$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa File: 1480a659-dff0-3379-854a-3902b5d6c9ea.roa (raw, json) Hash identifier: ms9k3hHllN4DzxOvqCEyQpdugAz5f0Dt7DglXGxrokY= Subject key identifier: 8C:A7:F0:C8:11:B2:AE:7A:FE:B5:9F:F7:59:14:EE:A7:15:91:49:D1 Certificate issuer: /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Certificate serial: 010D0C9F4328584B970CD496336BA9ECA1E90F80 Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 198.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d4:96:33:6b:a9:ec:a1:e9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bdec8e8f-2c97-4a73-bd19-6fbaa1fec43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:90:43:ee:a9:a4:42:e5:77:9d:4b:88:c3: 14:8c:4f:c1:fd:fa:fc:f2:33:81:7e:ea:71:ce:df: cf:ec:b5:4e:3f:71:5b:e5:19:b3:df:e4:75:e3:ef: 45:5c:f1:86:83:9f:c1:20:59:83:34:b9:45:78:54: 66:08:7e:3a:b0:ba:dd:72:ae:5a:28:36:69:f4:0f: 45:2b:12:c5:da:24:e3:7b:e2:5f:f8:e5:a4:a8:f2: 31:06:04:ab:28:87:af:1c:c2:20:5a:ef:ec:d3:c3: c3:f7:84:f7:85:13:56:dd:b4:f8:d9:68:11:1d:83: 52:ba:1b:a7:1d:2f:d7:26:36:03:f0:e0:2f:f0:24: b5:05:fc:0c:fd:c6:0f:16:a4:63:54:35:b7:5a:be: cd:ed:14:c5:b8:32:4a:e9:0a:c9:cf:66:81:60:61: 00:43:cc:57:cb:e9:a3:89:f1:6c:ca:3f:a8:7d:35: d4:85:00:39:66:df:0d:ca:96:0c:77:54:6f:81:f0: d6:7b:06:8b:c8:87:32:e7:f1:a6:7e:5e:a8:8a:85: 9f:00:db:5a:cc:10:b3:66:21:8c:68:2d:20:b1:d3: b2:0f:45:ce:1d:dd:8f:a4:37:8d:74:f2:c3:36:49: 89:0c:69:25:0d:6c:0f:cb:24:bd:85:83:f5:d6:65: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A7:F0:C8:11:B2:AE:7A:FE:B5:9F:F7:59:14:EE:A7:15:91:49:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl X509v3 Authority Key Identifier: keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a4:0d:21:76:2d:0c:11:e1:df:b4:40:2b:54:9f:3d:15:d2: ef:2e:de:51:21:ff:03:bd:4c:ff:88:52:f4:70:8d:af:0b:fe: e2:50:0d:9c:58:c3:ff:97:5e:b1:74:99:f1:68:06:f5:0f:75: 91:44:d5:15:20:c0:1d:8b:1a:03:22:be:68:69:cd:d3:41:48: fe:e6:e2:65:3e:c8:cc:21:83:a4:59:c7:0a:10:64:37:99:6f: ea:6b:d3:6e:4c:ba:7c:6a:4e:79:9d:f6:66:7f:03:6b:07:bc: 43:93:8a:d9:2c:b6:ca:fe:52:88:75:7e:fe:b1:88:e8:11:5d: 20:27:ec:62:6d:b6:36:9d:f8:b8:c1:bf:7a:ad:cf:18:1b:b6: 94:fa:55:53:1c:c3:9d:ac:35:fc:11:39:84:e8:ea:89:68:27: 19:3f:0e:fc:10:06:b4:a6:f8:bb:5d:93:6d:23:3c:7c:c1:f0: 76:c0:b4:96:d7:65:63:be:1c:a1:08:2d:76:4b:72:12:37:9d: a5:56:4c:43:f1:5e:58:0c:7c:f3:92:72:78:65:e9:36:df:6e: 4c:8f:4e:e0:43:43:8b:fb:2f:78:b9:2d:dd:bf:c1:29:59:0c: 72:c7:58:45:e5:cd:b3:d8:e7:34:d1:7f:a8:6a:b0:97:a1:b4: ca:15:84:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNSWM2up7KHpD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlh MjE2MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmRlYzhlOGYtMmM5Ny00YTczLWJkMTktNmZiYWExZmVjNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqQQ+6ppELld51LiMMUjE/B/fr88jOBfupx zt/P7LVOP3Fb5Rmz3+R14+9FXPGGg5/BIFmDNLlFeFRmCH46sLrdcq5aKDZp9A9F KxLF2iTje+Jf+OWkqPIxBgSrKIevHMIgWu/s08PD94T3hRNW3bT42WgRHYNSuhun HS/XJjYD8OAv8CS1BfwM/cYPFqRjVDW3Wr7N7RTFuDJK6QrJz2aBYGEAQ8xXy+mj ifFsyj+ofTXUhQA5Zt8NypYMd1RvgfDWewaLyIcy5/Gmfl6oioWfANtazBCzZiGM aC0gsdOyD0XOHd2PpDeNdPLDNkmJDGklDWwPyyS9hYP11mUPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyn8MgRsq56/rWf91kU7qcVkUnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJh ZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMTQ4MGE2NTktZGZmMC0z Mzc5LTg1NGEtMzkwMmI1ZDZjOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGEyYWQ5MjMtN2RiYy00ZWQ0LWIz NTEtZTJmZDIzNTlhMjE2LzhhMmFkOTIzLTdkYmMtNGVkNC1iMzUxLWUyZmQyMzU5 YTIxNi5jcmwwHwYDVR0jBBgwFoAU+H4ZrPkNEkj/s8hXYlR6Eqwb0xkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZk MjM1OWEyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqkDSF2LQwR4d+0QCtUnz0V0u8u3lEh/wO9TP+IUvRwja8L/uJQDZxY w/+XXrF0mfFoBvUPdZFE1RUgwB2LGgMivmhpzdNBSP7m4mU+yMwhg6RZxwoQZDeZ b+pr025MunxqTnmd9mZ/A2sHvEOTitkstsr+Uoh1fv6xiOgRXSAn7GJttjad+LjB v3qtzxgbtpT6VVMcw52sNfwROYTo6oloJxk/DvwQBrSm+Ltdk20jPHzB8HbAtJbX ZWO+HKEILXZLchI3naVWTEPxXlgMfPOScnhl6TbfbkyPTuBDQ4v7L3i5Ld2/wSlZ DHLHWEXlzbPY5zTRf6hqsJehtMoVhE8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:08 2025 by rpki-client