$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/18afc617-9b54-3b48-ae69-e2dd62efa4b4.roa File: 18afc617-9b54-3b48-ae69-e2dd62efa4b4.roa (raw, json) Hash identifier: GgL6UNKiY/Zh3GZcWttqlorgFNLyrJcbNNXhPoyth8k= Subject key identifier: 79:26:67:4A:6A:52:8E:06:77:B8:EE:5B:77:17:98:27:8E:38:4B:FF Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B9E07C5FBE79A028E85B55780 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/18afc617-9b54-3b48-ae69-e2dd62efa4b4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 2559 IP address blocks: 198.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c5:fb:e7:9a:02:8e:85:b5:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=0bd81680-3aef-485f-a891-d3adc4332a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:c9:b5:d1:0f:30:74:a1:e3:1d:3c:81:ac: c2:ff:a7:70:5c:e4:75:ae:a8:65:d0:7d:9e:b7:4c: da:df:7a:b4:33:60:88:36:e1:6b:af:0b:a4:48:34: 4c:75:5a:ad:6c:b2:a9:51:03:95:d4:23:5d:49:6c: 21:d1:9c:ff:b0:7e:24:a6:64:90:6a:c0:c8:01:7b: 07:79:e7:73:b9:cc:ac:3f:1d:d3:ca:70:3c:4f:3a: 87:b1:14:7a:9a:36:b4:b3:83:bc:25:ec:ec:b7:19: ad:4d:be:34:b4:fb:48:b9:31:24:99:31:a5:ea:57: 99:3d:c5:a9:06:ab:de:8d:9a:97:c7:c3:65:0e:11: c9:e1:26:2c:69:4d:77:9a:00:d2:7e:d5:db:15:12: 2f:dd:9d:64:66:53:cb:5d:b3:32:66:6b:14:f0:9a: 58:78:09:ef:96:38:dd:c0:fd:0d:ee:d2:9f:12:b1: 01:ae:45:21:5c:53:6c:19:f5:53:6a:aa:b4:fa:c4: 52:05:51:e7:04:11:65:16:a3:52:fa:ee:b6:3d:8e: 15:db:a5:37:f1:78:96:ad:fc:fa:70:96:fe:80:0e: 93:3d:9e:c8:4c:35:c9:b6:90:37:ae:42:e3:ef:72: 09:d5:0f:66:22:93:2f:a8:22:ab:d6:75:a3:65:97: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:67:4A:6A:52:8E:06:77:B8:EE:5B:77:17:98:27:8E:38:4B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/18afc617-9b54-3b48-ae69-e2dd62efa4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:a0:c4:a4:fc:06:fb:55:ce:f1:36:52:a8:86:74:7b:ac: 9b:78:c7:cf:d7:92:9f:e8:b1:25:c7:81:e3:fb:a7:a9:a8:33: 52:74:c3:04:b2:5d:4d:d8:1e:61:f9:0c:df:d6:36:b5:e8:8f: a9:d8:02:0e:07:f3:cb:c6:8d:74:6b:fc:60:fb:de:39:79:24: 2d:bf:be:7f:60:b6:28:32:cb:a7:7e:33:d2:61:f9:45:b4:05: 43:58:46:9a:9b:1f:f8:14:f2:19:48:fa:0d:0c:5e:83:60:72: 59:94:e3:9b:13:d4:3b:c6:ea:40:88:7d:a4:ae:ee:f7:e9:32: af:03:e6:c3:43:a2:73:52:2f:a1:0e:cf:e4:c5:92:42:2f:37: b9:d9:44:f1:cc:87:17:28:90:f6:37:a1:45:4b:9b:3c:32:9e: 0f:8a:6c:3b:bd:ab:d5:4c:e5:69:ec:b9:7f:99:3e:2e:4b:a9: ca:3b:b5:4b:39:a4:5c:85:eb:83:0d:24:d6:74:bb:12:c2:3c: 41:1f:9a:c6:8d:34:18:36:43:b6:42:d0:66:bf:99:ad:36:62: 42:c3:72:f2:02:80:76:97:c2:02:29:68:85:79:f5:fb:13:62: ab:82:21:6f:6d:d1:cd:f9:66:3f:9c:e0:3c:68:75:c1:d8:93: de:57:11:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8X755oCjoW1V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MGJkODE2ODAtM2FlZi00ODVmLWE4OTEtZDNhZGM0MzMyYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc7JtdEPMHSh4x08gazC/6dwXOR1rqhl0H2e t0za33q0M2CINuFrrwukSDRMdVqtbLKpUQOV1CNdSWwh0Zz/sH4kpmSQasDIAXsH eedzucysPx3TynA8TzqHsRR6mja0s4O8JezstxmtTb40tPtIuTEkmTGl6leZPcWp BqvejZqXx8NlDhHJ4SYsaU13mgDSftXbFRIv3Z1kZlPLXbMyZmsU8JpYeAnvljjd wP0N7tKfErEBrkUhXFNsGfVTaqq0+sRSBVHnBBFlFqNS+u62PY4V26U38XiWrfz6 cJb+gA6TPZ7ITDXJtpA3rkLj73IJ1Q9mIpMvqCKr1nWjZZeFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkmZ0pqUo4Gd7juW3cXmCeOOEv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMThhZmM2MTctOWI1NC0z YjQ4LWFlNjktZTJkZDYyZWZhNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPLoMSk/Ab7Vc7xNlKohnR7rJt4x8/Xkp/osSXHgeP7p6moM1J0wwSy XU3YHmH5DN/WNrXoj6nYAg4H88vGjXRr/GD73jl5JC2/vn9gtigyy6d+M9Jh+UW0 BUNYRpqbH/gU8hlI+g0MXoNgclmU45sT1DvG6kCIfaSu7vfpMq8D5sNDonNSL6EO z+TFkkIvN7nZRPHMhxcokPY3oUVLmzwyng+KbDu9q9VM5WnsuX+ZPi5Lqco7tUs5 pFyF64MNJNZ0uxLCPEEfmsaNNBg2Q7ZC0Ga/ma02YkLDcvICgHaXwgIpaIV59fsT YquCIW9t0c35Zj+c4DxodcHYk95XEc8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:11 2025 by rpki-client