$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: EyGUqyLrpwr3es+VRz1Sm43LySgkPq6+vuC5wFpFE2Y= Subject key identifier: FD:DE:C0:CB:5E:AD:63:85:B5:EA:2F:3D:10:06:96:9A:B4:D0:4C:F3 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584B970CF0FCE0AD09D1BA6C1780 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f0:fc:e0:ad:09:d1:ba:6c:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=76e7b182-ff95-4fd6-87d6-c979319be38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:0a:55:67:8c:dc:ca:e8:a0:91:6b:61:2a: c2:92:5a:2c:8e:96:1d:e1:68:4f:50:68:b3:45:5e: ac:18:a4:fb:9d:7a:b0:70:cc:1b:f4:86:3e:cc:1f: 6c:4a:6b:0e:88:7f:06:19:9f:b8:f2:2f:3f:69:3b: 7d:50:a0:f9:7e:6d:00:ed:d7:11:e4:b6:7b:a8:e6: 78:d3:bb:e3:ed:17:c2:3f:c9:3a:d2:b4:59:fc:1f: 9d:d2:af:86:07:14:74:a8:80:64:aa:d1:71:05:9a: 32:94:7b:c2:11:f1:cd:67:8e:df:98:24:b6:b7:59: 85:0f:67:b5:2c:21:d0:9c:23:8c:47:6a:ca:b7:03: e8:8f:cd:bd:ff:f7:e8:bb:2d:6b:1b:18:ac:8f:e4: 22:3b:16:2b:94:76:5b:ae:6d:1b:ca:40:45:79:9f: 9a:bb:76:66:30:7b:64:09:f3:42:66:f7:e7:11:a0: 54:67:ae:f3:4e:cb:37:7e:96:b4:7c:21:4a:82:6c: 76:1b:af:a5:b2:3f:e4:70:69:1b:64:a6:94:ee:3b: 82:6f:ab:8e:85:9c:33:a0:8d:09:2e:b1:9c:79:af: a6:52:fd:46:65:3b:21:b7:3f:90:e6:6a:e2:c1:7a: 30:d4:19:94:3c:16:44:40:84:af:dc:b8:c2:5c:d9: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:C0:CB:5E:AD:63:85:B5:EA:2F:3D:10:06:96:9A:B4:D0:4C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fd:d1:ca:ce:fc:bf:c3:fd:93:9f:61:da:7d:e7:c2:86:44: a2:c9:30:94:ee:25:9a:29:d5:d4:85:73:3c:92:a7:aa:7b:5d: 91:25:8e:11:6a:7e:37:fc:5a:a6:d9:18:bf:d6:4b:8c:56:8e: 6c:e1:5e:6a:f2:7d:de:12:19:be:c7:9f:e5:d2:60:19:30:ff: cb:33:a1:c3:62:f1:cf:22:d5:87:04:de:30:7a:d7:34:7d:dc: 8a:f3:ba:9d:46:14:60:57:61:70:9d:cd:19:32:a4:61:0b:e1: 2d:89:3c:59:65:5d:7e:21:02:a5:af:91:eb:5a:76:32:5b:ff: d7:24:a3:96:1f:9c:9d:aa:f7:9a:24:0f:9a:d0:8f:a6:e7:c0: 95:a6:8d:28:8a:92:e8:70:41:d8:36:25:ef:eb:c4:30:71:76: 9e:78:55:b1:ae:c8:9d:7d:3b:fa:81:92:84:33:0d:5d:82:13: 22:6d:17:c2:8a:be:8a:60:53:24:ea:b6:14:73:f4:70:fe:16: dd:3c:ea:30:1a:bd:df:91:dc:da:f6:c3:c3:97:8a:da:86:0e: 8b:79:45:86:36:31:d6:2f:05:ad:b7:39:f7:c1:fc:98:2e:cb: 6f:52:0d:cf:01:5e:18:13:36:3d:e6:0c:d4:39:6b:0f:d1:a5: 18:6a:1e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPD84K0J0bpsF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzZlN2IxODItZmY5NS00ZmQ2LTg3ZDYtYzk3OTMxOWJlMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8KVWeM3MrooJFrYSrCklosjpYd4WhPUGiz RV6sGKT7nXqwcMwb9IY+zB9sSmsOiH8GGZ+48i8/aTt9UKD5fm0A7dcR5LZ7qOZ4 07vj7RfCP8k60rRZ/B+d0q+GBxR0qIBkqtFxBZoylHvCEfHNZ47fmCS2t1mFD2e1 LCHQnCOMR2rKtwPoj829//fouy1rGxisj+QiOxYrlHZbrm0bykBFeZ+au3ZmMHtk CfNCZvfnEaBUZ67zTss3fpa0fCFKgmx2G6+lsj/kcGkbZKaU7juCb6uOhZwzoI0J LrGcea+mUv1GZTshtz+Q5mriwXow1BmUPBZEQISv3LjCXNlEHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ewMterWOFteovPRAGlpq00EzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP90crO/L/D/ZOfYdp958KGRKLJMJTuJZop1dSFczySp6p7XZEljhFq fjf8WqbZGL/WS4xWjmzhXmryfd4SGb7Hn+XSYBkw/8szocNi8c8i1YcE3jB61zR9 3Irzup1GFGBXYXCdzRkypGEL4S2JPFllXX4hAqWvketadjJb/9cko5YfnJ2q95ok D5rQj6bnwJWmjSiKkuhwQdg2Je/rxDBxdp54VbGuyJ19O/qBkoQzDV2CEyJtF8KK vopgUyTqthRz9HD+Ft086jAavd+R3Nr2w8OXitqGDot5RYY2MdYvBa23OffB/Jgu y29SDc8BXhgTNj3mDNQ5aw/RpRhqHvg= -----END CERTIFICATE-----Generated at Mon Nov 3 04:16:46 2025 by rpki-client