$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b33fe26-5ffe-39b9-acbb-9a41e53f8f33.roa File: 1b33fe26-5ffe-39b9-acbb-9a41e53f8f33.roa (raw, json) Hash identifier: yv5+Fo2n7nRQ2pyLAbN5tK/sT/KzYlY9PJDvpdnm5KM= Subject key identifier: 5F:06:04:E7:FC:15:33:E6:7F:C9:B1:21:33:8A:89:71:80:35:2A:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8A7CD41D10CF05CB0E90C408 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b33fe26-5ffe-39b9-acbb-9a41e53f8f33.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 397194 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d4:1d:10:cf:05:cb:0e:90:c4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=0be7a304-54a9-4c51-ba99-e2bfa8951f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:24:b0:77:c7:bf:95:cf:10:97:74:f1:64: 60:de:52:ea:0d:ed:7c:69:fd:9f:b4:b4:16:ff:a5: 4d:77:b1:cd:ad:9b:10:6a:c7:61:00:0e:e2:95:ca: 69:39:43:3a:98:f8:da:a4:14:a3:26:a2:c1:f8:6a: 6b:1f:3e:22:e5:91:39:dd:4e:92:97:ba:6a:95:a3: 11:67:2b:a2:7c:f2:27:34:e0:74:6f:94:17:fd:90: 18:2f:4a:0b:01:83:5d:dc:74:d8:66:d6:23:95:f1: 3a:4d:a3:c8:31:2f:09:4c:87:a1:29:c1:ed:f1:f1: 77:f3:12:8c:5a:cc:be:e0:b5:97:6b:ec:39:4c:0e: 2d:a8:64:ea:d4:45:f6:43:35:ea:c7:18:5a:a6:04: 3c:72:9a:40:85:44:aa:95:dc:3e:13:95:72:b7:24: 72:c8:d1:85:83:78:6b:75:ff:4a:d8:b9:f6:11:0a: 71:59:8b:98:5a:36:ae:d2:63:e3:9f:9f:08:42:c9: c7:7c:cb:bf:48:77:c4:5e:5f:1a:bf:d5:27:3d:87: ea:99:7e:9e:40:78:a5:e3:8a:4c:0a:2f:05:51:a5: ae:41:3b:76:79:cd:3a:a6:17:55:c4:f6:11:ed:fe: e4:b5:5d:0f:40:2f:69:eb:07:33:27:fb:ec:bc:3b: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:04:E7:FC:15:33:E6:7F:C9:B1:21:33:8A:89:71:80:35:2A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b33fe26-5ffe-39b9-acbb-9a41e53f8f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fc:a1:f6:c2:8b:a2:ba:8d:fe:ef:92:b7:7e:c1:3c:75:b9: 94:ed:e8:7d:7d:b7:75:ed:bf:76:0e:5b:6a:b9:6e:e6:b5:71: ea:ba:fe:a1:63:aa:32:0e:7f:25:96:5c:a8:40:51:92:ec:31: 29:88:5d:e3:2d:90:b5:d8:93:b9:f2:e7:12:8d:62:9d:e5:4b: 74:d9:03:36:73:8d:97:5d:7c:2a:9f:79:43:27:49:eb:60:56: fe:b1:ad:3d:41:ae:ac:b4:ec:7a:a6:54:a5:50:85:c6:8f:66: d9:9a:a4:d3:c0:94:e6:13:d1:8b:e6:05:3b:4d:cb:04:54:b4: f1:50:a4:32:af:22:a9:57:cc:f5:47:b2:13:37:d5:6d:8a:08: fb:52:f5:4b:17:5a:df:21:b7:54:0f:be:a1:72:4b:d9:94:a3: 41:57:ca:e6:8a:16:76:d2:e6:6d:05:90:37:66:33:d4:76:65: 77:84:f5:b1:da:da:9d:0a:1b:b5:68:c3:22:a4:30:5a:78:b8: 64:64:33:65:b0:9a:e0:99:a9:14:70:3f:94:b0:38:98:d9:88: fb:d7:ab:3b:cf:47:14:14:1c:52:85:b5:dc:b5:a9:70:91:e9: 27:c7:50:c2:4c:bb:ec:e5:8f:2b:01:14:95:44:f7:54:a9:5f: 77:ee:df:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNQdEM8Fyw6QxAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MGJlN2EzMDQtNTRhOS00YzUxLWJhOTktZTJiZmE4OTUxZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfAksHfHv5XPEJd08WRg3lLqDe18af2ftLQW /6VNd7HNrZsQasdhAA7ilcppOUM6mPjapBSjJqLB+GprHz4i5ZE53U6Sl7pqlaMR ZyuifPInNOB0b5QX/ZAYL0oLAYNd3HTYZtYjlfE6TaPIMS8JTIehKcHt8fF38xKM Wsy+4LWXa+w5TA4tqGTq1EX2QzXqxxhapgQ8cppAhUSqldw+E5VytyRyyNGFg3hr df9K2Ln2EQpxWYuYWjau0mPjn58IQsnHfMu/SHfEXl8av9UnPYfqmX6eQHil44pM Ci8FUaWuQTt2ec06phdVxPYR7f7ktV0PQC9p6wczJ/vsvDvZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8GBOf8FTPmf8mxITOKiXGANSrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIzM2ZlMjYtNWZmZS0z OWI5LWFjYmItOWE0MWU1M2Y4ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP8ofbCi6K6jf7vkrd+wTx1uZTt6H19t3Xtv3YOW2q5bua1ceq6/qFj qjIOfyWWXKhAUZLsMSmIXeMtkLXYk7ny5xKNYp3lS3TZAzZzjZddfCqfeUMnSetg Vv6xrT1Brqy07HqmVKVQhcaPZtmapNPAlOYT0YvmBTtNywRUtPFQpDKvIqlXzPVH shM31W2KCPtS9UsXWt8ht1QPvqFyS9mUo0FXyuaKFnbS5m0FkDdmM9R2ZXeE9bHa 2p0KG7VowyKkMFp4uGRkM2WwmuCZqRRwP5SwOJjZiPvXqzvPRxQUHFKFtdy1qXCR 6SfHUMJMu+zljysBFJVE91SpX3fu31A= -----END CERTIFICATE-----Generated at Wed Oct 29 09:30:15 2025 by rpki-client