$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/6358a2a3-c6d0-3946-b3b3-1d0fa7f27a3f.roa File: 6358a2a3-c6d0-3946-b3b3-1d0fa7f27a3f.roa (raw, json) Hash identifier: +nv6aRklCn5XvPDZxpyruK7fpNjXDtM/NPAPJZRCahs= Subject key identifier: DB:99:53:A9:C5:6D:24:2A:C2:06:E4:E3:63:C3:59:46:F6:53:9E:79 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584B9CA231B4379C727953390500 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/6358a2a3-c6d0-3946-b3b3-1d0fa7f27a3f.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 3300 IP address blocks: 198.207.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:31:b4:37:9c:72:79:53:39:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=1c0b269a-a088-451c-91f2-5d882bfe6cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:d5:77:31:0d:92:41:86:d9:de:3f:29:42: eb:c2:aa:16:f4:c8:7a:69:73:93:26:8e:95:fd:0a: 98:8a:63:91:72:b3:3b:44:ae:e3:26:05:20:bd:41: 40:06:11:a4:36:14:14:9f:7f:32:0e:3e:5f:30:a5: c2:d2:35:46:6a:0c:f8:76:07:ff:bd:fa:2e:ab:16: 12:07:a7:5d:79:7a:5d:0e:24:f3:d1:57:33:e7:34: ad:51:2d:cd:b3:81:64:1c:12:99:68:2b:e3:2d:71: 69:f7:0c:71:fd:95:71:7e:1a:b7:ba:e7:9a:c5:1e: 67:04:3a:59:86:49:c6:61:67:f2:a1:4e:dd:34:a9: 61:69:00:4c:e3:ce:67:9f:91:93:83:57:df:f1:90: 50:3c:95:ce:fa:c4:4c:05:ef:f3:d3:78:ce:81:4a: b4:e5:2c:cf:31:a1:46:fe:43:cf:d7:9d:59:dd:a9: aa:9d:60:9c:89:f7:38:ae:41:0b:bf:b7:ca:ed:17: 8b:b5:9f:21:e3:94:4b:79:64:63:7b:20:c5:45:7b: f2:e2:41:37:64:30:6e:48:7c:8e:83:80:77:ff:ab: 0f:bb:59:80:c0:68:84:06:44:27:ce:07:1e:e9:23: b8:2f:ea:bf:86:72:39:c7:10:ef:b7:6a:77:30:34: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:53:A9:C5:6D:24:2A:C2:06:E4:E3:63:C3:59:46:F6:53:9E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/6358a2a3-c6d0-3946-b3b3-1d0fa7f27a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 198.207.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c4:4b:33:6c:e2:1e:b3:99:79:48:73:26:a5:5f:bd:7e:05: de:db:7e:99:2f:2b:a7:d5:ab:2a:21:20:60:75:65:3b:a8:0e: 49:5f:3d:5b:e2:3a:0b:db:2a:ea:4a:f7:64:ed:2d:ec:36:f8: 23:ef:85:3f:83:57:a5:eb:e4:9c:2f:31:9d:06:06:fe:f9:c2: fd:2a:7e:1d:58:7b:92:bb:e8:a0:51:3b:25:7d:d4:ef:47:ac: 0e:e6:b8:76:62:31:42:fb:21:ab:13:e4:2d:f9:3c:95:44:f9: e2:54:9f:11:1a:ba:ba:7a:ad:c5:42:8b:aa:e6:b1:0b:3d:3d: 44:f0:de:2b:f3:58:e6:4c:15:0b:52:b8:30:18:f9:ab:48:06: 88:34:49:f8:53:f3:9b:cf:cd:75:cd:49:e0:1f:7c:be:d3:86: d6:f8:cc:55:19:85:ba:75:ef:2f:c7:49:6c:1d:80:9a:1d:a6: 98:22:97:6a:65:aa:1a:d7:91:ee:02:ff:2e:17:30:77:5c:7b: a1:f0:0a:33:29:15:ed:8b:5e:b1:53:33:79:37:98:7a:27:ef: d8:b5:22:6a:d3:13:33:84:7c:7f:d3:18:ea:b8:36:6d:9c:3d: ab:46:28:52:66:56:da:b7:c9:11:0d:4d:2b:2e:e6:67:70:44: d3:23:05:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojG0N5xyeVM5BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MWMwYjI2OWEtYTA4OC00NTFjLTkxZjItNWQ4ODJiZmU2Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFvVdzENkkGG2d4/KULrwqoW9Mh6aXOTJo6V /QqYimORcrM7RK7jJgUgvUFABhGkNhQUn38yDj5fMKXC0jVGagz4dgf/vfouqxYS B6ddeXpdDiTz0Vcz5zStUS3Ns4FkHBKZaCvjLXFp9wxx/ZVxfhq3uueaxR5nBDpZ hknGYWfyoU7dNKlhaQBM485nn5GTg1ff8ZBQPJXO+sRMBe/z03jOgUq05SzPMaFG /kPP151Z3amqnWCcifc4rkELv7fK7ReLtZ8h45RLeWRjeyDFRXvy4kE3ZDBuSHyO g4B3/6sPu1mAwGiEBkQnzgce6SO4L+q/hnI5xxDvt2p3MDSxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuZU6nFbSQqwgbk42PDWUb2U555MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvNjM1OGEyYTMtYzZkMC0z OTQ2LWIzYjMtMWQwZmE3ZjI3YTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXESzNs4h6zmXlIcyalX71+Bd7bfpkvK6fVqyohIGB1ZTuoDklfPVvi OgvbKupK92TtLew2+CPvhT+DV6Xr5JwvMZ0GBv75wv0qfh1Ye5K76KBROyV91O9H rA7muHZiMUL7IasT5C35PJVE+eJUnxEaurp6rcVCi6rmsQs9PUTw3ivzWOZMFQtS uDAY+atIBog0SfhT85vPzXXNSeAffL7Thtb4zFUZhbp17y/HSWwdgJodppgil2pl qhrXke4C/y4XMHdce6HwCjMpFe2LXrFTM3k3mHon79i1ImrTEzOEfH/TGOq4Nm2c PatGKFJmVtq3yRENTSsu5mdwRNMjBRM= -----END CERTIFICATE-----Generated at Mon Oct 27 10:04:40 2025 by rpki-client