$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa File: 04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa (raw, json) Hash identifier: l1qvyILEYMKGQDXzs5PfC22lYkxyLNIbZG/iutulHtU= Subject key identifier: 3E:6A:B5:BC:21:6A:AD:89:17:ED:3E:CB:90:03:F0:52:2A:10:2B:31 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584BB45D342848336DEC49780FC0 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 22925 IP address blocks: 198.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:34:28:48:33:6d:ec:49:78:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=cb22b5f5-b7b9-433d-a1c4-516e3cb6f390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:53:ca:89:ff:09:72:e9:45:7a:6a:83:d3: 93:be:34:5f:e8:90:9c:11:90:ea:ca:6a:04:91:03: c4:5b:60:90:96:5c:dd:e9:04:02:57:28:15:71:b7: a0:76:b8:19:47:6d:df:35:fa:98:ea:7c:19:d2:03: 5f:e1:53:71:3c:5b:f4:15:c4:0f:53:b3:80:71:70: 78:81:3a:40:59:7d:36:4f:c9:29:a8:31:9a:68:85: 72:7b:6f:66:47:24:be:74:fd:80:62:ea:0b:4b:a0: 89:7f:8e:98:5c:2f:42:72:d4:9c:2a:24:80:db:4a: c0:d0:78:78:2e:55:2f:f6:65:8e:bd:c5:29:a2:bf: ac:a1:90:55:4b:c9:60:3f:5c:1a:8a:2e:26:e3:e2: be:a3:de:54:21:aa:98:cc:02:98:ff:e6:d3:02:e9: 31:da:f0:7c:9e:50:df:43:72:06:2f:2b:00:cc:b4: 63:40:6c:af:8d:b0:fe:74:4d:e7:95:da:6e:72:62: 1e:79:e2:7b:5e:38:8c:8b:e9:b6:d0:c1:bf:69:4a: 62:91:45:b8:f2:9f:44:80:30:f2:ca:02:83:48:a2: 16:c1:95:bd:66:bb:19:78:12:31:89:5c:28:28:24: db:d3:74:91:2c:38:5d:32:66:1c:47:15:e6:df:55: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:B5:BC:21:6A:AD:89:17:ED:3E:CB:90:03:F0:52:2A:10:2B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b7:88:81:64:0c:e9:1b:62:7e:59:0e:25:4b:84:70:31:bd: 02:1e:df:c4:f1:a3:12:1c:a8:7a:d4:f4:51:0d:07:2d:d4:5b: 47:cf:9a:2c:27:56:3c:af:d4:99:82:0c:ee:a2:75:dc:01:66: 27:89:2d:5d:23:31:ac:20:27:30:fc:f3:01:02:8a:1e:96:ba: 9b:e3:87:74:5a:85:10:30:e1:c5:14:e0:2d:16:64:71:37:88: 61:88:5e:5f:c1:4b:41:c2:83:ac:4e:0d:6a:c0:1c:ab:bf:0d: 2e:ac:09:ad:da:91:d6:d5:e7:91:fc:e9:a5:dd:13:53:17:4e: 4b:bc:cd:55:be:e0:5a:1a:85:f5:79:b5:07:30:fe:56:cd:9c: 9e:05:ab:d7:1e:0c:7d:d4:7c:55:a6:df:87:46:fb:72:49:3f: 4f:07:29:02:41:c1:26:73:a7:3a:85:65:ae:2b:91:03:5d:3c: a7:7d:e2:86:c5:e7:4c:7d:d2:1f:e3:e5:eb:ab:4e:a9:40:a9: 2a:43:82:f1:25:3d:82:6c:81:fd:55:bc:ac:1c:ab:97:c5:e0: 0a:f8:3b:a1:d4:0b:90:5b:6a:ef:7f:81:36:7c:13:24:cb:61: 8b:fe:46:59:0f:94:87:f7:dc:b4:a6:58:87:3f:fb:22:b9:59: fd:1f:62:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTQoSDNt7El4D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2IyMmI1ZjUtYjdiOS00MzNkLWExYzQtNTE2ZTNjYjZmMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimlTyon/CXLpRXpqg9OTvjRf6JCcEZDqymoE kQPEW2CQllzd6QQCVygVcbegdrgZR23fNfqY6nwZ0gNf4VNxPFv0FcQPU7OAcXB4 gTpAWX02T8kpqDGaaIVye29mRyS+dP2AYuoLS6CJf46YXC9CctScKiSA20rA0Hh4 LlUv9mWOvcUpor+soZBVS8lgP1waii4m4+K+o95UIaqYzAKY/+bTAukx2vB8nlDf Q3IGLysAzLRjQGyvjbD+dE3nldpucmIeeeJ7XjiMi+m20MG/aUpikUW48p9EgDDy ygKDSKIWwZW9ZrsZeBIxiVwoKCTb03SRLDhdMmYcRxXm31XNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5qtbwhaq2JF+0+y5AD8FIqECsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMDRjNjI0MWUtM2E3ZS0z ZjliLWE1MWQtZTljMjA0MzhjYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxs8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD23iIFkDOkbYn5ZDiVLhHAxvQIe38TxoxIcqHrU9FENBy3UW0fPmiwn Vjyv1JmCDO6iddwBZieJLV0jMawgJzD88wECih6Wupvjh3RahRAw4cUU4C0WZHE3 iGGIXl/BS0HCg6xODWrAHKu/DS6sCa3akdbV55H86aXdE1MXTku8zVW+4FoahfV5 tQcw/lbNnJ4Fq9ceDH3UfFWm34dG+3JJP08HKQJBwSZzpzqFZa4rkQNdPKd94obF 50x90h/j5eurTqlAqSpDgvElPYJsgf1VvKwcq5fF4Ar4O6HUC5Bbau9/gTZ8EyTL YYv+RlkPlIf33LSmWIc/+yK5Wf0fYlE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:53 2025 by rpki-client