$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c588b-d4b5-3e5b-bde9-d2cecf430a6b.roa File: 217c588b-d4b5-3e5b-bde9-d2cecf430a6b.roa (raw, json) Hash identifier: RNW9m5Y2L2rX1fzQPsEBVrb5+et8Pp3eXYoLDtRcPXo= Subject key identifier: 63:F2:4E:C2:F9:B6:ED:D4:4B:7B:CD:0F:4B:B6:A8:9E:D4:22:61:C6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CCF9C692233D79573CA6BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c588b-d4b5-3e5b-bde9-d2cecf430a6b.roa Signing time: Thu 23 Oct 2025 02:32:07 +0000 ROA not before: Thu 23 Oct 2025 02:32:07 +0000 ROA not after: Wed 21 Jan 2026 03:32:07 +0000 asID: 6167 IP address blocks: 198.225.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:cf:9c:69:22:33:d7:95:73:ca:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 02:32:07 2025 GMT Not After : Jan 21 03:32:07 2026 GMT Subject: CN=f4fe1330-0ee0-49c7-92bf-049f5a9b32ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:8b:b8:27:6c:f8:18:e0:1b:22:b2:7e:1b: 9a:6c:a4:11:9b:c6:41:ce:97:99:2e:64:8a:f6:92: 33:55:a9:4c:89:6f:09:27:50:7c:1d:c3:45:83:e7: 9d:be:63:b5:39:dc:11:6e:4b:6d:04:c4:22:61:85: 63:85:a8:b7:25:73:05:f3:7e:a2:81:b3:19:5e:c3: d3:50:dc:0e:a6:ed:aa:10:e0:4f:c3:ff:94:51:28: 90:eb:99:03:7c:f5:e9:29:20:22:29:07:b4:77:b2: 21:29:4e:55:fe:a9:36:82:e5:f1:29:09:50:c1:75: 4b:77:cf:3d:06:bb:9a:60:84:86:64:ca:c3:8d:3c: dc:b1:f6:cf:df:97:56:02:0c:5e:d8:64:86:fc:b3: c5:fd:c8:5b:10:72:d0:4f:0f:74:04:86:a4:1d:6a: c2:f6:14:c0:fc:37:15:71:5e:32:b2:52:cd:fc:4e: 61:90:a1:10:6b:fa:0a:ea:eb:a4:5e:e2:4d:1d:59: 4b:fb:31:0a:63:55:57:38:05:b3:27:2b:64:e8:85: e8:31:42:64:f6:fb:d7:33:66:d7:d7:52:a4:d9:3b: 85:7d:53:a8:ff:17:03:5b:a3:56:1b:00:23:6e:81: bd:d8:c2:89:8a:9f:7b:b9:f1:e0:e1:87:1d:79:b6: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F2:4E:C2:F9:B6:ED:D4:4B:7B:CD:0F:4B:B6:A8:9E:D4:22:61:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c588b-d4b5-3e5b-bde9-d2cecf430a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.225.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:20:66:f4:7a:f4:ea:4e:91:30:21:1b:9d:56:6a:a5:3a:a7: 79:82:67:b8:f3:84:b8:04:64:63:be:b7:2d:58:19:f9:70:1d: ff:16:6c:a3:e8:6d:88:68:57:6c:c8:00:e5:85:93:dc:c3:1a: 04:02:11:d7:5d:6e:05:e3:ec:c1:f3:13:51:c1:49:38:60:cc: 11:12:74:a8:81:47:80:f5:ce:d8:e5:36:b2:7f:58:87:7d:a4: b1:e7:6e:4b:90:bf:d5:75:61:80:da:8f:b2:05:32:c2:40:ec: 3f:6f:e8:60:bb:97:5c:6f:ec:e2:b2:0e:3c:f9:20:e9:d7:08: 06:fc:ef:e2:9f:07:e0:90:98:f4:2f:77:37:a7:18:1d:71:fe: 43:03:b5:d6:5e:b6:25:e5:6c:dd:ed:d5:96:86:89:b3:33:db: bf:d9:74:71:ab:25:6e:01:b6:df:4e:28:17:31:8c:01:f9:6e: 10:40:34:19:c7:c4:37:3c:fd:aa:ba:b5:34:62:0d:f5:ad:20: 60:6b:33:01:e1:7f:42:3a:cb:82:18:9d:ef:2d:f6:bc:a2:d7: 50:60:6a:71:f5:ec:5b:1a:ab:ce:20:ee:39:60:98:5b:83:59: c8:ae:48:81:80:9a:70:2b:67:2d:67:54:ce:73:82:ba:0b:f6: 03:16:27:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucz5xpIjPXlXPKa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAyMzIwN1oXDTI2MDEyMTAzMzIwN1owLzEtMCsGA1UEAxMk ZjRmZTEzMzAtMGVlMC00OWM3LTkyYmYtMDQ5ZjVhOWIzMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5iLuCds+BjgGyKyfhuabKQRm8ZBzpeZLmSK 9pIzValMiW8JJ1B8HcNFg+edvmO1OdwRbkttBMQiYYVjhai3JXMF836igbMZXsPT UNwOpu2qEOBPw/+UUSiQ65kDfPXpKSAiKQe0d7IhKU5V/qk2guXxKQlQwXVLd889 BruaYISGZMrDjTzcsfbP35dWAgxe2GSG/LPF/chbEHLQTw90BIakHWrC9hTA/DcV cV4yslLN/E5hkKEQa/oK6uukXuJNHVlL+zEKY1VXOAWzJytk6IXoMUJk9vvXM2bX 11Kk2TuFfVOo/xcDW6NWGwAjboG92MKJip97ufHg4YcdebYqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPyTsL5tu3US3vND0u2qJ7UImHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE3YzU4OGItZDRiNS0z ZTViLWJkZTktZDJjZWNmNDMwYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxuHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUgZvR69OpOkTAhG51WaqU6p3mCZ7jzhLgEZGO+ty1YGflwHf8WbKPo bYhoV2zIAOWFk9zDGgQCEdddbgXj7MHzE1HBSThgzBESdKiBR4D1ztjlNrJ/WId9 pLHnbkuQv9V1YYDaj7IFMsJA7D9v6GC7l1xv7OKyDjz5IOnXCAb87+KfB+CQmPQv dzenGB1x/kMDtdZetiXlbN3t1ZaGibMz27/ZdHGrJW4Btt9OKBcxjAH5bhBANBnH xDc8/aq6tTRiDfWtIGBrMwHhf0I6y4IYne8t9ryi11BganH17Fsaq84g7jlgmFuD WciuSIGAmnArZy1nVM5zgroL9gMWJ9w= -----END CERTIFICATE-----Generated at Sat Oct 25 10:57:02 2025 by rpki-client