$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f595795-2c09-3739-ba0a-ce1fe4bb60c1.roa File: 3f595795-2c09-3739-ba0a-ce1fe4bb60c1.roa (raw, json) Hash identifier: LGia8EyhyiHmgTHB7hSk9opKucROiUmTK1hs6KWrScU= Subject key identifier: 18:DD:23:14:E5:E4:C0:C8:01:B7:92:DE:B1:FA:A0:6F:01:0E:CA:46 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B13D6CA7D7F24FD7DFA58EF20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f595795-2c09-3739-ba0a-ce1fe4bb60c1.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 8987 IP address blocks: 198.3.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ca:7d:7f:24:fd:7d:fa:58:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e7f3ee5d-6ca2-4fab-a80d-5b633fbcfdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:5b:b2:2e:22:08:fe:e6:19:a5:65:dc:4f: ee:63:80:a2:0a:3b:78:f7:ef:21:56:fb:c7:b8:0b: f4:99:28:7e:eb:98:49:92:b8:10:a9:2a:67:56:47: 77:75:4e:4b:eb:c5:d6:a7:21:ba:6e:5b:bb:02:cb: e6:65:c8:8a:d4:f4:99:90:9a:83:89:e9:be:b5:29: 57:14:01:79:2e:f9:5b:ae:16:81:6f:1a:9a:f4:4d: e0:c2:65:b2:fb:d6:76:de:7a:09:40:82:85:6e:74: bb:d8:6f:3f:1f:e4:88:4a:d8:f2:76:9c:75:b5:6a: 1a:75:22:47:59:ef:72:28:c6:86:bb:e1:1b:c5:29: b3:13:9f:08:9a:92:f2:a3:ab:f4:27:19:09:39:d6: 90:4d:33:db:0b:e0:75:11:f5:d0:2c:6c:31:cc:58: b5:8c:69:7e:d2:16:19:9e:85:f7:7a:b8:9a:83:41: 41:85:32:3c:6f:30:7d:a4:ff:df:9b:95:78:2f:ca: 9e:dd:8b:92:4b:42:56:89:d8:34:4e:b3:47:06:35: f7:cc:22:0a:3f:b2:0e:85:14:77:de:2c:8d:c7:e3: 50:2b:66:13:78:57:23:e8:2c:0d:79:21:41:8e:22: ad:8d:c7:0c:73:23:fa:44:b3:4a:92:11:b9:11:38: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:23:14:E5:E4:C0:C8:01:B7:92:DE:B1:FA:A0:6F:01:0E:CA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f595795-2c09-3739-ba0a-ce1fe4bb60c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.3.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3e:a6:78:57:a0:9e:66:25:58:89:b7:40:e8:52:f4:04:df: a4:c4:53:8b:84:90:a3:e1:9e:8a:f1:6f:19:6c:20:77:9f:6e: 4d:f8:97:ad:47:ee:ad:cd:02:3d:da:87:0a:58:95:d9:ea:b8: d2:a7:09:86:78:e6:15:d9:cf:95:99:d0:7b:5a:e4:5f:f8:30: 3f:24:e7:d2:97:b5:0b:7f:30:ff:a4:e3:00:dd:0f:2c:5d:c1: fe:cd:5c:1a:fb:1d:e2:a9:50:e1:38:69:74:59:d8:cf:d2:8c: 8f:56:b2:b9:bb:4a:37:91:0c:e7:ab:de:4a:6c:57:74:20:4c: 9e:a3:a5:d4:e4:0b:f2:2b:0e:ef:42:7b:c2:35:a9:63:8d:0a: 96:fc:08:a2:0e:00:18:52:b0:2d:c9:b3:e2:1f:fa:45:9f:02: cb:3c:36:c7:b8:c1:ea:68:73:ac:2d:f2:09:1c:b9:f0:12:b7: e2:ba:51:1b:2f:b1:af:13:1c:a7:be:23:fb:23:a3:c0:a5:a7: 3b:e0:ab:ba:1c:d9:8d:c2:15:eb:9d:56:9f:31:9c:48:34:2d: a4:87:94:a4:a3:99:36:ba:28:04:00:7d:9a:5e:dd:18:d6:8b: 98:33:46:be:9f:55:b8:ba:08:8c:93:9a:6b:9c:74:34:c4:d5: 8e:93:6c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sp9fyT9ffpY7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTdmM2VlNWQtNmNhMi00ZmFiLWE4MGQtNWI2MzNmYmNmZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7hbsi4iCP7mGaVl3E/uY4CiCjt49+8hVvvH uAv0mSh+65hJkrgQqSpnVkd3dU5L68XWpyG6blu7AsvmZciK1PSZkJqDiem+tSlX FAF5LvlbrhaBbxqa9E3gwmWy+9Z23noJQIKFbnS72G8/H+SIStjydpx1tWoadSJH We9yKMaGu+EbxSmzE58ImpLyo6v0JxkJOdaQTTPbC+B1EfXQLGwxzFi1jGl+0hYZ noX3eriag0FBhTI8bzB9pP/fm5V4L8qe3YuSS0JWidg0TrNHBjX3zCIKP7IOhRR3 3iyNx+NQK2YTeFcj6CwNeSFBjiKtjccMcyP6RLNKkhG5ETg34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjdIxTl5MDIAbeS3rH6oG8BDspGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Y1OTU3OTUtMmMwOS0z NzM5LWJhMGEtY2UxZmU0YmI2MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM+pnhXoJ5mJViJt0DoUvQE36TEU4uEkKPhnorxbxlsIHefbk34l61H 7q3NAj3ahwpYldnquNKnCYZ45hXZz5WZ0Hta5F/4MD8k59KXtQt/MP+k4wDdDyxd wf7NXBr7HeKpUOE4aXRZ2M/SjI9Wsrm7SjeRDOer3kpsV3QgTJ6jpdTkC/IrDu9C e8I1qWONCpb8CKIOABhSsC3Js+If+kWfAss8Nse4wepoc6wt8gkcufASt+K6URsv sa8THKe+I/sjo8Clpzvgq7oc2Y3CFeudVp8xnEg0LaSHlKSjmTa6KAQAfZpe3RjW i5gzRr6fVbi6CIyTmmucdDTE1Y6TbE0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:27 2025 by rpki-client