$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22d96268-6b4f-317b-a229-81a9e7eb3cf7.roa File: 22d96268-6b4f-317b-a229-81a9e7eb3cf7.roa (raw, json) Hash identifier: SKj2HksVa3gnCQgAIl4v/Fky8pxZkUr4Gmo4VLFIqiE= Subject key identifier: BF:B6:EE:2B:C9:66:DE:84:9E:B7:DD:20:DC:B8:08:62:85:89:A1:3A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA2AABC15CEB7B7E89A75280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22d96268-6b4f-317b-a229-81a9e7eb3cf7.roa Signing time: Mon 27 Oct 2025 21:21:06 +0000 ROA not before: Mon 27 Oct 2025 21:21:06 +0000 ROA not after: Sun 25 Jan 2026 22:21:06 +0000 asID: 22616 IP address blocks: 198.14.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:2a:ab:c1:5c:eb:7b:7e:89:a7:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 27 21:21:06 2025 GMT Not After : Jan 25 22:21:06 2026 GMT Subject: CN=ce167a82-805d-4dec-9895-6e0c0f7b6afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:43:a7:16:24:a1:84:21:ac:02:b3:a4:da: e4:4b:c4:54:95:4d:4f:8a:2d:2a:d7:5e:c0:f1:8a: 58:84:de:f1:fc:87:8b:2d:21:fd:81:c9:dc:80:5e: b6:93:6f:7b:3e:70:0d:0d:05:61:b0:04:8a:d3:5a: 31:cc:ca:ff:32:01:0a:83:50:91:8e:5f:6f:04:63: 33:c8:f0:79:c2:34:3d:f3:fe:10:1b:b1:e8:f0:4b: 9e:2b:4d:8b:5c:62:03:25:f3:e4:34:f4:13:d5:8a: 2c:9a:d1:c8:2e:95:8c:af:17:4f:45:79:81:40:78: 96:56:c6:cf:10:fb:9f:de:99:c0:ee:94:e3:75:5f: 53:ab:67:9b:81:13:46:5e:df:f5:75:87:a9:78:2f: 6c:e7:f7:0f:38:7e:df:0e:1c:7d:1c:90:bc:b8:4b: 37:34:0d:b2:01:0d:89:c5:17:d6:14:27:af:ee:66: 34:0b:9b:45:40:8e:53:d1:48:89:5b:5a:e0:89:36: 1e:6e:fd:4b:24:18:6d:59:de:61:13:0d:ff:7e:63: f1:1c:fb:2a:5c:ce:a1:0a:10:df:2f:7f:c5:40:a0: 5c:ac:0a:33:99:2b:0e:84:ee:49:5d:3f:c5:dd:8b: 1f:4f:0e:46:87:76:cd:56:f7:90:b3:b3:b5:fb:de: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:EE:2B:C9:66:DE:84:9E:B7:DD:20:DC:B8:08:62:85:89:A1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22d96268-6b4f-317b-a229-81a9e7eb3cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f3:ec:fd:28:f2:23:e8:e4:ad:2e:36:b2:24:49:2f:d6:e3: 66:2a:43:ee:64:8e:c4:d2:ba:50:49:ca:e1:b9:1b:25:11:e3: fd:55:c4:38:ed:8f:35:0f:66:8d:d6:ad:28:ad:52:36:58:b0: e7:b1:78:49:c7:32:5e:67:3c:a0:33:36:cd:0b:78:38:68:a7: f7:65:39:5f:31:b6:1d:f0:62:45:45:bd:d1:41:e1:52:e9:d2: 3a:43:a2:ec:ed:fa:b4:5d:5c:14:5a:b8:df:4f:08:5b:04:18: 08:72:8c:c6:a2:f4:cd:bd:9b:ea:17:eb:2c:36:66:ad:fd:d7: aa:d3:69:e8:a1:c3:a1:27:2d:c5:a7:65:43:72:d2:3c:6c:31: 11:2f:17:71:55:0f:e3:49:81:83:88:80:8f:a2:72:9a:1d:34: e5:4b:1c:21:96:3b:c5:06:16:ef:52:92:c1:62:de:c0:d0:cf: fd:ae:82:a6:ea:55:e2:d0:bf:8a:fd:03:da:85:34:95:14:8b: 45:31:f1:84:b8:2a:91:2b:65:b8:75:15:50:03:b4:22:9e:51: b4:02:45:8d:d2:b1:93:d2:d9:3b:25:86:1b:b1:3e:26:d9:78: b3:b8:c1:44:0e:c5:80:d2:38:76:40:04:90:98:b5:b2:22:6b: 4b:72:6c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuqKqvBXOt7fomnUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNzIxMjEwNloXDTI2MDEyNTIyMjEwNlowLzEtMCsGA1UEAxMk Y2UxNjdhODItODA1ZC00ZGVjLTk4OTUtNmUwYzBmN2I2YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1DpxYkoYQhrAKzpNrkS8RUlU1Pii0q117A 8YpYhN7x/IeLLSH9gcncgF62k297PnANDQVhsASK01oxzMr/MgEKg1CRjl9vBGMz yPB5wjQ98/4QG7Ho8EueK02LXGIDJfPkNPQT1YosmtHILpWMrxdPRXmBQHiWVsbP EPuf3pnA7pTjdV9Tq2ebgRNGXt/1dYepeC9s5/cPOH7fDhx9HJC8uEs3NA2yAQ2J xRfWFCev7mY0C5tFQI5T0UiJW1rgiTYebv1LJBhtWd5hEw3/fmPxHPsqXM6hChDf L3/FQKBcrAozmSsOhO5JXT/F3YsfTw5Gh3bNVveQs7O1+943OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+27ivJZt6EnrfdINy4CGKFiaE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjJkOTYyNjgtNmI0Zi0z MTdiLWEyMjktODFhOWU3ZWIzY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDz7P0o8iPo5K0uNrIkSS/W42YqQ+5kjsTSulBJyuG5GyUR4/1VxDjt jzUPZo3WrSitUjZYsOexeEnHMl5nPKAzNs0LeDhop/dlOV8xth3wYkVFvdFB4VLp 0jpDouzt+rRdXBRauN9PCFsEGAhyjMai9M29m+oX6yw2Zq3916rTaeihw6EnLcWn ZUNy0jxsMREvF3FVD+NJgYOIgI+icpodNOVLHCGWO8UGFu9SksFi3sDQz/2ugqbq VeLQv4r9A9qFNJUUi0Ux8YS4KpErZbh1FVADtCKeUbQCRY3SsZPS2TslhhuxPibZ eLO4wUQOxYDSOHZABJCYtbIia0tybAk= -----END CERTIFICATE-----Generated at Tue Nov 4 07:59:33 2025 by rpki-client