$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa File: c404092f-b471-3319-8d76-7950384a1e5f.roa (raw, json) Hash identifier: bxGBnVQAynJypA6SO8fWDrwAyZiUOuwl7SvzvzTowlk= Subject key identifier: A9:BD:5D:60:EC:97:90:6E:48:DF:03:B4:0D:D6:04:C3:14:46:6C:EF Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B9E07C5E96EE3D60D8746E32A Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 2559 IP address blocks: 198.217.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c5:e9:6e:e3:d6:0d:87:46:e3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=929fd208-7264-46d9-9216-469d4869dd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:28:9d:fa:e5:62:5e:63:df:e8:21:f7:44: ae:5d:a6:56:1c:1a:08:65:72:41:98:fd:7e:c1:39: 8f:a6:7c:e1:d8:5a:de:f8:75:b6:95:8a:c3:9f:fc: 75:89:b0:16:ba:3c:22:8b:a6:c8:04:30:21:fe:77: 9e:f6:d6:26:50:d3:cf:f5:b6:6c:0b:81:ec:88:43: 00:c6:cb:fd:ee:64:a8:84:f6:17:17:0b:e2:07:3f: 67:d1:cf:91:f5:b8:73:05:5b:02:cc:f0:a2:33:85: e0:40:f0:a2:63:be:b3:b4:4e:3d:6b:de:97:78:ba: 4e:85:bd:84:45:5c:e6:ac:78:b8:f5:25:d2:7c:0d: 01:1c:cb:4a:fe:17:4a:26:fd:9f:06:82:e3:34:59: 29:ba:15:d8:67:dd:43:b2:d2:8c:b3:5b:fd:11:89: 85:56:11:90:9f:2a:07:4e:9c:c5:bc:8b:24:1d:dd: ac:d6:de:63:41:35:1d:d8:13:4c:0d:02:ab:8e:6f: ec:3e:d0:4c:9c:2e:4f:31:bc:0c:4f:1c:12:a2:74: ba:ea:e1:da:6f:2d:33:9f:d8:d5:31:d1:c5:3d:58: 33:85:1e:6f:08:a8:76:f5:19:93:ef:bd:f5:93:ba: 02:5c:42:a4:8e:1b:12:ab:d2:23:a9:f2:ca:80:30: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BD:5D:60:EC:97:90:6E:48:DF:03:B4:0D:D6:04:C3:14:46:6C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:11:a0:6b:9d:f4:95:37:3c:75:35:8a:a3:49:fa:89:b4:06: 2f:79:0d:30:37:4c:cd:c3:1f:73:a7:6a:a8:91:e3:3a:cc:aa: 4c:da:01:96:4d:79:72:f7:8a:7a:ab:80:76:d1:6c:c7:d7:58: 9d:e6:20:db:14:6a:28:d3:b8:d0:df:cc:e2:b6:66:fc:25:29: 29:f5:3f:88:01:e0:48:58:5e:07:2f:ad:da:48:76:4d:b9:85: eb:7a:80:46:5f:d5:f0:59:1f:71:9c:e0:3b:62:43:5b:ca:22: 22:be:c7:4b:de:5d:41:41:d4:71:77:42:79:68:7f:69:ac:21: 4d:e1:c2:e8:ec:23:db:c7:a8:a1:33:a6:19:35:65:8c:32:a0: ef:74:42:30:f5:85:06:5d:8c:85:1c:6d:ed:d1:e0:bb:17:0f: 53:e6:a5:35:66:ad:64:2c:a7:f9:da:5b:91:57:34:a3:b4:24: ae:c0:87:94:93:b7:d5:d0:1f:90:b7:a1:ae:64:cf:a7:42:46: 01:02:d4:27:bf:e6:59:08:6b:c6:e7:78:9b:e1:93:af:11:6c: 03:b3:29:e3:2b:e1:74:77:4e:f5:49:0d:1e:40:7e:b1:56:3b: d2:9d:c6:3b:e8:e1:cc:49:47:d1:7b:37:8b:6d:07:df:a7:bf: 94:62:17:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8XpbuPWDYdG4yowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OTI5ZmQyMDgtNzI2NC00NmQ5LTkyMTYtNDY5ZDQ4NjlkZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSkonfrlYl5j3+gh90SuXaZWHBoIZXJBmP1+ wTmPpnzh2Fre+HW2lYrDn/x1ibAWujwii6bIBDAh/nee9tYmUNPP9bZsC4HsiEMA xsv97mSohPYXFwviBz9n0c+R9bhzBVsCzPCiM4XgQPCiY76ztE49a96XeLpOhb2E RVzmrHi49SXSfA0BHMtK/hdKJv2fBoLjNFkpuhXYZ91DstKMs1v9EYmFVhGQnyoH TpzFvIskHd2s1t5jQTUd2BNMDQKrjm/sPtBMnC5PMbwMTxwSonS66uHaby0zn9jV MdHFPVgzhR5vCKh29RmT7731k7oCXEKkjhsSq9IjqfLKgDAqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm9XWDsl5BuSN8DtA3WBMMURmzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYzQwNDA5MmYtYjQ3MS0z MzE5LThkNzYtNzk1MDM4NGExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwRoGud9JU3PHU1iqNJ+om0Bi95DTA3TM3DH3OnaqiR4zrMqkzaAZZN eXL3inqrgHbRbMfXWJ3mINsUaijTuNDfzOK2ZvwlKSn1P4gB4EhYXgcvrdpIdk25 het6gEZf1fBZH3Gc4DtiQ1vKIiK+x0veXUFB1HF3Qnlof2msIU3hwujsI9vHqKEz phk1ZYwyoO90QjD1hQZdjIUcbe3R4LsXD1PmpTVmrWQsp/naW5FXNKO0JK7Ah5ST t9XQH5C3oa5kz6dCRgEC1Ce/5lkIa8bneJvhk68RbAOzKeMr4XR3TvVJDR5AfrFW O9Kdxjvo4cxJR9F7N4ttB9+nv5RiF1k= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:09 2025 by rpki-client