$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db2ffcca-c74b-3a91-ab87-4f7c621646e8.roa File: db2ffcca-c74b-3a91-ab87-4f7c621646e8.roa (raw, json) Hash identifier: U+Jcnw9lJaNOlF/GNtUXLnE29/jGB7wqYq8y6GD7r+c= Subject key identifier: EB:42:AA:69:7F:63:26:8F:1F:25:79:96:B7:1D:FC:BB:11:64:23:A7 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B4D691A230E61320BF7547780 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db2ffcca-c74b-3a91-ab87-4f7c621646e8.roa Signing time: Wed 24 Sep 2025 15:56:43 +0000 ROA not before: Wed 24 Sep 2025 15:56:43 +0000 ROA not after: Tue 23 Dec 2025 16:56:43 +0000 asID: 212238 IP address blocks: 198.89.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:69:1a:23:0e:61:32:0b:f7:54:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 24 15:56:43 2025 GMT Not After : Dec 23 16:56:43 2025 GMT Subject: CN=de765ed1-e616-4a89-a78b-4aa01563eeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:f5:18:8f:0c:f6:5c:ed:7d:1a:ca:74:42: 56:6d:d4:44:e5:d2:6e:da:45:b5:52:d9:4c:64:37: 24:14:45:24:5c:12:54:59:23:99:72:32:e6:54:b1: d7:d1:c0:0a:40:5f:67:21:11:c4:7d:a2:6a:28:28: 06:02:c8:cf:72:67:34:39:b5:3b:2f:f4:ad:8a:3b: 40:76:6e:a1:f6:c2:16:a5:bd:f4:aa:20:96:53:24: 23:1a:2f:c1:1c:41:ee:c3:13:3e:19:df:3f:94:2b: 9f:be:d6:fc:d0:25:f2:2f:59:3d:55:bc:48:c2:ce: 0c:9e:af:c3:b6:a3:f4:d3:ca:05:c0:c8:b2:02:b4: 8d:3a:03:44:e8:47:47:64:8f:03:06:4f:7f:41:1d: 76:2b:47:26:ae:af:05:61:19:02:6c:ce:82:f6:51: 59:81:79:da:9d:f6:bd:28:95:9e:fd:b3:44:fa:d5: 98:0d:53:41:3e:5f:99:61:6b:0c:76:cb:c7:71:7a: 0f:c8:41:7b:c5:59:89:eb:6c:0d:65:45:d9:45:88: 80:1c:80:92:e6:87:ff:b0:35:fd:ac:aa:a4:ae:24: 4b:3a:c2:34:96:8d:bb:45:05:59:34:24:d6:85:76: d6:4f:82:f3:2f:fc:8c:8f:90:56:9f:36:70:9c:75: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:42:AA:69:7F:63:26:8F:1F:25:79:96:B7:1D:FC:BB:11:64:23:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/db2ffcca-c74b-3a91-ab87-4f7c621646e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e0:a1:9a:77:92:28:89:a9:20:8b:d5:c7:f3:e6:96:ee:d9: c3:18:24:ec:4e:c8:f4:00:28:8c:12:c8:3e:f4:7e:59:76:4f: e7:ea:76:c0:48:c0:0b:96:f4:ee:a0:c8:46:fa:60:1a:de:a5: 3a:8f:dc:fc:40:c8:92:42:79:be:68:aa:a4:1a:62:62:bc:66: 25:50:51:cf:da:a3:d2:80:fb:3d:aa:d6:a2:1c:de:e7:9c:e0: 58:f6:83:c9:41:d0:81:43:73:3e:19:66:4b:b1:62:8f:86:5d: 5b:5e:8c:fc:c4:b7:5e:b2:47:8c:3a:7f:f7:d4:7c:23:21:7f: 72:27:97:34:eb:67:ed:c2:60:89:72:f1:50:28:3b:30:e9:3f: c5:97:2c:64:8e:7b:c0:fb:4d:99:80:45:0a:ba:f2:2b:93:ed: dd:12:e8:a3:74:74:32:17:d9:3c:66:00:de:4a:89:fa:95:3f: 9b:5e:65:1f:af:16:83:38:d3:fe:d6:c0:47:86:21:ea:5a:d7: e0:b4:a5:20:36:ac:ff:39:04:7a:f0:73:2d:77:02:b4:7a:9a: 66:d6:de:37:70:5c:94:f7:df:55:fb:52:f9:01:2b:5a:0e:1c: 69:a0:28:0f:19:f3:f0:2a:ba:73:4b:af:18:13:a3:c1:57:03: 40:d3:fb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNaRojDmEyC/dUd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkyNDE1NTY0M1oXDTI1MTIyMzE2NTY0M1owLzEtMCsGA1UEAxMk ZGU3NjVlZDEtZTYxNi00YTg5LWE3OGItNGFhMDE1NjNlZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQn1GI8M9lztfRrKdEJWbdRE5dJu2kW1UtlM ZDckFEUkXBJUWSOZcjLmVLHX0cAKQF9nIRHEfaJqKCgGAsjPcmc0ObU7L/StijtA dm6h9sIWpb30qiCWUyQjGi/BHEHuwxM+Gd8/lCufvtb80CXyL1k9VbxIws4Mnq/D tqP008oFwMiyArSNOgNE6EdHZI8DBk9/QR12K0cmrq8FYRkCbM6C9lFZgXnanfa9 KJWe/bNE+tWYDVNBPl+ZYWsMdsvHcXoPyEF7xVmJ62wNZUXZRYiAHICS5of/sDX9 rKqkriRLOsI0lo27RQVZNCTWhXbWT4LzL/yMj5BWnzZwnHWExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtCqml/YyaPHyV5lrcd/LsRZCOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGIyZmZjY2EtYzc0Yi0z YTkxLWFiODctNGY3YzYyMTY0NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxll9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvgoZp3kiiJqSCL1cfz5pbu2cMYJOxOyPQAKIwSyD70fll2T+fqdsBI wAuW9O6gyEb6YBrepTqP3PxAyJJCeb5oqqQaYmK8ZiVQUc/ao9KA+z2q1qIc3uec 4Fj2g8lB0IFDcz4ZZkuxYo+GXVtejPzEt16yR4w6f/fUfCMhf3InlzTrZ+3CYIly 8VAoOzDpP8WXLGSOe8D7TZmARQq68iuT7d0S6KN0dDIX2TxmAN5KifqVP5teZR+v FoM40/7WwEeGIepa1+C0pSA2rP85BHrwcy13ArR6mmbW3jdwXJT331X7UvkBK1oO HGmgKA8Z8/AqunNLrxgTo8FXA0DT+/o= -----END CERTIFICATE-----Generated at Wed Oct 15 16:49:32 2025 by rpki-client