$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa File: e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa (raw, json) Hash identifier: +7nf2V7n9lGiV86Ne5Ro2biBDYnKSilFeKPh3gKw2h4= Subject key identifier: 9A:42:BC:7A:7F:61:D2:32:09:D9:F8:03:6B:02:E4:33:44:38:C8:9B Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584B9E07C62E4DA938FFF0059D80 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 2559 IP address blocks: 198.241.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c6:2e:4d:a9:38:ff:f0:05:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=093d1720-324d-4af9-b7e5-7746beef9fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:3a:e8:48:d4:e3:4c:4f:ac:4d:91:19:ea: e0:5f:d2:61:95:7e:38:d3:85:93:36:4c:d1:45:e1: cf:71:e4:29:17:73:a4:89:ca:b8:71:e2:9a:9f:e9: ed:4c:94:16:0e:16:2b:cc:2c:3a:15:6e:26:c7:28: c5:02:36:e5:d1:4c:82:17:6d:23:63:7c:8c:ce:fe: 76:a1:f7:16:67:a6:f5:9f:8c:a2:86:23:74:54:0a: b2:fa:55:fc:ab:3a:29:13:97:75:00:c7:8f:bc:52: 43:58:f8:63:cb:e8:c5:39:d4:df:2c:92:34:0b:72: 47:d8:2e:85:e7:18:cd:82:0d:4e:ef:1a:ec:ac:68: 0d:a2:8a:e9:68:8e:db:cf:8a:e8:66:76:37:54:62: bd:18:2b:92:89:f6:0d:e1:ce:02:18:64:42:1a:f4: 16:c2:10:a3:4b:b8:d3:66:06:c1:e2:7f:52:f1:63: 5c:c8:60:27:89:93:6f:da:55:f8:07:c9:27:37:56: 44:a3:06:9d:e7:0c:b4:9a:a6:fc:ea:6c:0f:dd:83: 93:6c:1b:96:89:19:07:88:ae:4f:ed:f5:a5:e5:4e: 19:64:ae:0e:a2:77:d7:7b:2c:00:28:f1:34:f7:0e: 9d:d0:a4:b8:39:33:e3:f5:c5:65:ba:55:67:86:f8: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:BC:7A:7F:61:D2:32:09:D9:F8:03:6B:02:E4:33:44:38:C8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e5:0e:00:64:b7:48:91:ff:dd:33:51:67:b9:af:d8:2b:7a: aa:a3:67:50:27:84:8f:28:4a:b6:d5:d9:4b:2a:d8:27:a4:5e: f1:b9:53:9d:dc:23:ab:97:b0:f1:5b:3f:af:aa:ba:7a:b3:aa: 0f:33:64:73:16:3c:40:31:b0:b1:e4:1a:c2:f7:44:44:47:bd: 55:f1:6e:c8:c0:67:93:d7:65:c3:52:05:ab:c1:df:82:79:f8: 50:25:c5:57:a2:4e:93:46:7b:cd:5a:52:d9:cf:bb:0a:a4:65: 46:8b:67:71:4f:08:a2:c9:bd:e4:65:ae:88:b5:9b:81:33:78: 89:43:a2:ee:04:6c:da:f7:32:e2:2c:0b:fe:74:8c:4c:24:42: db:ed:bc:99:0e:b7:fc:b9:7b:3a:4d:9d:f5:d3:8f:0a:59:a4: 2c:8f:e4:a6:90:18:d9:eb:8a:b5:8f:22:b9:33:07:47:7b:4c: 16:41:17:32:01:93:88:70:39:40:1c:57:f2:6e:2e:1f:b5:e0: da:7c:c4:61:5f:62:47:5a:35:07:c2:d6:67:7b:66:b6:f6:30: b7:45:d9:18:4c:15:4d:5b:65:2c:84:3e:69:5b:e3:5d:72:1b: ba:e3:b9:b9:d0:50:24:de:68:c6:36:96:9e:60:a3:40:cb:92: 6d:8e:4a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8YuTak4//AFnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDkzZDE3MjAtMzI0ZC00YWY5LWI3ZTUtNzc0NmJlZWY5ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAono66EjU40xPrE2RGergX9JhlX4404WTNkzR ReHPceQpF3Okicq4ceKan+ntTJQWDhYrzCw6FW4mxyjFAjbl0UyCF20jY3yMzv52 ofcWZ6b1n4yihiN0VAqy+lX8qzopE5d1AMePvFJDWPhjy+jFOdTfLJI0C3JH2C6F 5xjNgg1O7xrsrGgNoorpaI7bz4roZnY3VGK9GCuSifYN4c4CGGRCGvQWwhCjS7jT ZgbB4n9S8WNcyGAniZNv2lX4B8knN1ZEowad5wy0mqb86mwP3YOTbBuWiRkHiK5P 7fWl5U4ZZK4OonfXeywAKPE09w6d0KS4OTPj9cVlulVnhviOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpCvHp/YdIyCdn4A2sC5DNEOMibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZTgwZDYyNjQtZWY1My0z YjQ1LTgzMGEtYTRjNmNiOTI2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3lDgBkt0iR/90zUWe5r9greqqjZ1AnhI8oSrbV2Usq2CekXvG5U53c I6uXsPFbP6+qunqzqg8zZHMWPEAxsLHkGsL3RERHvVXxbsjAZ5PXZcNSBavB34J5 +FAlxVeiTpNGe81aUtnPuwqkZUaLZ3FPCKLJveRlroi1m4EzeIlDou4EbNr3MuIs C/50jEwkQtvtvJkOt/y5ezpNnfXTjwpZpCyP5KaQGNnrirWPIrkzB0d7TBZBFzIB k4hwOUAcV/JuLh+14Np8xGFfYkdaNQfC1md7Zrb2MLdF2RhMFU1bZSyEPmlb411y G7rjubnQUCTeaMY2lp5go0DLkm2OSoA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:18 2025 by rpki-client