$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa File: d2418aec-7a93-3789-881e-6e9bb35e157e.roa (raw, json) Hash identifier: D3CsVWDTYh5n/KY/pJiYQrqav1mLZLHcFFWzSi5xTUE= Subject key identifier: 4A:50:F0:AB:62:78:7D:6F:AF:69:78:21:DF:2E:0C:C1:D6:50:18:FF Certificate issuer: /CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Certificate serial: 010D0C9F4328584B9B3CE8ADB7BBDEE9089ADCA0 Authority key identifier: 37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 46887 IP address blocks: 198.98.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e8:ad:b7:bb:de:e9:08:9a:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=fcd85f27-ee23-406e-a57e-e105bcc50d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:57:aa:c9:f0:5b:81:b8:de:ef:c7:d5:a7: 9a:7a:0a:78:ba:a0:bd:5a:e5:b4:13:a8:b9:5d:16: 0a:2d:ad:91:41:ef:fa:9f:c5:40:c1:4f:16:b6:30: fb:b7:1b:16:78:c9:71:5e:ab:03:23:c7:97:92:43: 15:66:be:f7:72:f3:4a:0e:5a:c5:7c:f4:f5:b2:75: 1a:1a:51:13:25:92:73:34:7d:a2:fe:1f:47:95:e6: eb:33:e4:0f:d1:c6:4d:ad:cd:4b:e4:00:54:88:0d: 49:97:b2:0b:02:7e:cb:d1:7f:dd:5d:7e:3a:92:55: 19:9c:11:8e:fe:26:02:c9:f5:a8:73:8d:a7:fc:b8: 27:fa:66:d8:67:28:c5:a4:6b:d3:c0:39:12:61:20: c9:7e:6a:6f:0b:12:ec:fe:65:bc:83:27:0b:d3:08: db:ca:09:54:4d:fb:0f:ea:15:84:41:3d:9d:e8:bb: 34:de:0d:56:42:90:59:82:2a:ce:b2:87:45:fa:5d: 28:a6:1b:7f:b9:31:c4:20:35:2d:71:81:ee:5c:ae: 6d:9f:86:22:65:bb:ee:67:4e:fc:d6:e5:e7:56:90: c9:cf:a7:ca:65:10:11:58:20:4b:a0:87:65:2c:a5: f2:3a:13:ab:0b:22:2f:c5:4d:77:01:85:d4:44:5b: f3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:F0:AB:62:78:7D:6F:AF:69:78:21:DF:2E:0C:C1:D6:50:18:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/d2418aec-7a93-3789-881e-6e9bb35e157e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl X509v3 Authority Key Identifier: keyid:37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e9:98:41:28:aa:de:18:80:b0:a7:9e:18:77:26:f5:27:30: 8e:9e:a7:89:28:1f:40:55:05:81:50:02:e5:aa:70:a0:13:51: 52:45:17:45:13:f4:3b:bb:f1:01:cc:98:35:ff:ef:47:cc:a4: a9:f7:d1:1b:72:a5:31:e4:59:ea:bc:74:c3:bd:3f:c8:d2:02: 7b:5e:cd:e0:d3:7b:f9:00:e5:a3:bb:97:27:5b:55:32:7f:23: 87:59:94:bd:3a:f8:36:17:3d:76:61:c9:a1:30:97:cc:7c:79: 39:00:6d:27:dd:6b:e9:84:98:c5:eb:b6:59:4e:84:df:a1:74: 4f:4a:81:e7:70:65:5e:57:ec:3d:02:95:d4:f5:6b:6f:1a:d3: 14:1f:aa:33:7f:b6:c8:ef:9b:6c:12:8e:2b:4e:f4:37:18:a7: 0c:a8:90:e5:dc:ff:57:bf:6a:a2:22:92:50:2e:d7:1e:a9:56: 06:2c:09:00:7b:3c:ce:03:72:5f:ab:5c:5f:5d:67:18:aa:cf: 96:16:cd:5b:99:6d:f0:7f:47:cd:d1:41:a4:46:3e:1f:b9:a7: 23:a5:22:0e:5c:fc:9a:55:24:2b:2b:ec:bd:39:bf:18:5c:61: 4e:71:66:65:f5:3c:7c:4e:ea:f1:65:4c:27:58:cd:f8:10:78: 29:41:e3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOitt7ve6Qia3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkOTYwYWItOWFmNi00N2UyLWEyOGQtNjIzYjdkNGNl ZDZhMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZmNkODVmMjctZWUyMy00MDZlLWE1N2UtZTEwNWJjYzUwZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRtXqsnwW4G43u/H1aeaegp4uqC9WuW0E6i5 XRYKLa2RQe/6n8VAwU8WtjD7txsWeMlxXqsDI8eXkkMVZr73cvNKDlrFfPT1snUa GlETJZJzNH2i/h9HlebrM+QP0cZNrc1L5ABUiA1Jl7ILAn7L0X/dXX46klUZnBGO /iYCyfWoc42n/Lgn+mbYZyjFpGvTwDkSYSDJfmpvCxLs/mW8gycL0wjbyglUTfsP 6hWEQT2d6Ls03g1WQpBZgirOsodF+l0opht/uTHEIDUtcYHuXK5tn4YiZbvuZ078 1uXnVpDJz6fKZRARWCBLoIdlLKXyOhOrCyIvxU13AYXURFvzIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpQ8KtieH1vr2l4Id8uDMHWUBj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5 NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNiN2Q0Y2VkNmEvZDI0MThhZWMtN2E5My0z Nzg5LTg4MWUtNmU5YmIzNWUxNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ZkOTYwYWItOWFmNi00N2UyLWEy OGQtNjIzYjdkNGNlZDZhLzNmZDk2MGFiLTlhZjYtNDdlMi1hMjhkLTYyM2I3ZDRj ZWQ2YS5jcmwwHwYDVR0jBBgwFoAUNxMbooWnBA3GnpfGqlb+qDu1BsIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNi N2Q0Y2VkNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxmIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXpmEEoqt4YgLCnnhh3JvUnMI6ep4koH0BVBYFQAuWqcKATUVJFF0UT 9Du78QHMmDX/70fMpKn30RtypTHkWeq8dMO9P8jSAntezeDTe/kA5aO7lydbVTJ/ I4dZlL06+DYXPXZhyaEwl8x8eTkAbSfda+mEmMXrtllOhN+hdE9KgedwZV5X7D0C ldT1a28a0xQfqjN/tsjvm2wSjitO9DcYpwyokOXc/1e/aqIiklAu1x6pVgYsCQB7 PM4Dcl+rXF9dZxiqz5YWzVuZbfB/R83RQaRGPh+5pyOlIg5c/JpVJCsr7L05vxhc YU5xZmX1PHxO6vFlTCdYzfgQeClB4xI= -----END CERTIFICATE-----Generated at Sun Oct 26 16:14:18 2025 by rpki-client