$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa File: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (raw, json) Hash identifier: ml10HWCNsMgFzI+Xhj059uwx5MaDE0iZOIhm+e5um28= Subject key identifier: FB:C1:22:B3:4E:62:AE:76:1F:34:AA:80:3E:D2:DE:73:07:22:64:28 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584BA667AB41A82898B482156600 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 6079 IP address blocks: 208.99.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:41:a8:28:98:b4:82:15:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=93e339be-77de-4cb2-b17f-06b3287eb4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:4e:44:d6:fb:fa:37:11:6e:37:02:44:e6: a9:13:dc:b7:df:43:66:83:bb:a2:cf:74:fc:b4:76: 30:01:21:e2:75:3b:94:27:62:45:89:17:e9:53:10: 6b:2e:66:34:91:da:ea:eb:cf:a5:00:2b:29:80:57: 39:c3:da:8b:89:b2:dd:96:b7:d7:de:39:14:71:ec: c8:8a:e1:48:48:02:a7:af:dc:58:0a:d7:13:45:78: 5b:c0:8f:9d:8a:24:92:db:d1:42:bd:9f:88:28:f4: 64:47:30:73:ca:f0:15:ac:2a:a8:94:be:88:27:57: 90:03:a1:68:0d:3e:1b:0c:66:b5:a8:72:b7:8e:f7: 46:bb:f8:bd:bc:7a:e9:24:1b:69:e8:ee:d9:92:3b: 17:5a:ed:9e:29:81:e7:56:27:bd:a2:4f:55:ce:11: ef:0e:56:5a:d8:73:28:f4:28:d6:e8:e4:32:43:ac: e2:d4:51:31:67:8c:2b:27:bf:f6:93:61:e9:ef:be: a0:fb:6f:ee:b4:2a:74:4e:59:a8:16:f4:1c:03:b2: 50:7d:91:11:fd:dd:c6:c3:a6:b3:e6:ab:e8:d3:6e: 93:d0:22:f2:aa:ec:a5:64:5f:69:bf:7a:0c:ba:66: 10:4e:47:9d:d7:c1:6d:cf:37:3a:af:2d:74:41:f3: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C1:22:B3:4E:62:AE:76:1F:34:AA:80:3E:D2:DE:73:07:22:64:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f6:aa:62:6c:3a:9a:7b:d5:fd:08:b7:c3:78:05:ed:b4:cd: 88:4c:8e:9e:99:80:18:9d:d9:e2:53:a7:ad:28:14:5e:e1:f8: 3c:4a:3a:4d:dd:79:57:5d:f5:3d:3d:ca:9e:d4:a8:3e:17:5e: a4:8f:79:c2:ee:d9:69:ac:82:dd:a5:31:f9:2e:7b:d9:5a:c1: 41:10:60:15:43:46:02:f9:0f:aa:b4:d8:e2:43:f4:d0:0a:26: bc:68:89:9d:0d:90:78:97:f3:74:08:7d:92:5e:e8:70:d6:df: c5:17:e1:18:5f:58:34:f9:cb:b2:f2:4e:98:df:94:9d:e2:4e: 67:a7:11:8f:be:22:07:52:ab:30:4e:0d:ec:a2:81:b7:db:b8: d4:37:b5:b8:5e:a7:fd:cb:9a:76:e5:56:2c:6c:f8:1c:6c:df: d5:a5:86:18:8a:62:c9:2b:9c:9d:11:54:b9:fb:13:7e:96:67: ca:e7:00:40:1f:15:87:86:54:8c:63:cc:7f:5e:ff:4f:98:ab: 35:20:c1:a1:9b:f3:f5:f3:46:50:06:a7:b3:fe:13:9b:df:37: 7b:b0:52:d3:84:56:76:8e:f1:a2:89:ee:f7:0d:9d:9a:fb:bc: 9f:5e:f5:6e:c3:37:b9:77:c6:14:57:e9:bd:45:4e:d9:33:08: be:b5:c4:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6tBqCiYtIIVZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OTNlMzM5YmUtNzdkZS00Y2IyLWIxN2YtMDZiMzI4N2ViNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNORNb7+jcRbjcCROapE9y330Nmg7uiz3T8 tHYwASHidTuUJ2JFiRfpUxBrLmY0kdrq68+lACspgFc5w9qLibLdlrfX3jkUcezI iuFISAKnr9xYCtcTRXhbwI+diiSS29FCvZ+IKPRkRzBzyvAVrCqolL6IJ1eQA6Fo DT4bDGa1qHK3jvdGu/i9vHrpJBtp6O7ZkjsXWu2eKYHnVie9ok9VzhHvDlZa2HMo 9CjW6OQyQ6zi1FExZ4wrJ7/2k2Hp776g+2/utCp0TlmoFvQcA7JQfZER/d3Gw6az 5qvo026T0CLyquylZF9pv3oMumYQTked18Ftzzc6ry10QfPnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvBIrNOYq52HzSqgD7S3nMHImQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvOGU0NjA2ZGYtYmEwYy0z YmZiLWI2MTEtN2ExYjUwMjA1NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf2qmJsOpp71f0It8N4Be20zYhMjp6ZgBid2eJTp60oFF7h+DxKOk3d eVdd9T09yp7UqD4XXqSPecLu2Wmsgt2lMfkue9lawUEQYBVDRgL5D6q02OJD9NAK JrxoiZ0NkHiX83QIfZJe6HDW38UX4RhfWDT5y7LyTpjflJ3iTmenEY++IgdSqzBO DeyigbfbuNQ3tbhep/3LmnblVixs+Bxs39WlhhiKYskrnJ0RVLn7E36WZ8rnAEAf FYeGVIxjzH9e/0+YqzUgwaGb8/XzRlAGp7P+E5vfN3uwUtOEVnaO8aKJ7vcNnZr7 vJ9e9W7DN7l3xhRX6b1FTtkzCL61xI4= -----END CERTIFICATE-----Generated at Mon Nov 3 04:17:10 2025 by rpki-client