$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa File: dd352e4f-77cb-329b-ac71-fa2263a14092.roa (raw, json) Hash identifier: V7F9t2oh3nRRBg6dS8m4JFMfCPiS5La6FkXHqMHWn5g= Subject key identifier: A2:28:C9:CD:E3:2A:11:7F:2D:76:C9:B5:ED:EF:FD:1F:12:34:74:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB95FE1C8CE2BF81CE43C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33667 IP address blocks: 198.0.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:5f:e1:c8:ce:2b:f8:1c:e4:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cbb48ae2-6f77-4d79-9130-7775d5f93295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:46:b0:55:f1:2f:92:dd:0a:7b:8a:26:cb: 09:10:4f:46:ab:71:19:f8:d0:59:90:58:2d:78:9e: 5a:5b:15:16:08:d9:43:da:2e:40:e3:e2:e5:41:26: 2a:0f:3c:08:6b:a3:b2:52:4a:9a:84:9c:68:5e:10: 49:87:43:76:9a:03:8a:f6:29:67:13:04:22:b6:cd: b3:fe:2c:b0:59:9a:bf:49:57:df:b5:e5:91:18:fd: f8:e7:21:33:bd:94:3a:52:27:7e:80:af:7f:fb:fd: ab:ce:de:6f:16:0c:91:f2:ea:3e:a0:d7:61:01:6c: ec:7d:ce:7c:ab:0f:86:9c:e8:e2:ee:e7:e9:ec:b6: a9:27:75:9c:0e:17:e0:6f:e4:4e:63:87:0e:bb:99: 55:e9:76:1d:27:b4:1d:e9:ac:dc:bd:24:21:61:46: c9:d7:38:3c:13:48:c0:17:03:86:f0:27:20:23:9d: fb:2b:6d:88:3d:92:ec:09:ec:87:10:2b:6f:eb:35: 93:ab:f5:03:79:08:78:52:90:e2:e7:d2:1a:fb:72: bf:17:56:ea:87:20:28:8f:41:d3:4d:1a:d7:78:5a: 92:22:27:45:59:3f:50:9f:8b:84:b1:df:b0:df:a0: 14:21:65:1c:95:7e:9e:a3:46:32:c7:c3:65:b4:33: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:C9:CD:E3:2A:11:7F:2D:76:C9:B5:ED:EF:FD:1F:12:34:74:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 198.0.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ea:47:a6:c0:c2:6d:1d:be:0e:c4:8f:4a:71:ab:90:d8:c8: c3:8c:66:cd:10:13:bd:d2:ce:c8:b2:c9:f0:67:16:08:40:5c: b7:16:4b:17:d4:03:c2:57:ce:fb:78:f8:aa:7b:f4:cd:64:a4: ca:ce:b3:b8:2b:4d:cf:50:d2:4e:22:e1:05:f7:6d:09:1c:92: 39:8d:62:4f:78:9c:48:73:bb:47:ba:26:6a:44:a9:90:7e:af: 8d:18:e9:5f:f1:1d:f1:8e:6b:8c:dd:19:bf:79:5e:12:09:bd: b5:d2:1a:a9:07:a9:2c:e7:e2:0d:03:64:cb:c2:3c:a1:35:19: 9f:1c:36:61:1b:45:cf:ff:7c:a6:f7:ba:d6:af:be:f9:c6:6a: 9c:81:72:5c:d1:aa:27:cc:8f:e4:cf:ef:c1:e4:d9:f0:a8:a2: 99:c3:90:bd:8e:af:96:2d:48:4e:77:e2:20:16:b0:f2:9a:f7: 85:3c:28:6a:2d:d0:56:cb:c3:3e:23:eb:9d:1a:a8:73:9d:5b: 78:d5:f7:cc:54:98:3e:45:75:ff:4c:1a:77:ab:35:5b:b2:29: 6a:b1:ea:74:5d:de:d0:42:68:ae:5a:e5:fd:5d:3e:4a:d7:eb: f5:e4:5b:a4:fa:cd:dc:46:c0:13:a0:4a:40:08:89:d4:b4:08: 83:84:99:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uV/hyM4r+BzkPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2JiNDhhZTItNmY3Ny00ZDc5LTkxMzAtNzc3NWQ1ZjkzMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q1GsFXxL5LdCnuKJssJEE9Gq3EZ+NBZkFgt eJ5aWxUWCNlD2i5A4+LlQSYqDzwIa6OyUkqahJxoXhBJh0N2mgOK9ilnEwQits2z /iywWZq/SVffteWRGP345yEzvZQ6Uid+gK9/+/2rzt5vFgyR8uo+oNdhAWzsfc58 qw+GnOji7ufp7LapJ3WcDhfgb+ROY4cOu5lV6XYdJ7Qd6azcvSQhYUbJ1zg8E0jA FwOG8CcgI537K22IPZLsCeyHECtv6zWTq/UDeQh4UpDi59Ia+3K/F1bqhyAoj0HT TRrXeFqSIidFWT9Qn4uEsd+w36AUIWUclX6eo0Yyx8NltDPQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIoyc3jKhF/LXbJte3v/R8SNHRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQzNTJlNGYtNzdjYi0z MjliLWFjNzEtZmEyMjYzYTE0MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHqR6bAwm0dvg7Ej0pxq5DYyMOMZs0QE73SzsiyyfBnFghAXLcWSxfU A8JXzvt4+Kp79M1kpMrOs7grTc9Q0k4i4QX3bQkckjmNYk94nEhzu0e6JmpEqZB+ r40Y6V/xHfGOa4zdGb95XhIJvbXSGqkHqSzn4g0DZMvCPKE1GZ8cNmEbRc//fKb3 utavvvnGapyBclzRqifMj+TP78Hk2fCoopnDkL2Or5YtSE534iAWsPKa94U8KGot 0FbLwz4j650aqHOdW3jV98xUmD5Fdf9MGnerNVuyKWqx6nRd3tBCaK5a5f1dPkrX 6/XkW6T6zdxGwBOgSkAIidS0CIOEmf0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:20 2025 by rpki-client