$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa File: 2bdf5da3-7278-3180-9d5c-727f67919ebc.roa (raw, json) Hash identifier: qLWnlZTu4G55Ym9UIYN3bpf/sxX1vObuEJ5tQlUN1gk= Subject key identifier: BE:B3:55:31:8A:68:3A:85:40:18:48:D4:57:F5:4A:3C:F4:F8:C9:FA Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F4328584BBFA5A7B80392E358DAE16080 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 13631 IP address blocks: 198.22.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a7:b8:03:92:e3:58:da:e1:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e6b5c886-d88e-4b90-a33c-d5bb9d01a6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:d5:07:43:0e:2c:86:64:62:0e:20:f8:77: 31:ce:00:2b:e2:c8:e8:39:e2:ae:20:e0:dc:86:0e: 70:ca:fc:89:6f:c5:86:81:9b:8b:72:02:79:81:7a: f9:f0:27:4f:a8:a2:ee:22:72:7d:a2:6d:b1:14:b1: e6:6a:92:d6:dc:ba:00:cb:e5:e3:34:7b:25:ec:5c: 89:34:66:8d:4d:8b:64:da:f7:83:4b:93:2e:90:8d: e0:64:a7:06:5b:4c:f8:2a:b7:ad:6d:17:5f:a7:a2: a9:5c:61:15:fb:c8:23:ef:60:04:93:67:f0:c1:97: 54:d6:1d:72:21:45:0f:be:4f:a7:ac:5f:e0:06:cf: 86:53:e3:37:94:c2:7d:0a:35:93:b9:96:82:98:c5: 88:a7:e2:66:b9:1a:ea:79:8f:05:b9:c0:62:6b:22: 92:6c:b2:6b:23:29:b7:05:c9:da:34:1d:14:07:93: e1:60:72:10:55:e4:7f:f0:4a:2b:62:03:0a:c3:02: 02:a8:24:1b:7d:67:b3:5b:cf:1b:4c:5e:5c:81:37: 55:91:d7:44:79:f0:2a:b8:6f:39:31:c2:ff:a0:c7: 6e:e1:89:4f:5d:d6:51:73:a0:19:e3:78:0d:0f:bc: b7:63:8d:28:e3:8e:04:ac:e3:0e:15:42:29:91:95: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B3:55:31:8A:68:3A:85:40:18:48:D4:57:F5:4A:3C:F4:F8:C9:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 198.22.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:9e:e2:62:b5:7a:fc:e9:bf:73:05:e1:f6:57:f0:26:c2: 53:35:6e:49:8e:f9:9f:e4:82:25:0b:15:95:50:af:f3:9d:f5: 2b:8d:8d:86:9f:78:00:41:a9:db:be:db:84:e3:49:45:ec:b5: 2d:69:bb:aa:6e:ca:ef:6b:c2:ea:1a:73:a2:f6:ba:3a:1a:4f: 12:fb:cd:58:66:68:77:3c:19:e4:0b:cc:b1:5a:e0:3b:aa:8c: 66:da:98:30:67:c7:5c:f4:83:32:f6:0d:6d:03:56:f9:e9:63: 57:52:5e:3d:f8:54:36:5d:ae:ab:57:ed:f7:67:58:ca:22:89: 9b:1c:1d:dc:4f:b9:c0:2d:e3:52:4c:ef:06:1a:08:85:ad:11: d3:b1:c5:ef:0c:08:0c:48:5a:20:80:4b:5c:a5:6d:96:b0:89: fc:5d:70:51:61:ca:3e:c5:78:21:05:e7:9d:fe:b2:9e:b6:6d: de:56:15:82:9e:b8:57:52:bc:73:9c:4f:bc:d5:de:ec:a8:88: 8a:89:15:58:ea:d6:bf:88:96:71:8f:0b:ee:6e:89:45:79:d2: 56:e8:05:09:d6:f7:ea:b3:1e:01:a9:96:af:53:d0:72:ae:35: 78:2b:81:74:54:3f:73:22:d9:92:c9:60:d3:29:a7:24:20:70: d9:b8:45:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pae4A5LjWNrhYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTZiNWM4ODYtZDg4ZS00YjkwLWEzM2MtZDViYjlkMDFhNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZXVB0MOLIZkYg4g+HcxzgAr4sjoOeKuIODc hg5wyvyJb8WGgZuLcgJ5gXr58CdPqKLuInJ9om2xFLHmapLW3LoAy+XjNHsl7FyJ NGaNTYtk2veDS5MukI3gZKcGW0z4KretbRdfp6KpXGEV+8gj72AEk2fwwZdU1h1y IUUPvk+nrF/gBs+GU+M3lMJ9CjWTuZaCmMWIp+JmuRrqeY8FucBiayKSbLJrIym3 BcnaNB0UB5PhYHIQVeR/8EorYgMKwwICqCQbfWezW88bTF5cgTdVkddEefAquG85 McL/oMdu4YlPXdZRc6AZ43gND7y3Y40o444ErOMOFUIpkZV2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6zVTGKaDqFQBhI1Ff1Sjz0+Mn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvMmJkZjVkYTMtNzI3OC0z MTgwLTlkNWMtNzI3ZjY3OTE5ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVHnuJitXr86b9zBeH2V/AmwlM1bkmO+Z/kgiULFZVQr/Od9SuNjYaf eABBqdu+24TjSUXstS1pu6puyu9rwuoac6L2ujoaTxL7zVhmaHc8GeQLzLFa4Duq jGbamDBnx1z0gzL2DW0DVvnpY1dSXj34VDZdrqtX7fdnWMoiiZscHdxPucAt41JM 7wYaCIWtEdOxxe8MCAxIWiCAS1ylbZawifxdcFFhyj7FeCEF553+sp62bd5WFYKe uFdSvHOcT7zV3uyoiIqJFVjq1r+IlnGPC+5uiUV50lboBQnW9+qzHgGplq9T0HKu NXgrgXRUP3Mi2ZLJYNMppyQgcNm4Rb8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:05 2025 by rpki-client