$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa File: 0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa (raw, json) Hash identifier: SzAD4Bm5mX8cDfG6si/btfu8FVGSkydj1fksTecX4pg= Subject key identifier: D1:65:2A:DE:40:10:8F:C4:1F:30:9A:B0:81:52:BF:D4:DC:61:BD:D7 Certificate issuer: /CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Certificate serial: 010D0C9F4328584B89177A9A5D87071A419CB100 Authority key identifier: 93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 15296 IP address blocks: 198.202.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7a:9a:5d:87:07:1a:41:9c:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d9689aa2-5e77-4223-9c1f-3569201c2c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:4a:3a:32:20:15:65:fa:60:47:85:42:b5: d2:2e:81:7c:43:4e:94:ab:de:d4:0f:ae:93:08:21: b8:8e:be:1d:a4:b5:61:3a:f0:31:48:8d:2a:f2:26: e6:d2:30:61:7a:d2:8a:ea:a5:d6:4a:5e:cb:0e:a6: 22:09:d3:30:5e:ac:56:c2:59:21:07:4d:ad:b2:9d: fe:d0:82:98:3d:eb:4c:f3:5e:18:c8:b8:d6:6c:51: a0:26:37:75:88:10:b7:be:17:4d:07:00:71:97:5c: 15:1e:1b:c7:61:75:f7:c8:ec:45:22:91:4d:21:e4: 92:ef:96:fd:5b:79:a9:bb:2d:65:b0:8c:d2:83:bf: 38:0e:d3:d5:25:cf:91:d7:8e:24:46:4f:d9:4b:49: 8f:66:42:2c:c5:c5:33:2d:32:03:eb:1b:21:64:b6: 66:44:66:ec:4f:25:90:87:bb:9c:e1:42:29:00:98: d4:ac:a4:64:06:fd:28:ea:7b:06:58:85:29:1c:a1: d3:22:f5:15:48:c5:0e:be:8d:6c:cd:f0:e4:25:15: e1:4e:43:d9:64:59:50:f9:43:ff:02:db:5e:b8:3e: 98:52:58:77:9e:85:fb:5d:3c:08:17:98:0f:82:7d: c8:13:35:d7:9b:d6:d5:a2:6d:f9:d3:ee:98:c9:46: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:65:2A:DE:40:10:8F:C4:1F:30:9A:B0:81:52:BF:D4:DC:61:BD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl X509v3 Authority Key Identifier: keyid:93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer sbgp-ipAddrBlock: critical IPv4: 198.202.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:72:ba:5a:00:2c:e4:22:00:57:46:07:a5:9a:93:7a:ee:45: b5:3d:72:61:82:fe:49:fd:f6:6e:fd:36:ac:33:cc:05:9f:6d: a0:c6:14:10:71:72:49:c7:19:bf:1c:b2:8c:de:ea:e4:ef:1f: c1:e6:96:85:db:46:2f:23:eb:1e:a2:cd:65:91:ec:29:55:21: 18:aa:1f:9e:28:b0:9d:71:e0:c8:d2:7e:da:6a:74:c0:85:54: d0:ba:93:6c:1f:0c:b7:f6:89:e0:1f:2d:9c:77:81:38:6c:d1: b5:8d:4a:6a:02:d7:94:80:69:6c:b0:fb:5f:02:94:2d:45:d8: 40:e5:01:53:8d:9b:63:f6:06:de:8d:a9:9a:fa:02:f7:a9:d6: 2c:a5:bb:6b:51:bf:17:93:e0:63:40:a8:cd:f7:ee:a7:81:a5: 05:19:ef:91:ea:72:02:03:13:9e:d9:bd:cb:18:71:21:a0:e5: f0:5c:44:47:ab:c4:22:d8:da:e0:83:dd:d7:c1:92:c9:ff:ff: bd:b4:76:eb:18:c9:63:b4:22:a5:84:d6:a4:1e:9c:cf:3c:d3: d6:d3:04:f7:ab:27:7b:4d:e1:60:67:7c:b3:0a:53:c0:aa:74: e4:3c:7d:a5:22:8a:ad:62:e9:d7:8d:11:f8:fd:27:09:4d:22: c2:47:c5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3qaXYcHGkGcsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUzZjljY2MtOGQxNy00Y2YxLTk1NGMtOGY2ODIxMjBm YjQxMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDk2ODlhYTItNWU3Ny00MjIzLTljMWYtMzU2OTIwMWMyYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRlKOjIgFWX6YEeFQrXSLoF8Q06Uq97UD66T CCG4jr4dpLVhOvAxSI0q8ibm0jBhetKK6qXWSl7LDqYiCdMwXqxWwlkhB02tsp3+ 0IKYPetM814YyLjWbFGgJjd1iBC3vhdNBwBxl1wVHhvHYXX3yOxFIpFNIeSS75b9 W3mpuy1lsIzSg784DtPVJc+R144kRk/ZS0mPZkIsxcUzLTID6xshZLZmRGbsTyWQ h7uc4UIpAJjUrKRkBv0o6nsGWIUpHKHTIvUVSMUOvo1szfDkJRXhTkPZZFlQ+UP/ AtteuD6YUlh3noX7XTwIF5gPgn3IEzXXm9bVom350+6YyUbFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFlKt5AEI/EHzCasIFSv9TcYb3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNm OWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEyMGZiNDEvMGYwNDE3ZDktNDFmOS0z YTQyLThmNDktNWNlMTZiZWQ4YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWUzZjljY2MtOGQxNy00Y2YxLTk1 NGMtOGY2ODIxMjBmYjQxL2FlM2Y5Y2NjLThkMTctNGNmMS05NTRjLThmNjgyMTIw ZmI0MS5jcmwwHwYDVR0jBBgwFoAUk3XV7Au9pSPJmTz9nhPHQ/0CWiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4 MjEyMGZiNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZyuloALOQiAFdGB6Wak3ruRbU9cmGC/kn99m79NqwzzAWfbaDGFBBx cknHGb8csoze6uTvH8HmloXbRi8j6x6izWWR7ClVIRiqH54osJ1x4MjSftpqdMCF VNC6k2wfDLf2ieAfLZx3gThs0bWNSmoC15SAaWyw+18ClC1F2EDlAVONm2P2Bt6N qZr6Avep1iylu2tRvxeT4GNAqM337qeBpQUZ75HqcgIDE57ZvcsYcSGg5fBcREer xCLY2uCD3dfBksn//720dusYyWO0IqWE1qQenM8809bTBPerJ3tN4WBnfLMKU8Cq dOQ8faUiiq1i6deNEfj9JwlNIsJHxfY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:36 2025 by rpki-client