$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bcce0a7-4bec-3094-b097-e7b2016362b8.roa File: 0bcce0a7-4bec-3094-b097-e7b2016362b8.roa (raw, json) Hash identifier: EROYRwIERQ1OCHaJt7Vslx6F+YmtVD4gZLpGiTNETKQ= Subject key identifier: 41:3A:BA:0A:F6:C0:03:16:4B:02:78:EA:68:56:6F:2A:B2:57:39:8B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3556DFBBE9E54C1C67FF63C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bcce0a7-4bec-3094-b097-e7b2016362b8.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 198.40.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:df:bb:e9:e5:4c:1c:67:ff:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=0ad889f3-e3d4-484f-a340-0f576dce5788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:50:31:03:49:93:fa:69:b4:c3:43:ed:8b: 5a:4e:be:25:3d:dc:ed:5b:0b:45:9a:b4:fe:33:2c: 1e:64:0c:24:c1:34:ab:61:ae:d9:a5:28:7a:ca:fe: 51:6e:ab:11:0a:dd:6c:ea:51:78:d3:72:5b:24:23: 2f:24:16:bd:e7:3e:3a:fe:cd:71:bf:e2:1c:d3:32: c3:75:e9:ab:15:8d:5f:dc:ca:1f:23:fd:af:a8:ab: 0a:2c:b4:55:11:5b:4f:54:8e:2d:4d:4a:e9:be:d1: 85:27:ff:33:0c:eb:2f:ed:b5:52:11:96:cb:c2:93: 38:ae:f7:df:96:e9:c9:00:33:9e:d6:92:75:de:2f: 55:bb:85:19:07:24:49:52:3e:c5:05:24:7f:c5:b2: 0f:7f:a2:45:0e:5d:dd:1b:24:29:f7:39:98:db:69: 74:de:64:45:20:b2:82:c8:55:90:06:73:b8:74:b5: 23:fb:a8:65:80:03:9b:f4:13:7b:cd:aa:ef:4d:bb: f2:5d:2e:a4:21:79:90:99:4c:39:e8:16:76:96:cb: 1b:ab:cf:f0:04:08:37:3d:21:3e:aa:9c:bf:ba:e0: e9:71:12:6d:1c:9a:6d:1e:55:8d:73:8e:e4:26:8a: c1:5a:61:49:72:ca:9f:a7:d7:b5:fc:f4:91:f3:d4: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:BA:0A:F6:C0:03:16:4B:02:78:EA:68:56:6F:2A:B2:57:39:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bcce0a7-4bec-3094-b097-e7b2016362b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3c:d5:bc:5a:1c:81:e4:30:45:96:96:da:5d:59:0e:71:3d: 98:71:82:e1:da:6b:4e:54:9f:b5:30:31:a0:72:90:c5:7f:0d: 1b:46:1a:2b:a0:42:32:2e:8e:30:c1:a6:b1:79:f9:b7:4f:68: 5e:22:2c:6a:91:72:9e:92:23:6b:52:d6:05:64:92:63:38:0d: 02:e3:29:1d:04:85:b7:1a:69:ff:43:74:2c:5f:86:a1:af:a8: 01:c1:44:01:c0:72:12:11:db:30:bd:b1:de:33:a8:53:84:c6: 27:1e:cd:32:8d:aa:ab:1f:39:23:3d:e8:4c:64:6d:3d:0f:fc: 5b:69:aa:12:3d:ee:90:b8:45:38:87:55:ec:78:d9:20:da:12: 0e:12:05:68:68:10:e1:f5:64:fb:ff:b5:c9:5a:3f:72:2b:a9: 75:7f:3b:7f:e2:89:6f:1e:3b:60:93:dc:a2:89:63:4f:71:e1: 7e:1a:2b:27:99:76:e1:97:e0:02:4d:ee:10:56:96:0e:df:d6: 6c:7a:95:df:58:22:10:16:59:45:b9:1a:eb:31:f4:b2:f5:55: 64:91:85:b0:b3:5b:11:96:0c:a6:5b:36:db:af:03:60:13:a5: df:5f:fc:fd:f9:7a:cc:bf:c1:e0:75:5b:df:26:0f:30:5b:4a: 2e:74:1e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vt+76eVMHGf/Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MGFkODg5ZjMtZTNkNC00ODRmLWEzNDAtMGY1NzZkY2U1Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DRQMQNJk/pptMND7YtaTr4lPdztWwtFmrT+ MyweZAwkwTSrYa7ZpSh6yv5RbqsRCt1s6lF403JbJCMvJBa95z46/s1xv+Ic0zLD demrFY1f3MofI/2vqKsKLLRVEVtPVI4tTUrpvtGFJ/8zDOsv7bVSEZbLwpM4rvff lunJADOe1pJ13i9Vu4UZByRJUj7FBSR/xbIPf6JFDl3dGyQp9zmY22l03mRFILKC yFWQBnO4dLUj+6hlgAOb9BN7zarvTbvyXS6kIXmQmUw56BZ2lssbq8/wBAg3PSE+ qpy/uuDpcRJtHJptHlWNc47kJorBWmFJcsqfp9e1/PSR89QQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE6ugr2wAMWSwJ46mhWbyqyVzmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGJjY2UwYTctNGJlYy0z MDk0LWIwOTctZTdiMjAxNjM2MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ81bxaHIHkMEWWltpdWQ5xPZhxguHaa05Un7UwMaBykMV/DRtGGiug QjIujjDBprF5+bdPaF4iLGqRcp6SI2tS1gVkkmM4DQLjKR0Ehbcaaf9DdCxfhqGv qAHBRAHAchIR2zC9sd4zqFOExicezTKNqqsfOSM96ExkbT0P/FtpqhI97pC4RTiH Vex42SDaEg4SBWhoEOH1ZPv/tclaP3IrqXV/O3/iiW8eO2CT3KKJY09x4X4aKyeZ duGX4AJN7hBWlg7f1mx6ld9YIhAWWUW5Gusx9LL1VWSRhbCzWxGWDKZbNtuvA2AT pd9f/P35esy/weB1W98mDzBbSi50Hmc= -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:24 2025 by rpki-client