$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa File: 4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json) Hash identifier: wHGBtoC1PMEpTMvwPr+F9N1kdrdASp6xgeDJCy9rn6k= Subject key identifier: AB:8A:5D:E0:B6:AE:CC:38:37:60:D8:BB:C5:50:3E:8B:F0:50:FF:7B Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B7C876108CE651F191EB03F80 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 2559 IP address blocks: 198.241.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:61:08:ce:65:1f:19:1e:b0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=02bff557-b771-4199-96a8-4992dd1a545d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:f4:e1:98:8f:dd:c4:10:a7:48:19:b8:42: 87:8d:43:27:e2:9a:55:54:f1:cf:5c:b9:4b:b6:b5: b4:95:87:7f:5d:d5:66:a5:e4:12:9b:72:12:6d:4f: d9:ef:4a:e1:bf:c4:25:88:72:6c:ac:d3:8d:8c:19: 39:0a:0e:1e:f7:14:5a:ef:3c:c7:36:46:a4:60:19: ce:ad:e8:5e:bc:d8:d8:84:7e:e5:d5:6e:48:4d:15: e8:5b:b1:bd:c6:5f:e3:29:48:0a:2b:57:fd:05:ed: d5:76:ae:bb:88:d5:ab:e2:55:d5:d9:14:35:be:8f: 6f:db:e6:c5:3b:d0:e5:1a:2a:f3:b7:7d:1f:42:92: eb:d4:6a:3e:d0:c6:1c:62:76:8e:00:32:f8:dd:4c: b6:65:94:50:13:2e:80:4c:df:2b:43:f3:4d:48:35: d2:48:43:e3:50:71:4d:01:b3:51:27:b7:48:7f:ae: 4e:45:8d:ff:c6:5f:24:84:48:89:b6:01:f5:fa:20: 4b:13:cf:5f:12:cb:04:61:87:61:f0:46:53:96:a1: 08:a5:4e:18:8f:44:ab:96:ae:c5:36:b5:9f:68:a2: 74:4d:b5:0d:71:4c:27:3d:77:6a:7b:09:2d:01:1a: 62:9f:ab:66:04:28:86:3b:27:3f:51:21:cc:06:b7: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8A:5D:E0:B6:AE:CC:38:37:60:D8:BB:C5:50:3E:8B:F0:50:FF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b7:27:8f:6d:46:e1:45:ba:44:57:3c:db:de:54:70:f7:8e: 82:c3:25:25:ed:01:9b:af:75:90:c9:d9:7c:af:6b:b6:c2:d3: aa:31:43:b3:d0:52:c6:41:82:c9:e8:85:e3:65:02:78:b3:1f: 3b:2e:f2:e3:60:21:56:1c:33:47:9a:cf:cf:55:e1:9e:50:7b: f2:26:91:2e:ab:20:c3:97:4d:40:83:6a:cf:72:e7:dd:83:f4: 75:50:8c:22:54:55:16:aa:cc:f0:97:40:6e:d7:6e:3f:69:b0: 27:5a:a2:4b:fa:e5:b6:aa:72:7b:62:c5:39:50:7e:8c:91:fc: 24:eb:98:62:08:b2:64:25:5e:94:86:5f:80:ed:4a:0b:c0:69: 57:11:30:ca:ac:34:f2:b4:7d:d7:87:6b:e7:24:83:0f:58:ca: d2:c3:df:e1:f1:aa:cb:4f:db:d1:7a:fa:19:82:c6:bb:0c:bd: 44:af:1d:df:6f:45:a6:d9:44:7a:9f:5b:92:5f:62:e5:19:e5: 89:5b:99:14:f1:bd:ed:8d:bb:7d:8e:ac:65:22:e9:40:70:1c: 12:2e:17:72:2a:1f:24:6e:b6:24:b3:17:3b:6b:c1:63:08:98: 9d:52:03:09:3f:dd:21:0e:10:c8:b9:e8:2b:e5:48:49:94:5a: e0:ec:91:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2EIzmUfGR6wP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MDJiZmY1NTctYjc3MS00MTk5LTk2YTgtNDk5MmRkMWE1NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Xj04ZiP3cQQp0gZuEKHjUMn4ppVVPHPXLlL trW0lYd/XdVmpeQSm3ISbU/Z70rhv8QliHJsrNONjBk5Cg4e9xRa7zzHNkakYBnO rehevNjYhH7l1W5ITRXoW7G9xl/jKUgKK1f9Be3Vdq67iNWr4lXV2RQ1vo9v2+bF O9DlGirzt30fQpLr1Go+0MYcYnaOADL43Uy2ZZRQEy6ATN8rQ/NNSDXSSEPjUHFN AbNRJ7dIf65ORY3/xl8khEiJtgH1+iBLE89fEssEYYdh8EZTlqEIpU4Yj0Srlq7F NrWfaKJ0TbUNcUwnPXdqewktARpin6tmBCiGOyc/USHMBrccewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuKXeC2rsw4N2DYu8VQPovwUP97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvNDI4MGM5NmYtZTgzYy0z NDgzLWEzZDgtODRmNzI3YTE2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm3J49tRuFFukRXPNveVHD3joLDJSXtAZuvdZDJ2Xyva7bC06oxQ7PQ UsZBgsnoheNlAnizHzsu8uNgIVYcM0eaz89V4Z5Qe/ImkS6rIMOXTUCDas9y592D 9HVQjCJUVRaqzPCXQG7Xbj9psCdaokv65baqcntixTlQfoyR/CTrmGIIsmQlXpSG X4DtSgvAaVcRMMqsNPK0fdeHa+ckgw9YytLD3+HxqstP29F6+hmCxrsMvUSvHd9v RabZRHqfW5JfYuUZ5YlbmRTxve2Nu32OrGUi6UBwHBIuF3IqHyRutiSzFztrwWMI mJ1SAwk/3SEOEMi56CvlSEmUWuDskVw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:50:46 2025 by rpki-client