$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa File: 2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa (raw, json) Hash identifier: DSnl/zkwP/oWZ7pndn8Lkp2mzwROOjkhjSD4/6hHCag= Subject key identifier: BE:66:AB:C8:5F:49:64:8E:86:82:72:A8:60:0C:30:38:FD:D9:1C:2F Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Certificate serial: 010D0C9F4328584BB2F7AB732DB304BA6676EA80 Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14537 IP address blocks: 198.37.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ab:73:2d:b3:04:ba:66:76:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ee4d7567-0a24-4bce-8c50-cca10f6cfa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:30:e4:6d:f3:90:cb:ff:eb:5b:4e:53:f2: e2:50:29:ba:39:3a:c9:ae:4e:cf:e4:bd:ce:98:04: 73:16:36:a1:b1:dd:2e:18:1c:cf:15:17:ca:45:98: ff:26:55:7f:40:48:47:4a:48:66:32:4f:2e:99:56: 34:7a:d2:55:b0:36:be:d1:c0:22:a9:1b:08:88:31: 6a:a7:73:4e:47:65:d6:f2:9d:ec:be:d0:f1:77:82: a5:6b:12:58:6f:15:8f:d5:af:1b:1a:cd:81:e3:be: 54:5a:3f:64:a4:a8:3b:76:ae:47:5d:e8:2b:fd:1f: 75:0b:5f:e3:2c:f5:50:48:a2:fe:59:6e:53:1f:7a: 99:ac:80:60:e1:a3:3f:42:27:44:e2:48:23:b8:54: cc:53:c2:73:4f:d9:ee:7e:c3:ff:4a:09:ed:99:20: c3:1b:e1:c3:77:ea:f8:59:83:be:05:d4:7e:9c:c3: ee:f3:b9:b4:79:6a:56:ba:0b:de:8a:f8:16:63:bd: ef:6c:1f:61:8f:ae:48:f6:7a:66:21:a8:65:e4:f2: 0f:8e:e3:2c:3f:92:c6:be:0d:9c:41:46:6c:3a:ae: 16:6c:47:7a:02:8c:9b:cc:4c:77:a5:3c:22:b5:b0: 8c:d3:2b:2e:2b:09:90:00:90:8d:78:d5:44:8c:0f: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:AB:C8:5F:49:64:8E:86:82:72:A8:60:0C:30:38:FD:D9:1C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl X509v3 Authority Key Identifier: keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer sbgp-ipAddrBlock: critical IPv4: 198.37.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:85:1d:19:87:ad:e5:72:c5:3f:82:63:b3:36:6b:2c:89:51: 5e:ff:d1:27:6b:2e:7d:6a:18:88:1d:68:06:39:6a:e2:df:49: 98:dd:3a:06:32:15:9f:24:46:69:7e:24:cf:45:c8:66:b2:ef: 31:37:f8:bf:67:ed:f9:9b:a0:db:d0:90:80:22:03:9b:12:d6: 68:53:43:55:ec:5e:f9:23:fc:8a:bb:16:e2:ed:9f:fd:57:76: 3d:ea:6a:47:f3:c0:60:11:59:b2:d4:84:47:3b:02:ca:5c:73: c6:8f:56:05:b3:8d:57:fa:11:23:95:bb:07:23:11:fd:fd:3c: 98:04:db:91:ce:94:79:2b:9c:31:db:78:ea:91:66:5b:fb:22: da:a4:09:c8:27:38:a2:de:df:0f:34:2a:80:5d:6f:a1:da:62: a4:f1:29:8b:50:8e:e3:0a:66:01:07:af:e7:67:db:77:d8:61: c1:72:f1:cf:7c:22:59:d9:81:8e:4e:38:9f:d4:2c:42:c7:13: cb:f1:3b:7c:40:2a:08:ff:ba:97:45:bc:50:25:23:fd:27:30: 6c:64:cc:b2:70:67:5b:f8:b3:52:8d:92:c4:3c:e0:a5:07:4d: 84:2e:be:a8:c9:8a:5a:18:ea:4e:23:4a:ff:3b:13:0b:e7:cb: 25:3c:48:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96tzLbMEumZ26oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3 MGRjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWU0ZDc1NjctMGEyNC00YmNlLThjNTAtY2NhMTBmNmNmYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIMw5G3zkMv/61tOU/LiUCm6OTrJrk7P5L3O mARzFjahsd0uGBzPFRfKRZj/JlV/QEhHSkhmMk8umVY0etJVsDa+0cAiqRsIiDFq p3NOR2XW8p3svtDxd4KlaxJYbxWP1a8bGs2B475UWj9kpKg7dq5HXegr/R91C1/j LPVQSKL+WW5TH3qZrIBg4aM/QidE4kgjuFTMU8JzT9nufsP/SgntmSDDG+HDd+r4 WYO+BdR+nMPu87m0eWpWugveivgWY73vbB9hj65I9npmIahl5PIPjuMsP5LGvg2c QUZsOq4WbEd6AoybzEx3pTwitbCM0ysuKwmQAJCNeNVEjA+2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5mq8hfSWSOhoJyqGAMMDj92RwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMjIyMGY4MTEtYzhhNi0z MWJkLTlkN2EtYmMzM2M5OGE4YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1 NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmFHRmHreVyxT+CY7M2ayyJUV7/0SdrLn1qGIgdaAY5auLfSZjdOgYy FZ8kRml+JM9FyGay7zE3+L9n7fmboNvQkIAiA5sS1mhTQ1XsXvkj/Iq7FuLtn/1X dj3qakfzwGARWbLUhEc7Aspcc8aPVgWzjVf6ESOVuwcjEf39PJgE25HOlHkrnDHb eOqRZlv7ItqkCcgnOKLe3w80KoBdb6HaYqTxKYtQjuMKZgEHr+dn23fYYcFy8c98 IlnZgY5OOJ/ULELHE8vxO3xAKgj/updFvFAlI/0nMGxkzLJwZ1v4s1KNksQ84KUH TYQuvqjJiloY6k4jSv87EwvnyyU8SOY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:35 2025 by rpki-client