$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa File: acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa (raw, json) Hash identifier: mMVf1dKGNnkeBMXglTGbqwT6IP/ytwKbwnV7GrbDQNI= Subject key identifier: 42:F3:A4:C1:A8:89:2A:FD:32:F1:6E:29:CA:06:44:1F:EF:BD:DC:FB Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF2948B4D0E8CDCD8F300 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 198.211.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f2:94:8b:4d:0e:8c:dc:d8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=7f9b1bca-f6d0-43b8-91a5-1c2bff8376a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:84:7d:25:9b:c5:18:85:69:4d:87:9a:55: 2b:53:bf:f6:e3:5f:51:86:ce:e6:d7:81:25:42:ae: 36:dc:5d:fb:eb:0d:ed:a1:d4:e8:7a:7c:3c:bf:7d: 3c:6a:1d:00:f5:03:6c:f7:89:50:04:75:cd:5e:12: 8e:8e:d8:de:ce:f3:29:cd:91:93:e1:9f:bd:5a:51: ad:26:ac:23:f3:ed:93:9c:f0:27:27:8c:c6:5b:53: 3d:87:0e:dc:24:d3:22:8b:45:ed:39:91:57:1b:42: b3:e8:b9:96:00:a4:90:20:5b:06:fa:1d:11:ba:31: 04:59:ed:cf:7c:48:15:6b:0f:8b:02:13:3b:74:ed: 0c:ed:3a:35:bd:2d:94:5b:dc:f1:0b:ef:34:7f:ef: 30:c4:35:b5:1a:64:d0:e8:15:f8:36:f2:fc:92:56: 8f:5c:a9:1f:40:af:01:c2:da:89:8a:de:7a:f7:40: 64:f4:c1:a1:d7:34:4d:f2:56:54:33:75:d9:c7:f5: 8b:04:cb:c7:f5:1e:e6:f4:60:6b:f3:09:7e:23:c2: 9b:15:53:cc:f8:bb:86:00:90:d1:54:be:6f:a9:af: 28:ef:c0:5e:3f:a4:8c:84:a9:71:04:1f:00:d1:58: 44:31:e4:ce:46:81:1d:0d:7d:db:26:ed:c1:60:dc: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F3:A4:C1:A8:89:2A:FD:32:F1:6E:29:CA:06:44:1F:EF:BD:DC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.211.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ac:62:28:04:33:9c:61:a2:1c:5d:b3:cd:b7:a7:05:2d:1e: 84:bc:0b:d2:2e:11:5e:a7:6c:e8:77:70:51:09:a8:d5:ba:96: af:71:26:de:48:7c:fb:c8:8a:d4:a4:21:c8:13:54:4b:92:dc: 26:c5:60:ae:88:89:69:b1:fc:a6:10:6f:a4:8e:3a:d5:83:58: 31:8f:ab:9b:94:64:33:b4:e6:07:5f:5e:31:f7:0b:42:e1:c8: 4e:c4:e0:7e:6d:b7:ec:33:a5:5a:af:a3:75:33:d8:2c:d8:d2: 91:59:ed:6d:1f:79:3e:10:d4:ef:51:a6:70:42:70:56:de:05: 98:c9:8f:7a:da:43:54:58:04:11:b8:da:34:9d:f2:e3:59:10: d2:e9:7c:0d:58:5b:dd:e6:d5:d1:0a:72:75:33:df:c1:98:0c: cb:3f:ab:a7:a0:99:4f:74:2c:fd:50:d9:37:e2:59:b5:8a:4c: 3b:b8:17:d6:1c:2b:55:87:7b:2f:f6:96:7a:64:e9:20:eb:d6: 6f:ad:75:35:8f:5d:8e:f2:75:ac:44:a4:35:e4:e7:59:bc:82: 24:83:65:a3:65:bf:e9:7e:fc:b9:3d:94:5e:ff:8d:cf:f8:ac: 3f:7f:0b:45:d3:a0:30:35:3c:fe:ca:01:78:a4:36:f4:3e:f8: a0:a9:4f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvKUi00OjNzY8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2Y5YjFiY2EtZjZkMC00M2I4LTkxYTUtMWMyYmZmODM3NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHeEfSWbxRiFaU2HmlUrU7/2419Rhs7m14El Qq423F376w3todToenw8v308ah0A9QNs94lQBHXNXhKOjtjezvMpzZGT4Z+9WlGt Jqwj8+2TnPAnJ4zGW1M9hw7cJNMii0XtOZFXG0Kz6LmWAKSQIFsG+h0RujEEWe3P fEgVaw+LAhM7dO0M7To1vS2UW9zxC+80f+8wxDW1GmTQ6BX4NvL8klaPXKkfQK8B wtqJit5690Bk9MGh1zRN8lZUM3XZx/WLBMvH9R7m9GBr8wl+I8KbFVPM+LuGAJDR VL5vqa8o78BeP6SMhKlxBB8A0VhEMeTORoEdDX3bJu3BYNx3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELzpMGoiSr9MvFuKcoGRB/vvdz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWNhZDFkN2QtMTExYy0z ODU5LThiZTMtOWRjNjZiNGQ0YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGisYigEM5xhohxds823pwUtHoS8C9IuEV6nbOh3cFEJqNW6lq9xJt5I fPvIitSkIcgTVEuS3CbFYK6IiWmx/KYQb6SOOtWDWDGPq5uUZDO05gdfXjH3C0Lh yE7E4H5tt+wzpVqvo3Uz2CzY0pFZ7W0feT4Q1O9RpnBCcFbeBZjJj3raQ1RYBBG4 2jSd8uNZENLpfA1YW93m1dEKcnUz38GYDMs/q6egmU90LP1Q2TfiWbWKTDu4F9Yc K1WHey/2lnpk6SDr1m+tdTWPXY7ydaxEpDXk51m8giSDZaNlv+l+/Lk9lF7/jc/4 rD9/C0XToDA1PP7KAXikNvQ++KCpT44= -----END CERTIFICATE-----Generated at Fri Nov 7 02:27:27 2025 by rpki-client