$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa File: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (raw, json) Hash identifier: h6mq6cZpHjkpdt87yB3WzDormW30hScxXCrXxzVhipM= Subject key identifier: 86:A3:DC:B0:14:D7:C3:36:F9:02:17:E7:12:1E:51:7C:02:9D:04:80 Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584BAA97B5029D52BE7FD6FB3340 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b5:02:9d:52:be:7f:d6:fb:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=92190453-196e-4281-b349-1b76d8cc35c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:c2:3e:df:57:63:45:37:dc:63:c0:cd:4c: 89:f4:3e:4f:90:c9:cd:a0:52:dc:91:79:e5:d8:1e: 22:95:08:0a:3d:3b:f4:f7:57:71:bd:d3:77:14:33: 79:9d:51:dc:d6:ed:36:4c:67:c9:95:42:16:4e:6d: 61:5d:ac:da:71:5d:f6:33:c3:ee:28:b9:32:81:7c: 1c:06:fb:00:aa:73:62:3d:f6:77:dd:32:a9:db:4c: df:67:8e:63:da:72:34:63:5d:1e:87:9b:04:cd:ea: 65:84:cb:8f:a8:19:98:06:a1:f4:6d:8d:47:bf:5b: a7:a8:a4:5e:f5:e1:c8:64:03:20:05:1f:a9:97:6d: e4:7b:62:87:ba:c7:fc:51:3f:76:62:5a:b6:8c:84: b5:25:16:8f:cd:f9:46:89:40:97:d0:ee:11:cb:35: 57:3a:e1:59:cf:94:a9:85:06:97:52:6a:89:1e:d6: d4:a6:10:bb:59:73:18:06:0f:90:11:02:6d:74:23: 9b:7f:be:0f:fd:e3:6f:eb:b1:5e:fc:fc:6f:94:fb: 1f:3e:a1:5c:a3:6c:1c:c5:0d:ba:86:70:12:80:2d: 8e:2f:bf:94:7d:94:44:cb:71:fc:8f:fd:f4:bc:5e: e8:e3:93:16:58:ed:18:18:0d:5a:29:99:40:0d:01: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A3:DC:B0:14:D7:C3:36:F9:02:17:E7:12:1E:51:7C:02:9D:04:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4c:29:ae:99:7f:8c:bb:fb:4f:52:f8:e8:44:10:b1:49:8c: 03:65:2f:dd:1f:5c:01:52:86:c4:21:c6:bf:93:e9:ab:c6:89: e5:95:3f:d8:c2:3c:e0:c7:a6:9b:83:d1:8b:4a:34:9e:0d:35: 49:aa:a7:d9:83:b9:05:ca:a0:7b:07:ea:e0:28:ab:fd:89:23: 6c:e1:a8:04:90:bc:c8:ad:34:93:c2:f5:7e:34:50:2b:c2:e4: 9e:8c:4c:3f:c2:a1:92:73:22:50:a1:a8:a2:81:e3:5b:a5:86: 90:cb:41:44:39:d9:1f:0e:b7:24:76:94:04:8f:7b:f0:01:26: 16:d1:75:33:28:51:1b:c6:35:ec:aa:8b:ea:70:05:42:45:73: 0a:eb:e2:d1:a6:01:08:54:2f:22:5d:2b:6e:4c:7f:44:dc:bd: 78:11:71:8d:af:25:76:8c:5c:03:2b:a3:74:12:61:00:f0:3e: 43:6d:a9:65:35:ab:82:ce:a8:35:33:56:e9:15:2a:b8:3d:90: c1:18:dc:62:22:16:e6:e5:ac:aa:c5:59:25:c6:33:9f:1a:be: 0d:7c:e7:fc:81:6b:1a:bf:f3:2f:10:61:eb:1e:e5:dd:de:96: 79:d3:31:f4:ef:dd:4e:41:39:fd:3b:f3:46:fe:64:99:38:4d: d5:3b:cc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7UCnVK+f9b7M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTIxOTA0NTMtMTk2ZS00MjgxLWIzNDktMWI3NmQ4Y2MzNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMPCPt9XY0U33GPAzUyJ9D5PkMnNoFLckXnl 2B4ilQgKPTv091dxvdN3FDN5nVHc1u02TGfJlUIWTm1hXazacV32M8PuKLkygXwc BvsAqnNiPfZ33TKp20zfZ45j2nI0Y10eh5sEzeplhMuPqBmYBqH0bY1Hv1unqKRe 9eHIZAMgBR+pl23ke2KHusf8UT92Ylq2jIS1JRaPzflGiUCX0O4RyzVXOuFZz5Sp hQaXUmqJHtbUphC7WXMYBg+QEQJtdCObf74P/eNv67Fe/PxvlPsfPqFco2wcxQ26 hnASgC2OL7+UfZREy3H8j/30vF7o45MWWO0YGA1aKZlADQGCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaj3LAU18M2+QIX5xIeUXwCnQSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvZDBhMmUxOWItNzk3Yy0z ZGNkLWJmYTMtN2JmYzVlYjhkNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9MKa6Zf4y7+09S+OhEELFJjANlL90fXAFShsQhxr+T6avGieWVP9jC PODHppuD0YtKNJ4NNUmqp9mDuQXKoHsH6uAoq/2JI2zhqASQvMitNJPC9X40UCvC 5J6MTD/CoZJzIlChqKKB41ulhpDLQUQ52R8OtyR2lASPe/ABJhbRdTMoURvGNeyq i+pwBUJFcwrr4tGmAQhULyJdK25Mf0TcvXgRcY2vJXaMXAMro3QSYQDwPkNtqWU1 q4LOqDUzVukVKrg9kMEY3GIiFublrKrFWSXGM58avg185/yBaxq/8y8QYese5d3e lnnTMfTv3U5BOf0780b+ZJk4TdU7zKE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:59 2025 by rpki-client