$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa File: 08b775a9-f16d-34fe-903b-47de515a919a.roa (raw, json) Hash identifier: i0cs2zdSsXFt+amnQOiuL1vDstpjdvFWZsnV980ZbdU= Subject key identifier: F3:41:68:B5:CE:C0:FB:62:26:70:B1:A0:62:F6:EA:57:8F:7A:9E:23 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584B99D7AF4176D3734CE395C980 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 198.22.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:af:41:76:d3:73:4c:e3:95:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3dce5814-3b3b-45d0-91da-93435dd0b47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:51:a0:ba:17:50:f1:64:af:9c:64:38:99: 9b:dc:6d:d6:ff:dd:4a:db:a9:0a:45:34:1a:41:b8: 5f:8c:61:94:b4:4d:75:35:cc:41:44:04:f7:6e:f6: d4:50:a7:68:a4:e2:16:3f:4f:4f:6c:47:fc:5b:91: ba:42:bf:9b:0b:4b:ae:1c:5e:8e:7e:de:07:d8:67: 85:02:18:e1:23:0c:cf:ca:6f:1c:97:d6:f5:6f:22: 52:0d:d1:f5:1e:95:e3:a4:2f:30:c0:88:d8:9f:89: 52:f3:85:c2:5e:ae:e7:12:53:46:49:c3:23:7c:f6: b4:00:08:11:56:6f:82:16:33:61:08:51:e2:df:96: bb:42:66:69:b3:ce:45:90:4c:8b:9a:8f:f7:98:22: ee:dd:e3:7c:27:fe:74:6c:96:bf:99:f0:da:ec:cc: 4f:a1:78:0c:b9:23:e2:97:3b:32:34:d4:86:c7:a3: 99:11:a2:a5:95:42:6c:b7:be:bf:86:f7:66:2d:55: b7:3b:c4:4f:61:a3:d2:4a:e7:56:7e:2b:d4:68:61: 6b:74:eb:51:a9:97:2d:34:23:d2:fe:a1:32:e2:d2: 37:8e:25:dd:03:a8:ef:f4:77:13:57:3d:24:bb:00: 30:d3:2c:ec:5c:ef:20:f4:cb:96:c7:b1:6a:11:ce: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:68:B5:CE:C0:FB:62:26:70:B1:A0:62:F6:EA:57:8F:7A:9E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.22.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:65:d8:4b:5d:00:98:43:8a:2a:b1:d8:9f:31:9b:d9:bb:aa: 39:93:7c:50:4e:6a:f2:66:19:f1:35:00:b4:5a:be:41:92:be: 45:0d:5c:3c:d6:70:29:3b:dd:6f:39:7d:a6:c3:14:21:ae:c2: a7:5b:76:c0:f8:e3:ad:ef:0b:b1:66:fc:da:3a:28:0b:88:1c: 03:56:0f:46:1b:9c:54:56:06:2f:42:20:73:58:90:09:ab:b6: 05:52:2d:4f:95:b9:8e:f5:e9:30:54:be:7f:c8:90:27:fe:92: a6:fb:9c:cb:93:73:d9:85:11:67:4e:45:5c:de:cc:6b:2c:70: ee:a8:06:c9:47:f0:40:16:16:00:70:ef:ea:6a:5f:53:cd:5f: c8:b5:e6:0b:d9:56:cc:cc:56:c6:6e:80:49:6e:8a:ea:ea:d8: b1:c8:90:58:26:ac:a1:56:0e:6d:23:97:80:5c:5e:6b:ac:de: 2e:23:5c:81:12:98:70:9c:09:60:fa:92:f7:20:8f:e9:6f:b7: 6e:26:75:00:0d:8b:50:21:aa:3d:2f:9e:ee:70:2a:3d:24:aa: 8c:62:5d:b2:89:da:b1:05:b9:28:20:ec:b5:9f:36:09:b1:7d: e3:fc:f2:d6:f8:a7:11:a7:d4:42:61:0e:fc:78:24:98:85:e2: fa:10:16:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ169BdtNzTOOVyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2RjZTU4MTQtM2IzYi00NWQwLTkxZGEtOTM0MzVkZDBiNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu5RoLoXUPFkr5xkOJmb3G3W/91K26kKRTQa QbhfjGGUtE11NcxBRAT3bvbUUKdopOIWP09PbEf8W5G6Qr+bC0uuHF6Oft4H2GeF AhjhIwzPym8cl9b1byJSDdH1HpXjpC8wwIjYn4lS84XCXq7nElNGScMjfPa0AAgR Vm+CFjNhCFHi35a7QmZps85FkEyLmo/3mCLu3eN8J/50bJa/mfDa7MxPoXgMuSPi lzsyNNSGx6OZEaKllUJst76/hvdmLVW3O8RPYaPSSudWfivUaGFrdOtRqZctNCPS /qEy4tI3jiXdA6jv9HcTVz0kuwAw0yzsXO8g9MuWx7FqEc77HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNBaLXOwPtiJnCxoGL26lePep4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMDhiNzc1YTktZjE2ZC0z NGZlLTkwM2ItNDdkZTUxNWE5MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZl2EtdAJhDiiqx2J8xm9m7qjmTfFBOavJmGfE1ALRavkGSvkUNXDzW cCk73W85fabDFCGuwqdbdsD4463vC7Fm/No6KAuIHANWD0YbnFRWBi9CIHNYkAmr tgVSLU+VuY716TBUvn/IkCf+kqb7nMuTc9mFEWdORVzezGsscO6oBslH8EAWFgBw 7+pqX1PNX8i15gvZVszMVsZugEluiurq2LHIkFgmrKFWDm0jl4BcXmus3i4jXIES mHCcCWD6kvcgj+lvt24mdQANi1Ahqj0vnu5wKj0kqoxiXbKJ2rEFuSgg7LWfNgmx feP88tb4pxGn1EJhDvx4JJiF4voQFjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:01 2025 by rpki-client