$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json) Hash identifier: B/fXTfeSP5nz69mBHCwEAufkZo7mpP3WJm5k2llEAb0= Subject key identifier: 20:67:CD:A5:9E:65:AA:63:98:F4:B6:4E:72:A9:30:13:68:4C:43:6F Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584BAA97B37659DC2EFE82922C80 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b3:76:59:dc:2e:fe:82:92:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=47b670ad-831d-4a4b-8618-1587989c064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:38:1e:0f:6f:36:e3:f2:8f:7a:c1:fa:f3: a6:3c:64:43:96:4a:95:ca:37:e7:26:21:41:2c:72: b2:ab:3c:e6:ce:b1:c7:c6:9a:8a:8f:88:be:4b:1f: a9:08:fc:5e:b5:e4:b4:6b:f5:d3:f0:7c:30:89:9f: a9:8f:65:6e:4f:42:ce:f1:63:5d:d2:af:df:1d:7f: a2:79:5d:7b:19:f5:95:1a:b4:54:08:4c:dc:48:98: 86:62:13:99:9f:df:58:65:bd:f9:ab:80:a0:97:e8: fa:21:48:41:2a:e3:fd:e1:8e:81:c4:0e:72:ff:39: c1:68:0e:0c:f9:cd:41:5c:a5:1d:02:15:47:93:bf: be:b5:c4:0c:bd:73:2a:50:db:78:77:3e:6a:41:02: fd:15:73:f3:3f:89:c9:10:6a:21:f3:55:fe:f8:ac: 0b:96:b0:91:e8:23:e7:df:e7:e7:47:f1:38:1e:97: 10:fb:eb:17:ba:3c:24:8b:63:4b:09:f6:be:9a:43: 6e:2f:48:5d:f9:a9:69:6a:94:6b:2d:4b:73:a9:9e: 4e:9a:ed:a3:e3:93:b7:c6:65:7d:9d:bd:3a:b6:c9: 06:dd:66:41:6d:67:73:73:60:02:f6:3d:1a:1c:a2: 6e:7a:33:83:b2:99:c8:3d:f4:5e:34:7e:08:63:a0: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:CD:A5:9E:65:AA:63:98:F4:B6:4E:72:A9:30:13:68:4C:43:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8b:b8:fe:86:a2:b8:ee:aa:d0:55:df:ba:c8:80:16:56:fe: 42:91:3c:ad:7d:6c:a9:20:47:2d:ac:70:35:fc:4b:bd:db:25: 35:c5:22:d6:d1:fd:4e:8b:43:2e:34:d9:ac:7b:d5:c5:ef:2e: e0:9f:5b:96:cc:bf:64:e4:9b:41:7e:ea:87:4e:f9:db:65:86: 67:08:89:ac:7f:3a:a8:0c:56:7a:2f:db:37:e3:59:7a:26:b6: de:ef:75:d6:d1:9a:e4:3c:db:10:22:e2:a3:0d:b8:4e:74:b7: b0:aa:3c:d8:3d:31:43:07:13:f3:71:09:0a:9f:7e:d7:75:6d: 7b:e9:2a:d4:fb:1d:ed:89:cc:e5:96:4c:a3:8a:be:07:a6:91: 8a:77:5c:c7:3c:ac:ef:ab:b6:b7:97:33:56:63:f0:df:7f:8f: b2:78:e3:00:6c:e8:2c:73:64:ee:b8:09:03:df:6a:5c:fd:1d: a9:c2:8f:b3:e3:2f:8f:68:ff:23:00:63:2d:85:7f:e3:06:44: d7:f0:c3:50:0a:37:b0:d2:95:19:1c:6f:f9:c5:df:51:4e:cd: 11:d6:cc:6e:67:76:fc:77:63:e1:ce:0f:63:e7:4b:a5:4c:ce: bc:df:71:fd:36:33:97:be:58:e8:03:a3:63:05:04:45:2b:04: 3c:8f:d1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7N2Wdwu/oKSLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NDdiNjcwYWQtODMxZC00YTRiLTg2MTgtMTU4Nzk4OWMwNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Q4Hg9vNuPyj3rB+vOmPGRDlkqVyjfnJiFB LHKyqzzmzrHHxpqKj4i+Sx+pCPxeteS0a/XT8HwwiZ+pj2VuT0LO8WNd0q/fHX+i eV17GfWVGrRUCEzcSJiGYhOZn99YZb35q4Cgl+j6IUhBKuP94Y6BxA5y/znBaA4M +c1BXKUdAhVHk7++tcQMvXMqUNt4dz5qQQL9FXPzP4nJEGoh81X++KwLlrCR6CPn 3+fnR/E4HpcQ++sXujwki2NLCfa+mkNuL0hd+alpapRrLUtzqZ5Omu2j45O3xmV9 nb06tskG3WZBbWdzc2AC9j0aHKJuejODspnIPfReNH4IY6ADeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBnzaWeZapjmPS2TnKpMBNoTENvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjk4ZTE5ZTgtYjBhYy0z OGFhLTgyZmYtYWY2M2JkMTM1NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOLuP6GorjuqtBV37rIgBZW/kKRPK19bKkgRy2scDX8S73bJTXFItbR /U6LQy402ax71cXvLuCfW5bMv2Tkm0F+6odO+dtlhmcIiax/OqgMVnov2zfjWXom tt7vddbRmuQ82xAi4qMNuE50t7CqPNg9MUMHE/NxCQqfftd1bXvpKtT7He2JzOWW TKOKvgemkYp3XMc8rO+rtreXM1Zj8N9/j7J44wBs6CxzZO64CQPfalz9HanCj7Pj L49o/yMAYy2Ff+MGRNfww1AKN7DSlRkcb/nF31FOzRHWzG5ndvx3Y+HOD2PnS6VM zrzfcf02M5e+WOgDo2MFBEUrBDyP0cg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:43 2025 by rpki-client