$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d45f99a2-fd47-3e3d-9a21-42e3baaa55c8.roa File: d45f99a2-fd47-3e3d-9a21-42e3baaa55c8.roa (raw, json) Hash identifier: Bz6Gg8MzRRyWwrqVDisntzJ9erv7HNXjaeMyLoQI9nE= Subject key identifier: 84:86:DE:63:B1:20:D1:70:F6:96:79:9E:1A:A9:1D:2C:17:96:EA:86 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA2ADAA6B4AB62295C2D9440 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d45f99a2-fd47-3e3d-9a21-42e3baaa55c8.roa Signing time: Mon 27 Oct 2025 21:21:28 +0000 ROA not before: Mon 27 Oct 2025 21:21:28 +0000 ROA not after: Sun 25 Jan 2026 22:21:28 +0000 asID: 22616 IP address blocks: 198.14.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:2a:da:a6:b4:ab:62:29:5c:2d:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 27 21:21:28 2025 GMT Not After : Jan 25 22:21:28 2026 GMT Subject: CN=0f183d50-4aa8-40bc-a53f-338c914efb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:99:22:23:9a:69:cb:73:1a:3c:e4:74:21: 43:ba:be:93:7e:3a:a8:2d:dd:e1:f2:b8:56:d9:8e: 9a:32:ac:fb:c9:fa:a8:25:0b:69:c4:42:cc:9a:3f: 86:20:ee:40:1b:15:23:1f:a8:81:f8:4e:73:50:08: 86:1a:4a:37:e7:3d:14:7b:71:c8:01:cd:d1:91:58: 77:e6:57:31:13:99:3f:d9:6e:55:cf:a7:3e:ef:59: 4c:28:73:d3:e6:b3:8a:fc:92:ba:14:38:86:f2:c4: ca:7c:1f:f4:16:a6:91:ea:99:09:d1:45:94:2c:8d: e8:6d:2c:dc:b2:2b:fb:72:3f:92:0e:4a:9e:18:9d: 56:84:2e:6e:9a:ce:45:b4:b4:78:e8:71:5e:cb:ea: 4e:01:45:7a:63:2d:01:c8:08:fe:2d:ec:9e:7d:51: 36:06:42:4f:73:bf:cf:77:ac:ff:63:15:6d:7d:2c: ea:5d:30:1c:62:eb:d9:24:76:a9:bd:83:24:f3:cc: 4d:7c:34:62:3f:0c:43:fa:2a:97:95:a4:bc:36:88: 1c:6c:d7:7b:c9:57:01:91:30:24:b4:d2:b7:a0:4f: 75:a1:33:12:be:16:bd:7e:55:b9:34:af:36:ba:b1: 52:7c:03:79:41:bd:30:45:0d:3e:1c:43:56:9e:0c: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:DE:63:B1:20:D1:70:F6:96:79:9E:1A:A9:1D:2C:17:96:EA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d45f99a2-fd47-3e3d-9a21-42e3baaa55c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6f:f2:e8:1d:be:af:c7:06:31:17:2d:a8:a7:e2:bc:22:70: 0c:79:03:a9:70:bd:35:81:07:61:ae:ae:43:30:2d:f8:a5:db: d9:d5:eb:3a:e5:35:50:a4:57:88:5c:3e:03:64:96:4f:fa:8b: fe:76:19:ff:d4:1d:03:21:c2:5a:be:c6:0e:36:92:11:9b:50: d4:2f:47:ef:ac:c5:27:46:ea:13:84:66:19:8e:94:36:b1:4b: 67:a9:45:9e:67:e7:15:c4:42:b8:c9:be:8e:19:19:1b:93:c0: c6:65:f3:1c:6b:78:9c:91:28:fa:27:20:a1:38:c6:31:f6:72: 04:8c:a5:49:14:ad:d5:44:ac:d9:e3:7b:8f:29:3b:d2:70:28: 4b:a5:62:3e:03:cd:f9:ca:49:12:70:9d:86:f0:e7:9f:9e:14: 9a:3f:c7:45:09:0c:fb:71:eb:1d:b5:e7:d3:68:69:88:42:71: 66:b5:82:7f:ad:93:2d:88:d4:3f:0a:f7:ad:86:55:37:f2:7d: 18:b1:d8:22:9c:1d:0d:46:ab:33:da:bd:bc:08:f8:9f:53:5b: 3d:0b:8c:b5:29:2b:eb:dd:9a:4f:41:9a:6f:93:41:34:ab:dc: e8:04:97:d1:5a:73:35:8c:69:d9:91:bf:1c:6e:7d:8b:1b:71: d4:2f:c8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuqKtqmtKtiKVwtlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNzIxMjEyOFoXDTI2MDEyNTIyMjEyOFowLzEtMCsGA1UEAxMk MGYxODNkNTAtNGFhOC00MGJjLWE1M2YtMzM4YzkxNGVmYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu62ZIiOaactzGjzkdCFDur6TfjqoLd3h8rhW 2Y6aMqz7yfqoJQtpxELMmj+GIO5AGxUjH6iB+E5zUAiGGko35z0Ue3HIAc3RkVh3 5lcxE5k/2W5Vz6c+71lMKHPT5rOK/JK6FDiG8sTKfB/0FqaR6pkJ0UWULI3obSzc siv7cj+SDkqeGJ1WhC5ums5FtLR46HFey+pOAUV6Yy0ByAj+LeyefVE2BkJPc7/P d6z/YxVtfSzqXTAcYuvZJHapvYMk88xNfDRiPwxD+iqXlaS8NogcbNd7yVcBkTAk tNK3oE91oTMSvha9flW5NK82urFSfAN5Qb0wRQ0+HENWngwCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISG3mOxINFw9pZ5nhqpHSwXluqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDQ1Zjk5YTItZmQ0Ny0z ZTNkLTlhMjEtNDJlM2JhYWE1NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFv8ugdvq/HBjEXLain4rwicAx5A6lwvTWBB2GurkMwLfil29nV6zrl NVCkV4hcPgNklk/6i/52Gf/UHQMhwlq+xg42khGbUNQvR++sxSdG6hOEZhmOlDax S2epRZ5n5xXEQrjJvo4ZGRuTwMZl8xxreJyRKPonIKE4xjH2cgSMpUkUrdVErNnj e48pO9JwKEulYj4DzfnKSRJwnYbw55+eFJo/x0UJDPtx6x2159NoaYhCcWa1gn+t ky2I1D8K962GVTfyfRix2CKcHQ1GqzPavbwI+J9TWz0LjLUpK+vdmk9Bmm+TQTSr 3OgEl9FaczWMadmRvxxufYsbcdQvyFQ= -----END CERTIFICATE-----Generated at Tue Nov 4 07:59:34 2025 by rpki-client