$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/4b25373b-be6e-3e9c-9ef2-fb6e0a4d18cb.roa File: 4b25373b-be6e-3e9c-9ef2-fb6e0a4d18cb.roa (raw, json) Hash identifier: o8lduugBL77T+vPEV0hms1OzlJmFHuMRFoHP7dVAUgA= Subject key identifier: 5E:0F:54:F1:A4:F1:FB:56:FC:4F:2D:73:D2:69:24:DD:0B:D6:B7:28 Certificate issuer: /CN=c1195660-b269-4bf9-a104-54a76ebf3546 Certificate serial: 010D0C9F4328584BD1423F71D2B582CD127AC000 Authority key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/4b25373b-be6e-3e9c-9ef2-fb6e0a4d18cb.roa Signing time: Mon 10 Nov 2025 21:25:08 +0000 ROA not before: Mon 10 Nov 2025 21:25:08 +0000 ROA not after: Sun 08 Feb 2026 21:25:08 +0000 asID: 16509 IP address blocks: 198.212.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:42:3f:71:d2:b5:82:cd:12:7a:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Validity Not Before: Nov 10 21:25:08 2025 GMT Not After : Feb 8 21:25:08 2026 GMT Subject: CN=d2e658c7-95db-4bb1-bf18-db851abf8083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:20:4e:fb:63:a1:6b:29:46:8f:d2:cc:7d: 31:ba:bd:df:f6:df:e7:eb:21:11:6d:b2:d5:cc:df: 37:91:45:18:f1:5e:c1:f3:73:cc:63:da:70:71:c5: c9:39:62:5b:cd:36:7f:78:ba:3a:88:75:d1:94:a8: 77:7c:4d:99:a2:51:ea:58:f6:3e:4f:1b:b7:93:fa: 0d:5d:14:bd:df:d2:c5:29:03:08:1c:36:38:a7:93: 23:64:2c:a6:ac:ae:b4:70:28:92:cb:42:38:d1:62: d2:7c:5b:d0:e3:b6:69:1c:b3:b9:97:c6:ed:59:b4: cc:c5:7b:a1:cd:f4:fd:d6:fc:14:52:e2:f4:e8:68: 92:4a:24:0a:6e:ff:40:a6:6b:5f:5c:13:b6:35:5f: 25:c5:c5:29:0e:7e:4f:ac:30:04:0c:f7:82:a5:41: 21:b9:60:37:8d:9e:54:9d:80:e4:4e:08:2f:8e:05: 36:dd:18:f9:6a:3f:5e:4c:2a:16:f6:70:52:8e:54: 1a:2f:b5:8c:c3:c3:2b:96:3b:e1:b7:46:f6:f2:3a: fe:fd:98:09:de:08:0e:35:98:a6:8a:4e:a1:35:79: c1:20:90:78:43:85:7c:f1:cc:34:18:20:ed:e9:e7: 6c:89:ac:65:f5:59:93:82:dd:40:1e:fb:42:da:13: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:54:F1:A4:F1:FB:56:FC:4F:2D:73:D2:69:24:DD:0B:D6:B7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/4b25373b-be6e-3e9c-9ef2-fb6e0a4d18cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl X509v3 Authority Key Identifier: keyid:50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer sbgp-ipAddrBlock: critical IPv4: 198.212.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:36:84:13:d2:b1:6a:36:a3:52:da:4f:57:f7:02:32:e2:f7: 66:a1:2e:f3:e9:b9:9d:90:82:2d:ac:0a:82:a1:61:d2:ab:60: 3b:53:07:fc:cf:98:69:6c:72:ec:09:bf:3c:19:37:1f:0a:da: a4:fc:88:38:f0:d6:a5:9c:b1:dd:a7:84:7b:d4:71:f4:b9:1e: e8:44:2a:8c:3d:66:e4:7b:39:05:00:7b:ef:a3:1a:bb:57:8e: d0:60:6c:14:83:db:ea:cc:25:5c:65:6c:0f:42:2e:e1:f9:d2: 50:8f:75:31:6a:54:79:73:ae:f1:8f:2a:d5:80:2b:5f:f9:67: f0:9c:6b:54:c2:b0:9b:2a:a9:86:82:a1:85:b3:43:ef:72:01: 6d:d6:cf:2f:65:fd:e6:ac:10:9f:2e:38:da:4a:6e:cd:8b:73: b9:67:b8:36:fd:cf:a8:05:a6:35:0d:d8:43:ed:e6:df:c4:5a: 73:2f:a9:be:a4:8f:51:51:a8:5b:8f:a6:f4:9a:a5:4f:30:7c: 22:84:c1:18:d4:26:ea:dd:9b:c7:c2:6e:e1:ba:0a:03:70:23: b7:61:c5:a8:c3:c9:05:c6:23:69:a7:df:49:80:07:9c:2f:34: 6d:40:42:fc:eb:6f:dc:c4:a8:c5:77:37:dd:8f:12:b0:db:87: b7:5a:00:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRQj9x0rWCzRJ6wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYz NTQ2MB4XDTI1MTExMDIxMjUwOFoXDTI2MDIwODIxMjUwOFowLzEtMCsGA1UEAxMk ZDJlNjU4YzctOTVkYi00YmIxLWJmMTgtZGI4NTFhYmY4MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NIgTvtjoWspRo/SzH0xur3f9t/n6yERbbLV zN83kUUY8V7B83PMY9pwccXJOWJbzTZ/eLo6iHXRlKh3fE2ZolHqWPY+Txu3k/oN XRS939LFKQMIHDY4p5MjZCymrK60cCiSy0I40WLSfFvQ47ZpHLO5l8btWbTMxXuh zfT91vwUUuL06GiSSiQKbv9ApmtfXBO2NV8lxcUpDn5PrDAEDPeCpUEhuWA3jZ5U nYDkTggvjgU23Rj5aj9eTCoW9nBSjlQaL7WMw8Mrljvht0b28jr+/ZgJ3ggONZim ik6hNXnBIJB4Q4V88cw0GCDt6edsiaxl9VmTgt1AHvtC2hOHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4PVPGk8ftW/E8tc9JpJN0L1rcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5 NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvNGIyNTM3M2ItYmU2ZS0z ZTljLTllZjItZmI2ZTBhNGQxOGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzExOTU2NjAtYjI2OS00YmY5LWEx MDQtNTRhNzZlYmYzNTQ2L2MxMTk1NjYwLWIyNjktNGJmOS1hMTA0LTU0YTc2ZWJm MzU0Ni5jcmwwHwYDVR0jBBgwFoAUUC23UAbI7dxt9h2UyHbML/SpZLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3 NmViZjM1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA2hBPSsWo2o1LaT1f3AjLi92ahLvPpuZ2Qgi2sCoKhYdKrYDtTB/zP mGlscuwJvzwZNx8K2qT8iDjw1qWcsd2nhHvUcfS5HuhEKow9ZuR7OQUAe++jGrtX jtBgbBSD2+rMJVxlbA9CLuH50lCPdTFqVHlzrvGPKtWAK1/5Z/Cca1TCsJsqqYaC oYWzQ+9yAW3Wzy9l/easEJ8uONpKbs2Lc7lnuDb9z6gFpjUN2EPt5t/EWnMvqb6k j1FRqFuPpvSapU8wfCKEwRjUJurdm8fCbuG6CgNwI7dhxajDyQXGI2mn30mAB5wv NG1AQvzrb9zEqMV3N92PErDbh7daAEE= -----END CERTIFICATE-----Generated at Tue Nov 18 08:22:18 2025 by rpki-client