$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa File: bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa (raw, json) Hash identifier: /Kjuwn8G3ALUMYhQM3uvg9ya7o2vXFT7MYesgj/gzAo= Subject key identifier: AE:10:33:62:DC:B2:10:31:3D:3A:85:51:AB:94:98:6C:DD:7B:2B:3C Certificate issuer: /CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Certificate serial: 010D0C9F4328584BB88D2E9DA8B27B89B776C0C0 Authority key identifier: 3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 53566 IP address blocks: 198.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2e:9d:a8:b2:7b:89:b7:76:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9548234c-c6d1-4c0f-aafb-104159ebd025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:ba:4d:0c:69:a9:a9:f6:36:5c:7b:2f:40: 51:c6:ae:e5:9c:5f:09:02:a9:f2:7e:82:56:05:0e: 21:7f:b4:92:57:97:aa:75:78:dc:d5:17:b9:71:23: 0a:74:00:e2:7b:7b:e5:89:6b:ec:31:59:9a:11:43: 4c:df:a5:1b:0b:a3:47:65:d2:32:d3:c3:a2:c2:78: b4:5c:7d:01:3c:92:c2:56:c6:bd:04:fb:8f:8b:ff: 96:a6:73:dc:da:fa:b2:01:03:99:17:09:3c:ff:46: 6a:ec:20:66:57:e1:93:45:72:e0:42:30:86:3c:5c: a9:f4:cd:7a:09:c0:b0:29:2a:35:8c:8f:f5:80:3f: 68:07:5a:59:9b:7f:1a:66:6d:19:5b:14:22:97:c9: 7d:df:58:41:76:b1:e4:f1:4b:83:01:6c:05:7c:37: 90:ea:c8:6d:c4:ec:31:0b:a9:65:12:37:70:be:db: dd:01:3e:e5:bd:2a:5c:c0:68:11:f5:18:98:de:35: 86:67:21:14:89:57:60:26:63:d2:e5:88:c6:e9:6e: cf:ee:c0:bb:c5:26:c4:80:8c:a5:62:53:77:87:68: 73:7d:05:87:a9:f2:fc:c1:b7:0b:b2:69:c3:c6:ca: 51:de:a7:d5:30:b9:fd:06:37:62:71:d9:f0:b3:62: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:33:62:DC:B2:10:31:3D:3A:85:51:AB:94:98:6C:DD:7B:2B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl X509v3 Authority Key Identifier: keyid:3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer sbgp-ipAddrBlock: critical IPv4: 198.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3d:fd:be:7b:a6:21:53:ae:6e:9a:f4:c8:00:9e:83:d6:89: e6:a0:08:24:1d:76:02:54:f6:64:e0:e9:d5:58:ef:0b:35:c4: 2c:57:2a:86:2a:10:5e:ea:f5:0d:16:a9:25:29:30:50:8b:5e: 11:b2:b6:92:e6:19:d5:9d:25:de:4c:a6:32:51:ce:c0:9c:8e: aa:cc:33:1b:74:80:0b:48:09:ec:4a:95:75:a0:70:f5:40:9d: be:5c:dc:35:d7:ac:90:0e:93:f9:2a:76:d2:9a:81:5e:04:c2: f5:8d:2b:67:ca:a5:c1:b2:60:83:c8:52:0f:ec:10:be:bc:e5: cf:0b:d3:05:f5:4c:94:c9:7a:2d:5e:89:e8:ae:e7:04:c5:46: 72:20:e0:97:22:b5:b4:bb:43:f4:00:22:46:19:24:b6:59:cc: dd:e2:9b:20:36:a7:af:b0:36:df:69:93:b4:71:23:f8:bc:27: ab:59:47:0f:fc:b0:36:c0:98:8f:63:66:bd:86:cd:14:3e:69: 4f:7f:f2:1b:0e:ab:1e:ba:be:0c:04:e1:02:4d:f5:25:8a:ef: 4c:5d:92:3d:d4:06:de:07:cc:30:75:ac:9e:88:74:5d:4f:21: ea:c9:26:47:ee:26:55:9f:79:78:df:d2:3b:77:f6:2e:9d:4b: e8:23:9f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jS6dqLJ7ibd2wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5N2MyMGUtZjNlMi00ODVkLWFjMjAtMjlhNGZmOGE0 MDljMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTU0ODIzNGMtYzZkMS00YzBmLWFhZmItMTA0MTU5ZWJkMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDC6TQxpqan2Nlx7L0BRxq7lnF8JAqnyfoJW BQ4hf7SSV5eqdXjc1Re5cSMKdADie3vliWvsMVmaEUNM36UbC6NHZdIy08Oiwni0 XH0BPJLCVsa9BPuPi/+WpnPc2vqyAQOZFwk8/0Zq7CBmV+GTRXLgQjCGPFyp9M16 CcCwKSo1jI/1gD9oB1pZm38aZm0ZWxQil8l931hBdrHk8UuDAWwFfDeQ6shtxOwx C6llEjdwvtvdAT7lvSpcwGgR9RiY3jWGZyEUiVdgJmPS5YjG6W7P7sC7xSbEgIyl YlN3h2hzfQWHqfL8wbcLsmnDxspR3qfVMLn9Bjdicdnws2IezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4QM2LcshAxPTqFUauUmGzdeys8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3 YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0ZmY4YTQwOWMvYmNlYTBjOGItMGFiYi0z ZmM3LThhYWEtODU0YTRiODE5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5N2MyMGUtZjNlMi00ODVkLWFj MjAtMjlhNGZmOGE0MDljL2VhOTdjMjBlLWYzZTItNDg1ZC1hYzIwLTI5YTRmZjhh NDA5Yy5jcmwwHwYDVR0jBBgwFoAUOsEQZ9u72rIO9ekaadIVPXLnf8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0 ZmY4YTQwOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI9/b57piFTrm6a9MgAnoPWieagCCQddgJU9mTg6dVY7ws1xCxXKoYq EF7q9Q0WqSUpMFCLXhGytpLmGdWdJd5MpjJRzsCcjqrMMxt0gAtICexKlXWgcPVA nb5c3DXXrJAOk/kqdtKagV4EwvWNK2fKpcGyYIPIUg/sEL685c8L0wX1TJTJei1e ieiu5wTFRnIg4JcitbS7Q/QAIkYZJLZZzN3imyA2p6+wNt9pk7RxI/i8J6tZRw/8 sDbAmI9jZr2GzRQ+aU9/8hsOqx66vgwE4QJN9SWK70xdkj3UBt4HzDB1rJ6IdF1P IerJJkfuJlWfeXjf0jt39i6dS+gjnyg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:00 2025 by rpki-client