$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa File: 0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa (raw, json) Hash identifier: KDrQHXNH5/RMmFoUsQfaphPIIEXHTDUzggJr5vjNgjM= Subject key identifier: 01:F1:D0:2E:2E:D6:27:81:72:BA:07:A8:69:99:05:D7:01:09:42:FD Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584B99D7AF30AA0A9AAFEE6DF480 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 198.22.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:af:30:aa:0a:9a:af:ee:6d:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=56cb4f97-4bd1-40ef-ad53-ac18b5ad19b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:45:0f:3e:71:94:a4:b0:0b:79:b2:a4:e7: c7:da:fc:96:a7:b1:f5:b2:d1:5f:3b:66:a8:45:44: 88:51:c9:be:3a:e4:8a:c8:12:d3:0e:1e:e7:2c:97: 8d:ba:1b:60:e5:3e:5e:04:90:f2:40:58:62:38:2f: 25:26:00:d7:fc:8b:94:54:28:52:15:2b:a9:3b:0f: ec:fa:e8:07:d2:ea:85:a2:94:e7:0d:73:2d:ab:1f: c7:1b:db:7a:e2:dd:b2:0a:68:aa:3b:3d:f4:f1:69: c2:8d:ca:8d:c5:65:d3:8a:63:67:0c:41:f7:db:50: 52:25:da:78:f3:c7:51:c7:fd:db:ef:50:2e:ad:6e: 98:25:0a:96:67:2d:b0:99:f2:4c:a6:d6:54:c7:8c: 78:02:dc:b5:1a:f8:68:bc:4c:7c:be:a0:6a:fc:f1: 34:2f:67:02:1a:7f:9b:78:41:77:73:83:b0:73:c2: 59:e7:9c:10:19:b2:5f:a9:0c:d8:8e:be:3b:ea:f3: 86:ac:d3:7c:62:73:6b:76:bc:0e:a1:4f:ca:10:7e: 45:79:c5:54:80:2e:24:2f:22:d7:fd:27:1e:f4:c8: 1d:3f:b1:d9:81:4c:09:27:d6:e6:eb:25:54:26:60: 05:05:7a:6e:03:d4:de:ba:55:d2:f4:42:08:54:e3: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F1:D0:2E:2E:D6:27:81:72:BA:07:A8:69:99:05:D7:01:09:42:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0b748b8d-ba99-3c1b-9130-a2662d021bfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.22.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c3:1e:69:3d:3c:8e:5d:8a:74:0a:a8:c8:1d:7b:38:ea:26: 33:d5:f8:e8:be:0f:80:d6:8c:23:6e:b4:8c:a5:fc:cb:69:16: 13:75:a4:f3:e8:c5:6e:c1:32:85:0d:94:28:b0:ce:9b:a5:b0: c3:0c:88:3d:16:fd:1f:f4:c3:45:6a:92:64:5a:f2:4b:5d:18: 87:c3:81:de:92:03:62:2b:5a:bf:a7:14:ce:ac:c5:05:0e:6e: 4a:9d:39:98:91:d2:53:46:bf:87:60:ca:f6:38:c3:e8:c1:55: ab:d1:c1:f8:4a:62:c7:49:e2:bb:0f:fe:f0:73:c3:ec:07:64: 6a:63:09:c2:e6:6a:59:18:c6:4f:55:4d:55:a4:5d:cf:2e:69: 11:db:be:e7:33:0d:db:5b:8e:cf:81:f9:56:47:a8:97:5b:b4: 42:68:37:2d:fb:0e:9a:3f:9e:fc:15:6e:ff:0b:45:3f:1f:fb: 23:7c:0a:2d:71:60:0a:e0:0b:40:d4:60:39:fb:2a:60:0a:14: 87:00:70:a5:d9:0a:22:aa:71:87:51:fa:62:6d:fd:02:24:32: 79:54:76:cb:1e:22:ef:cc:d1:04:28:fa:6d:c2:9f:73:64:29: f2:dc:ff:a3:a7:5b:af:b1:f6:f0:4d:b8:ae:67:ef:f6:fe:76: eb:4e:02:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ168wqgqar+5t9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTZjYjRmOTctNGJkMS00MGVmLWFkNTMtYWMxOGI1YWQxOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum9FDz5xlKSwC3mypOfH2vyWp7H1stFfO2ao RUSIUcm+OuSKyBLTDh7nLJeNuhtg5T5eBJDyQFhiOC8lJgDX/IuUVChSFSupOw/s +ugH0uqFopTnDXMtqx/HG9t64t2yCmiqOz308WnCjcqNxWXTimNnDEH321BSJdp4 88dRx/3b71AurW6YJQqWZy2wmfJMptZUx4x4Aty1GvhovEx8vqBq/PE0L2cCGn+b eEF3c4Owc8JZ55wQGbJfqQzYjr476vOGrNN8YnNrdrwOoU/KEH5FecVUgC4kLyLX /Sce9MgdP7HZgUwJJ9bm6yVUJmAFBXpuA9TeulXS9EIIVOPGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHx0C4u1ieBcroHqGmZBdcBCUL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMGI3NDhiOGQtYmE5OS0z YzFiLTkxMzAtYTI2NjJkMDIxYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3DHmk9PI5dinQKqMgdezjqJjPV+Oi+D4DWjCNutIyl/MtpFhN1pPPo xW7BMoUNlCiwzpulsMMMiD0W/R/0w0VqkmRa8ktdGIfDgd6SA2IrWr+nFM6sxQUO bkqdOZiR0lNGv4dgyvY4w+jBVavRwfhKYsdJ4rsP/vBzw+wHZGpjCcLmalkYxk9V TVWkXc8uaRHbvuczDdtbjs+B+VZHqJdbtEJoNy37Dpo/nvwVbv8LRT8f+yN8Ci1x YArgC0DUYDn7KmAKFIcAcKXZCiKqcYdR+mJt/QIkMnlUdsseIu/M0QQo+m3Cn3Nk KfLc/6OnW6+x9vBNuK5n7/b+dutOAsc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:40 2025 by rpki-client