$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa File: cfa6afac-c953-3625-b664-6b5f5be6d982.roa (raw, json) Hash identifier: EHQm6EVG+E25O34s4x8A2HcAcsZZjxYmyTO2GxqX+5E= Subject key identifier: 70:75:EE:00:0E:4F:8F:DD:37:07:9C:D0:D9:E4:5B:31:16:C6:70:0B Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B9E3C411B27EAB613A12E0700 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa Signing time: Thu 23 Oct 2025 14:46:49 +0000 ROA not before: Thu 23 Oct 2025 14:46:49 +0000 ROA not after: Wed 21 Jan 2026 15:46:49 +0000 asID: 54913 IP address blocks: 198.52.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:3c:41:1b:27:ea:b6:13:a1:2e:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Oct 23 14:46:49 2025 GMT Not After : Jan 21 15:46:49 2026 GMT Subject: CN=bcb7d879-74ca-4861-a634-ad284aa6f192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:8b:10:c8:43:44:fb:ea:be:af:06:ad:a3: e4:33:57:bf:95:c5:6c:f7:cf:d6:13:3a:a5:98:a2: 91:c4:92:c3:3a:cf:b3:db:20:c8:d3:51:fb:7b:e8: dd:07:0c:ce:49:1d:1a:29:76:4f:b6:75:03:35:bc: 5e:b2:0c:73:a8:0a:53:4e:a3:1a:28:4b:01:11:57: 8d:56:83:27:04:6e:48:9a:fd:a2:e4:3d:91:b6:d3: 9c:11:d1:8a:1a:77:00:d9:81:1c:d7:08:17:c1:be: 1f:41:98:6c:ec:8e:2d:3e:6a:3c:f2:20:d6:ee:3a: 69:be:4b:be:8e:40:de:ad:ab:75:16:d0:76:7e:93: c8:b5:41:62:60:6c:dc:2f:68:a0:e0:f3:8c:e8:84: f5:a6:c6:49:ec:36:57:3b:81:90:dc:3b:53:66:aa: cd:89:08:8c:37:4a:f8:34:6b:b0:03:32:6d:ce:72: 8c:03:71:b4:0d:94:fb:b7:e6:2e:df:e8:e5:bc:82: 82:3a:c4:4d:c6:80:92:db:dd:b8:2e:ed:79:47:f7: 91:fb:41:56:95:6c:4a:2f:6e:cf:ec:0e:dd:b9:7c: 02:83:e1:3b:67:93:0b:16:ca:8c:a8:d1:5a:65:82: 67:f6:65:ec:9a:8a:28:0f:46:14:b3:89:fb:ff:ed: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:75:EE:00:0E:4F:8F:DD:37:07:9C:D0:D9:E4:5B:31:16:C6:70:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 198.52.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:85:ee:38:0b:94:47:17:1c:54:2f:85:e7:58:76:96:b5:a9: 03:bc:97:81:1f:bb:b4:e0:89:77:55:46:29:42:c9:13:8c:cc: c7:de:78:35:8c:d6:a8:f2:1d:76:fe:16:9b:83:61:44:6f:6b: 93:42:a6:f2:5a:bd:a0:93:ff:fb:ba:29:be:ed:1c:bb:f5:cb: 29:51:1a:05:a2:a4:08:42:14:9c:b4:4c:66:17:23:20:a6:bc: 09:be:2c:f1:05:76:bd:35:1d:5b:ff:de:7f:a1:76:83:f8:47: fc:4e:98:9c:6b:98:81:aa:bb:1d:0f:b9:1c:b8:24:fc:ea:2a: 68:a9:55:9b:3c:93:be:6f:7a:ee:1e:9a:e4:c0:7e:22:6e:23: 8d:ca:bf:3d:65:b6:07:24:07:f0:1c:f5:a0:10:cc:87:0b:7f: 18:ac:25:0d:48:7b:bc:33:af:e7:e3:3b:4d:44:53:bd:ce:4a: cd:e4:c0:ae:d8:7f:90:14:e8:43:13:59:1f:a7:be:59:29:d9: 83:95:2a:2c:c7:89:5c:5c:6b:34:73:de:ed:4c:f4:cf:98:ca: b7:ae:fe:0e:20:7e:82:69:a7:a3:09:7a:0a:f9:7d:24:de:01: f8:67:0b:1f:e8:40:d3:34:c8:90:12:6f:b0:37:9a:a6:14:55: 8c:bb:98:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuePEEbJ+q2E6EuBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MTAyMzE0NDY0OVoXDTI2MDEyMTE1NDY0OVowLzEtMCsGA1UEAxMk YmNiN2Q4NzktNzRjYS00ODYxLWE2MzQtYWQyODRhYTZmMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqLEMhDRPvqvq8GraPkM1e/lcVs98/WEzql mKKRxJLDOs+z2yDI01H7e+jdBwzOSR0aKXZPtnUDNbxesgxzqApTTqMaKEsBEVeN VoMnBG5Imv2i5D2RttOcEdGKGncA2YEc1wgXwb4fQZhs7I4tPmo88iDW7jppvku+ jkDerat1FtB2fpPItUFiYGzcL2ig4POM6IT1psZJ7DZXO4GQ3DtTZqrNiQiMN0r4 NGuwAzJtznKMA3G0DZT7t+Yu3+jlvIKCOsRNxoCS2924Lu15R/eR+0FWlWxKL27P 7A7duXwCg+E7Z5MLFsqMqNFaZYJn9mXsmoooD0YUs4n7/+1N2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB17gAOT4/dNwec0NnkWzEWxnALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvY2ZhNmFmYWMtYzk1My0z NjI1LWI2NjQtNmI1ZjViZTZkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiF7jgLlEcXHFQvhedYdpa1qQO8l4Efu7TgiXdVRilCyROMzMfeeDWM 1qjyHXb+FpuDYURva5NCpvJavaCT//u6Kb7tHLv1yylRGgWipAhCFJy0TGYXIyCm vAm+LPEFdr01HVv/3n+hdoP4R/xOmJxrmIGqux0PuRy4JPzqKmipVZs8k75veu4e muTAfiJuI43Kvz1ltgckB/Ac9aAQzIcLfxisJQ1Ie7wzr+fjO01EU73OSs3kwK7Y f5AU6EMTWR+nvlkp2YOVKizHiVxcazRz3u1M9M+Yyreu/g4gfoJpp6MJegr5fSTe AfhnCx/oQNM0yJASb7A3mqYUVYy7mH4= -----END CERTIFICATE-----Generated at Sun Oct 26 17:02:53 2025 by rpki-client