$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa File: e408070a-3d28-36e7-95b9-81f2a086b77c.roa (raw, json) Hash identifier: X3x6r856U15K1DlGsq3ST1J43Qlgn9ShBM/g0JhLpGY= Subject key identifier: 8D:5A:02:8A:30:A1:59:31:B4:59:97:C2:B0:08:2E:0C:9F:14:CC:88 Certificate issuer: /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec Certificate serial: 010D0C9F4328584B9E07967F41D916FC2E7A85C0 Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399248 IP address blocks: 198.207.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:96:7f:41:d9:16:fc:2e:7a:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=6713f40c-0533-4d85-a6b1-6ea282d9561d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:93:dd:61:d2:c6:03:ef:93:17:0b:c6:4c: e5:2f:f8:02:0d:0b:35:ce:d6:38:1f:55:2d:27:07: 5a:bb:96:ae:09:6d:32:6a:a9:13:f8:97:5b:8a:34: 3c:f1:a5:4f:59:bd:7d:fd:0e:48:14:65:0c:67:5f: ac:96:f0:b1:53:eb:6b:03:19:7e:6a:2e:c8:bc:6f: 68:65:11:7c:94:f9:09:99:7d:c8:45:f6:91:02:a9: 5c:14:94:a5:b8:21:f3:51:a8:84:12:03:a0:79:e5: 01:bf:66:db:30:ec:e8:6b:cf:17:94:5e:e8:0e:62: 1c:8f:ec:b7:63:ea:e4:f8:31:3c:c6:31:8e:09:f1: 31:d3:7c:db:6d:ea:d3:a7:8d:3b:03:76:ca:93:bf: 28:7d:ce:2d:17:de:52:3b:58:0a:88:87:84:34:ed: 3c:50:2c:45:76:e3:b0:fa:c3:66:61:0d:66:25:5e: 44:5c:1e:42:1a:1d:83:08:1c:47:e2:fc:99:eb:3e: b9:1f:11:3d:1b:8d:37:60:f6:ac:4a:85:b3:8b:b7: 1f:86:2a:99:c7:3f:66:9f:63:f4:a2:a6:16:82:e9: 08:d6:3c:98:82:a0:46:73:e4:47:9d:dc:fb:b9:26: af:47:c0:ca:9d:e0:92:79:e1:10:0f:09:56:8d:8c: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:02:8A:30:A1:59:31:B4:59:97:C2:B0:08:2E:0C:9F:14:CC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl X509v3 Authority Key Identifier: keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer sbgp-ipAddrBlock: critical IPv4: 198.207.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:9f:13:8a:56:c2:5e:a6:68:e4:b2:1a:9c:87:d5:02:7c:b7: 64:13:d8:d7:04:71:31:a5:3d:2a:8c:c0:59:88:a3:2d:bf:cc: c1:9e:82:31:4d:d4:a5:73:26:06:52:10:ca:1f:06:0d:d0:93: 0b:81:4b:e5:d0:63:96:2b:f2:06:db:35:79:42:5e:a0:ab:4f: f9:8a:2a:97:65:40:f4:fd:68:1b:ff:59:ec:5a:be:86:18:94: 5a:08:9b:48:6c:4c:2b:f6:ab:40:51:71:80:94:88:87:fb:bf: 6b:f1:21:9c:7b:e6:77:f2:d3:f8:36:0b:48:83:61:a6:82:43: a9:70:06:d7:65:a8:90:cd:cf:74:6e:d3:2e:42:7c:8d:19:00: cb:d2:7d:9d:a9:99:fc:6b:a8:45:9d:15:e7:48:2c:1a:b8:f8: 5b:18:28:29:46:8b:9e:92:49:4d:b6:aa:10:f4:d6:c6:60:37: c3:0d:ce:d3:23:89:a5:e6:6d:be:bd:d2:65:0e:11:d7:93:43: 64:9a:58:61:41:e2:4a:db:e4:76:87:58:b8:d0:05:78:79:89: 83:97:1a:16:5c:56:24:ba:e7:c7:89:b9:66:30:bb:8d:10:0c: e0:68:d8:e7:83:2e:0e:5a:a6:7a:28:53:0f:4d:58:cf:c9:1c: 01:dc:87:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5Z/QdkW/C56hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E1NTU0NGUtZWMzYi00NDUyLThmMTMtZGNiNTRhZDdm NGVjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjcxM2Y0MGMtMDUzMy00ZDg1LWE2YjEtNmVhMjgyZDk1NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsWT3WHSxgPvkxcLxkzlL/gCDQs1ztY4H1Ut Jwdau5auCW0yaqkT+JdbijQ88aVPWb19/Q5IFGUMZ1+slvCxU+trAxl+ai7IvG9o ZRF8lPkJmX3IRfaRAqlcFJSluCHzUaiEEgOgeeUBv2bbMOzoa88XlF7oDmIcj+y3 Y+rk+DE8xjGOCfEx03zbberTp407A3bKk78ofc4tF95SO1gKiIeENO08UCxFduOw +sNmYQ1mJV5EXB5CGh2DCBxH4vyZ6z65HxE9G403YPasSoWzi7cfhiqZxz9mn2P0 oqYWgukI1jyYgqBGc+RHndz7uSavR8DKneCSeeEQDwlWjYwPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1aAoowoVkxtFmXwrAILgyfFMyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYTU1 NTQ0ZS1lYzNiLTQ0NTItOGYxMy1kY2I1NGFkN2Y0ZWMvZTQwODA3MGEtM2QyOC0z NmU3LTk1YjktODFmMmEwODZiNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2E1NTU0NGUtZWMzYi00NDUyLThm MTMtZGNiNTRhZDdmNGVjL2NhNTU1NDRlLWVjM2ItNDQ1Mi04ZjEzLWRjYjU0YWQ3 ZjRlYy5jcmwwHwYDVR0jBBgwFoAUdFIuNP8rBD96yRX0lCtTdmWf8kEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYTU1NTQ0ZS1lYzNiLTQ0NTItOGYxMy1kY2I1 NGFkN2Y0ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs8OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6fE4pWwl6maOSyGpyH1QJ8t2QT2NcEcTGlPSqMwFmIoy2/zMGegjFN 1KVzJgZSEMofBg3QkwuBS+XQY5Yr8gbbNXlCXqCrT/mKKpdlQPT9aBv/WexavoYY lFoIm0hsTCv2q0BRcYCUiIf7v2vxIZx75nfy0/g2C0iDYaaCQ6lwBtdlqJDNz3Ru 0y5CfI0ZAMvSfZ2pmfxrqEWdFedILBq4+FsYKClGi56SSU22qhD01sZgN8MNztMj iaXmbb690mUOEdeTQ2SaWGFB4krb5HaHWLjQBXh5iYOXGhZcViS658eJuWYwu40Q DOBo2OeDLg5apnooUw9NWM/JHAHch0U= -----END CERTIFICATE-----Generated at Mon Oct 27 08:41:38 2025 by rpki-client