$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa File: dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa (raw, json) Hash identifier: R9N5Xuy5VfH0Rc5K2RgalsOro5PPNPPjyiVg4Is/ZFM= Subject key identifier: 86:25:8F:3A:A5:D4:B8:86:37:C4:D9:3B:0A:C3:A7:10:F9:3B:20:15 Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Certificate serial: 010D0C9F4328584BABFD00B651099DD1404122A0 Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 11904 IP address blocks: 198.167.240.0/21 maxlen: 21 198.167.240.0/22 maxlen: 22 198.167.240.0/23 maxlen: 23 198.167.242.0/23 maxlen: 23 198.167.244.0/22 maxlen: 22 198.167.244.0/23 maxlen: 23 198.167.245.0/24 maxlen: 24 198.167.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:00:b6:51:09:9d:d1:40:41:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3b374060-ded8-49dc-8b9e-be8f869b4358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:fe:2e:bd:98:9c:17:5d:80:95:c9:78:92: c8:64:fb:08:12:c9:41:f9:6f:19:e8:4f:b8:95:50: 43:b4:0d:a0:28:7a:44:b3:80:c8:51:72:07:21:6c: 38:b9:a3:81:0e:e1:22:22:50:65:76:34:96:f1:e1: ca:6d:88:a5:69:1d:cc:b1:13:3a:40:aa:2a:d0:b9: 09:c0:64:91:ac:d0:cc:23:60:bb:3f:e8:5d:0a:f0: 26:66:1a:8b:5d:6c:86:f2:23:48:72:79:ea:fd:6d: cb:55:2c:98:f1:36:af:ea:ff:6b:d8:f2:e4:c0:dd: 32:f0:9a:02:24:60:7b:b8:55:fe:2b:19:6e:2f:3f: 25:36:03:85:fe:da:10:0d:7e:96:85:52:9f:4f:da: 73:37:ad:29:bf:c7:f9:18:61:f2:8b:f5:7a:ac:62: fd:04:ee:d1:8f:b3:2e:c4:a7:36:70:fe:ca:e0:af: ea:03:a3:1a:c0:21:9e:30:41:4d:ef:dc:6e:f7:97: 78:94:2c:59:7b:32:6b:c8:6d:49:9a:98:61:b2:37: bd:27:c8:18:be:6a:df:6a:ce:ae:ce:c7:6b:a5:49: 5d:e0:f3:f1:ab:0e:81:89:be:d6:51:3a:f6:4d:cf: 1c:69:9f:f3:d0:a1:61:35:32:40:27:fb:9e:09:ec: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:8F:3A:A5:D4:B8:86:37:C4:D9:3B:0A:C3:A7:10:F9:3B:20:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl X509v3 Authority Key Identifier: keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer sbgp-ipAddrBlock: critical IPv4: 198.167.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:aa:7d:0d:17:3a:3d:cb:a4:df:35:7e:1f:62:3b:ba:de:4b: 92:04:00:b4:08:f6:b4:31:a7:62:ef:fd:0a:7a:fc:4d:45:f6: b2:3d:7d:dd:ee:a3:a8:a3:c9:ac:33:26:6f:0f:db:cc:e0:a3: 16:c2:00:be:6d:35:b7:f9:60:8a:c7:ad:f8:bb:f1:fb:09:e0: e8:cc:25:7c:f0:28:78:4e:75:47:43:ad:cd:7e:55:e9:90:1f: 3e:5f:77:d0:de:93:e6:f1:dc:13:8f:4d:3d:3c:56:a7:ce:fe: c2:80:5c:ea:15:4a:49:8c:89:43:be:ee:66:15:25:aa:68:07: 62:98:e9:36:60:58:67:03:d6:ac:9c:d0:2b:dc:62:45:0d:22: d3:1f:62:29:f1:51:30:26:08:b4:fd:67:28:0d:fe:02:ac:ca: 25:8f:11:ee:b3:d7:01:77:0c:53:5c:20:5f:03:36:6b:04:48: 27:6a:2f:ee:1b:27:47:5e:62:b9:07:dc:34:16:07:90:8f:cb: a2:81:f2:60:c0:4d:19:02:84:3b:8a:6c:5e:eb:eb:a3:87:8b: 21:16:7d:6f:02:32:41:18:7b:34:2c:78:d1:f6:bc:96:31:28: 43:4b:16:81:78:f6:39:34:1f:fb:0f:97:b6:86:01:f7:ad:ce: e7:af:b4:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QC2UQmd0UBBIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3 ZmQwMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2IzNzQwNjAtZGVkOC00OWRjLThiOWUtYmU4Zjg2OWI0MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zf+Lr2YnBddgJXJeJLIZPsIEslB+W8Z6E+4 lVBDtA2gKHpEs4DIUXIHIWw4uaOBDuEiIlBldjSW8eHKbYilaR3MsRM6QKoq0LkJ wGSRrNDMI2C7P+hdCvAmZhqLXWyG8iNIcnnq/W3LVSyY8Tav6v9r2PLkwN0y8JoC JGB7uFX+KxluLz8lNgOF/toQDX6WhVKfT9pzN60pv8f5GGHyi/V6rGL9BO7Rj7Mu xKc2cP7K4K/qA6MawCGeMEFN79xu95d4lCxZezJryG1Jmphhsje9J8gYvmrfas6u zsdrpUld4PPxqw6Bib7WUTr2Tc8caZ/z0KFhNTJAJ/ueCey4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYljzql1LiGN8TZOwrDpxD5OyAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvZGQyNzliOTEtNDJiNi0z MWJjLWJmMzktNjE3ZTlhMmQzZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3 MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaqfQ0XOj3LpN81fh9iO7reS5IEALQI9rQxp2Lv/Qp6/E1F9rI9fd3u o6ijyawzJm8P28zgoxbCAL5tNbf5YIrHrfi78fsJ4OjMJXzwKHhOdUdDrc1+VemQ Hz5fd9Dek+bx3BOPTT08VqfO/sKAXOoVSkmMiUO+7mYVJapoB2KY6TZgWGcD1qyc 0CvcYkUNItMfYinxUTAmCLT9ZygN/gKsyiWPEe6z1wF3DFNcIF8DNmsESCdqL+4b J0deYrkH3DQWB5CPy6KB8mDATRkChDuKbF7r66OHiyEWfW8CMkEYezQseNH2vJYx KENLFoF49jk0H/sPl7aGAfetzuevtAs= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:31 2025 by rpki-client