$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f82963f-0eea-3143-8ee5-732dd4525b2a.roa File: 1f82963f-0eea-3143-8ee5-732dd4525b2a.roa (raw, json) Hash identifier: cbvrpLas21G1NNmzsIZLibGz1p0mrRcUqHH5QsfWV7k= Subject key identifier: 66:C2:EF:AA:D1:80:CD:37:EE:10:82:04:00:51:92:DD:83:49:1B:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CCF9CEF030F2E6FBABB02C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f82963f-0eea-3143-8ee5-732dd4525b2a.roa Signing time: Thu 23 Oct 2025 02:32:07 +0000 ROA not before: Thu 23 Oct 2025 02:32:07 +0000 ROA not after: Wed 21 Jan 2026 03:32:07 +0000 asID: 22394 IP address blocks: 198.225.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:cf:9c:ef:03:0f:2e:6f:ba:bb:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 02:32:07 2025 GMT Not After : Jan 21 03:32:07 2026 GMT Subject: CN=617ae624-c86a-4385-b4d1-6c1995a1fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:98:03:6e:02:72:e7:cd:37:91:34:8e:a1: 0e:9e:b5:4f:3c:8c:fb:70:6f:08:49:91:3a:bc:5e: eb:cc:d6:a2:49:fe:a5:3d:48:c4:d1:c4:2c:3e:88: d9:d0:af:64:b3:03:96:2c:6e:dd:38:72:2e:97:4c: 5d:d6:07:23:b1:d5:c5:cc:27:78:b9:16:eb:87:88: 89:8b:01:16:fb:ee:43:8e:cf:f0:95:78:e4:dc:eb: 9b:97:ab:2b:57:63:9d:1a:98:3c:38:a0:3d:a0:ec: 84:5d:0d:3b:a2:4c:23:c6:a3:5f:f5:43:38:e6:74: bd:06:94:83:6c:2a:e5:ac:44:4f:5e:2a:aa:5c:f6: 31:65:37:a6:d6:59:90:60:1a:8e:40:7a:9e:11:2f: 5f:35:24:40:7c:50:24:b2:31:d7:2f:df:72:0d:a3: 00:74:db:b3:13:34:1e:90:4c:45:36:b4:be:5c:73: 6d:13:bd:ec:eb:1c:80:1f:24:6d:8a:5b:b3:b3:79: 72:da:da:04:75:85:cf:95:a6:9f:57:bc:32:1c:35: 60:6b:04:af:00:b7:83:b1:b3:5b:38:4f:30:6b:f3: b0:3c:94:f2:c6:d1:09:0a:4d:dc:cb:cb:18:2d:b7: 8d:3c:a1:c6:b2:41:32:e6:f2:d2:3d:a3:7b:ab:cf: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:EF:AA:D1:80:CD:37:EE:10:82:04:00:51:92:DD:83:49:1B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f82963f-0eea-3143-8ee5-732dd4525b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.225.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3a:78:b6:34:34:f1:44:ed:60:f8:52:01:4b:94:fa:fe:3a: c0:2b:9c:81:06:a9:b8:8d:63:6a:44:cd:1c:b7:3b:cb:c2:ee: 32:a6:89:50:ae:a5:8d:39:cf:0d:70:9e:f8:e2:ff:4a:55:dc: 2c:89:c3:f6:78:ff:ca:ea:85:1b:19:0c:aa:f1:75:68:f6:a4: 6c:fb:5b:9f:92:37:62:5c:4f:85:15:fa:ce:23:25:5c:93:63: 47:ee:0f:53:0d:00:e9:b8:cd:2a:29:52:e2:d8:b1:27:36:75: 03:a7:f0:15:ac:16:b4:8f:d4:06:b9:1e:7b:fe:9a:43:36:a1: ee:65:a2:14:1a:07:53:2a:5e:d1:9a:3c:0c:87:af:9a:0d:19: 21:e0:b2:73:7e:4f:14:2e:21:cf:6c:f7:50:90:cd:47:8d:24: 86:c1:56:81:4d:b4:c1:b0:44:10:ee:d6:25:2c:8d:d2:8a:f1: 8f:15:e5:45:2b:f1:87:ae:fc:b4:ca:b4:94:d6:61:16:87:73: c7:af:82:83:69:78:ce:ce:2b:78:5d:37:36:00:35:1a:35:d9: fb:22:6c:49:34:98:50:6a:32:1f:c3:7a:16:ba:96:fd:cc:41: 60:70:53:ab:49:92:b5:5e:65:c3:13:fd:5e:dd:f7:68:91:bf: ee:70:e6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucz5zvAw8ub7q7AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAyMzIwN1oXDTI2MDEyMTAzMzIwN1owLzEtMCsGA1UEAxMk NjE3YWU2MjQtYzg2YS00Mzg1LWI0ZDEtNmMxOTk1YTFmYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+yYA24CcufNN5E0jqEOnrVPPIz7cG8ISZE6 vF7rzNaiSf6lPUjE0cQsPojZ0K9kswOWLG7dOHIul0xd1gcjsdXFzCd4uRbrh4iJ iwEW++5Djs/wlXjk3Oubl6srV2OdGpg8OKA9oOyEXQ07okwjxqNf9UM45nS9BpSD bCrlrERPXiqqXPYxZTem1lmQYBqOQHqeES9fNSRAfFAksjHXL99yDaMAdNuzEzQe kExFNrS+XHNtE73s6xyAHyRtiluzs3ly2toEdYXPlaafV7wyHDVgawSvALeDsbNb OE8wa/OwPJTyxtEJCk3cy8sYLbeNPKHGskEy5vLSPaN7q8/46wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbC76rRgM037hCCBABRkt2DSRssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWY4Mjk2M2YtMGVlYS0z MTQzLThlZTUtNzMyZGQ0NTI1YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI6eLY0NPFE7WD4UgFLlPr+OsArnIEGqbiNY2pEzRy3O8vC7jKmiVCu pY05zw1wnvji/0pV3CyJw/Z4/8rqhRsZDKrxdWj2pGz7W5+SN2JcT4UV+s4jJVyT Y0fuD1MNAOm4zSopUuLYsSc2dQOn8BWsFrSP1Aa5Hnv+mkM2oe5lohQaB1MqXtGa PAyHr5oNGSHgsnN+TxQuIc9s91CQzUeNJIbBVoFNtMGwRBDu1iUsjdKK8Y8V5UUr 8Yeu/LTKtJTWYRaHc8evgoNpeM7OK3hdNzYANRo12fsibEk0mFBqMh/Deha6lv3M QWBwU6tJkrVeZcMT/V7d92iRv+5w5kE= -----END CERTIFICATE-----Generated at Sat Nov 1 15:21:52 2025 by rpki-client