:70:cc:94: 7b:58:bf:b3:f5:86:19:53:39:56:c9:86:3f:d0:28:a2:0c:a3: fd:db:ba:5d:ac:55:13:52:f9:b6:06:02:cc:13:a8:e4:7b:93: d0:5d:15:97:52:b6:91:eb:70:0b:75:c9:3e:b0:08:f8:79:60: 29:0a:1c:cb:16:03:86:e8:66:b3:a0:49:5a:a5:70:35:20:ed: c7:c9:d0:53:d5:5d:44:12:1b:d0:4b:fe:6c:59:6f:f6:13:ac: 45:d8:07:db:bd:94:0e:ae:e2:2c:d4:7d:87:7d:52:ee:eb:78: 86:db:f7:b8:ab:87:b4:c5:06:f6:9b:46:b6:31:24:5b:f6:72: d8:13:c6:b6:6b:4f:74:20:ba:35:14:4e:78:10:ac:e1:7f:65: 5d:af:28:d2:f3:26:a1:72:67:af:20:39:58:7e:df:7d:e1:13: d3:45:df:7b:2b:00:d4:52:bf:85:96:ef:ba:a0:8b:44:be:a2: c2:79:fe:d5:67:f3:86:8f:52:9b:50:6c:07:94:3d:79:27:ec: 44:89:ac:d4:cb:43:96:fc:c5:e2:af:b3:57:68:39:06:ca:eb: aa:96:5c:98:97:c4:fc:6b:b9:75:a9:d5:9e:26:3e:26:ab:2d: 62:ae:f2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtyS9stHiC55e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZmVjM2NlMDUtZGJjZS00Y2NmLWJlNTAtZTg2ODdlODNmMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD0oGoTvWyVJR+1dGeF4M8LvaXWO82ohum65 V3fbIFi2LvQHGUzq+RsqCbDW8eesxZdU734fbQM0DcNLl2rR/jPjPK1xhhLJC7V5 3+1769KTlcHRL8q5qqke0wrFRI8nYWN4gGtFLECFS/kQx3UVBz41Xob+TMO1dv+6 LG7RxGV7GRAG54j4nbaffOLxAXaYAQG+/y3BIUo87ZJXJ8QZEbT/tc6aV/FY4con MXJSJRB2vPyMXU3VvrazpKvwyF7hhsfFUBioGECxuQE45bYUeFbhlcegTjB69StA Cfwc7deUdOlZrhQQ4yyVPyTe2mrXioNESN+nrDDwyEFTXzojcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOmEIaAmPImu9Bn+UxgUGg88+xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMWQxYmRlYzgtNGZkNi0z ZjcxLWE1YjctOWI4MGFkZGEwNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvmKdCj4p2msP14/bdQ5XDMlHtYv7P1hhlTOVbJhj/QKKIMo/3bul2s VRNS+bYGAswTqOR7k9BdFZdStpHrcAt1yT6wCPh5YCkKHMsWA4boZrOgSVqlcDUg 7cfJ0FPVXUQSG9BL/mxZb/YTrEXYB9u9lA6u4izUfYd9Uu7reIbb97irh7TFBvab RrYxJFv2ctgTxrZrT3QgujUUTngQrOF/ZV2vKNLzJqFyZ68gOVh+333hE9NF33sr ANRSv4WW77qgi0S+osJ5/tVn84aPUptQbAeUPXkn7ESJrNTLQ5b8xeKvs1doOQbK 66qWXJiXxPxruXWp1Z4mPiarLWKu8gk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:08 2025 by rpki-client