$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: F9Dp4GBBZRfcFHrrNCL4AMtedvFTJ4zR24qHiOfJzVI= Subject key identifier: ED:2F:5A:6E:B7:61:4C:12:C0:F0:24:BD:ED:25:B3:C0:3D:57:4E:4B Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584BA39D12B351CFD11C8501AD20 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:b3:51:cf:d1:1c:85:01:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ec0863d3-1b9c-4c7f-890a-f57406828317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:b0:94:96:39:0c:15:b6:b7:dd:9a:8b:6a: c8:d1:bf:01:9d:0e:0a:5d:0a:da:d4:29:07:71:09: 5e:da:6f:f8:c7:82:4a:4b:e7:46:72:7e:b7:a4:78: 9f:d0:13:86:80:2b:11:0c:df:26:08:6a:4a:e9:f6: 1d:e5:79:0b:96:e0:55:4e:7d:ee:22:1c:f8:92:81: 59:42:76:91:dc:1c:2f:63:47:99:9f:93:24:0a:c1: bf:f4:c5:6b:5f:c8:b3:61:6d:c8:f4:22:2c:3a:c9: 4f:c9:df:ee:53:b2:45:c6:0b:bf:8b:2c:77:e0:4b: a3:c3:74:84:73:a4:71:a1:8d:6b:e8:ed:d5:03:27: 5a:89:1e:5b:b6:2b:c6:34:75:71:66:ee:17:91:ca: d6:9c:56:19:44:92:f7:8f:48:0b:50:d4:13:5d:db: 12:da:9c:81:ba:26:32:2b:a2:6f:92:34:19:33:af: c1:12:fe:9e:69:45:35:db:92:62:05:84:d5:9e:a8: b3:0a:5f:cf:cb:8a:5c:21:22:b7:53:e2:46:74:80: e9:26:e8:72:08:68:ad:c2:f3:bf:d6:18:fa:fc:7b: 54:d9:d6:a7:08:f2:05:72:29:a1:c3:55:aa:ad:de: 02:0f:9d:5e:a1:65:f3:2c:f4:13:b0:bf:d0:f2:86: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:5A:6E:B7:61:4C:12:C0:F0:24:BD:ED:25:B3:C0:3D:57:4E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ef:b4:16:38:c2:6b:7b:1b:61:c1:d4:f4:94:c8:e9:4e:79: a1:53:ad:64:36:cc:e2:a3:32:b2:2f:a8:ba:ac:7b:1e:6e:8e: ce:b0:c4:fa:2e:f6:d6:7e:28:e8:2e:6f:b0:3a:77:9e:36:5a: de:29:cd:fe:73:f5:38:68:64:eb:81:94:e0:79:70:e0:0c:86: 7c:f6:ea:db:36:28:09:e7:9c:11:ff:bd:9f:06:6a:fa:4c:ef: a1:74:19:c0:d0:13:f4:e9:25:5c:c1:36:4f:fe:e7:23:f4:4b: 6d:58:17:a5:d7:a2:16:7b:d6:4e:4c:50:a6:06:b4:b7:19:5f: 1a:72:1e:72:98:44:f5:e7:4b:8e:14:80:da:f9:c2:40:2b:00: 6b:7f:3f:e9:7b:40:b9:ec:d7:17:d0:1c:e4:ab:cf:55:e2:96: a2:6b:04:0c:74:db:08:2d:1d:b0:f4:66:24:a7:eb:78:5e:a5: be:25:71:5f:99:8e:54:04:27:26:3f:07:24:96:c2:0d:f5:6b: 27:bb:57:91:49:49:d2:12:76:6e:a2:12:46:01:4e:58:0d:ff: 03:77:df:75:36:4f:d2:b6:44:68:97:0e:34:a3:54:bd:7d:27: 29:1d:b3:08:04:6b:47:34:b9:9f:71:45:f5:e8:fc:a4:bc:2f: 0a:5a:13:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRKzUc/RHIUBrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWMwODYzZDMtMWI5Yy00YzdmLTg5MGEtZjU3NDA2ODI4MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGmwlJY5DBW2t92ai2rI0b8BnQ4KXQra1CkH cQle2m/4x4JKS+dGcn63pHif0BOGgCsRDN8mCGpK6fYd5XkLluBVTn3uIhz4koFZ QnaR3BwvY0eZn5MkCsG/9MVrX8izYW3I9CIsOslPyd/uU7JFxgu/iyx34Eujw3SE c6RxoY1r6O3VAydaiR5btivGNHVxZu4XkcrWnFYZRJL3j0gLUNQTXdsS2pyBuiYy K6JvkjQZM6/BEv6eaUU125JiBYTVnqizCl/Py4pcISK3U+JGdIDpJuhyCGitwvO/ 1hj6/HtU2danCPIFcimhw1Wqrd4CD51eoWXzLPQTsL/Q8obvJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0vWm63YUwSwPAkve0ls8A9V05LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjvtBY4wmt7G2HB1PSUyOlOeaFTrWQ2zOKjMrIvqLqsex5ujs6wxPou 9tZ+KOgub7A6d542Wt4pzf5z9ThoZOuBlOB5cOAMhnz26ts2KAnnnBH/vZ8GavpM 76F0GcDQE/TpJVzBNk/+5yP0S21YF6XXohZ71k5MUKYGtLcZXxpyHnKYRPXnS44U gNr5wkArAGt/P+l7QLns1xfQHOSrz1XilqJrBAx02wgtHbD0ZiSn63hepb4lcV+Z jlQEJyY/BySWwg31aye7V5FJSdISdm6iEkYBTlgN/wN333U2T9K2RGiXDjSjVL19 JykdswgEa0c0uZ9xRfXo/KS8LwpaE3o= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:21 2025 by rpki-client