$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa File: bc6990b7-5135-34a6-8b7f-da63625a8f64.roa (raw, json) Hash identifier: s+Ggn7HM0PjNI2qa/Jw5hXQinRxIrblkhIlT29/aQy4= Subject key identifier: B2:8F:24:C9:06:9B:53:77:A2:2C:22:01:FF:4E:8A:6C:0D:1A:06:40 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584B821CC5148BD55F3E925A3240 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 1403 IP address blocks: 198.58.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c5:14:8b:d5:5f:3e:92:5a:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c180a0cf-7181-4853-9b10-29d98bf062e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:3a:7b:58:e4:e4:95:ec:a4:45:01:4b:e9: ac:b4:76:29:6e:f6:66:23:41:75:76:71:90:9d:a6: 40:31:46:8a:3f:6d:b6:ec:9d:3c:6c:d5:29:31:b8: 24:9a:b2:71:fc:1b:63:47:bf:6b:8b:a9:9f:27:aa: 60:c8:fe:1a:0e:78:48:da:b2:87:6b:ef:01:1a:8c: 2e:ed:4b:4c:be:cd:ec:c5:1e:a7:9b:81:69:3e:80: 54:66:00:57:19:44:92:c8:19:0b:ea:ef:6b:bf:e9: 3c:68:fd:36:a5:1c:e0:b7:ac:6c:96:d6:39:ed:3c: 1d:4b:cf:8e:43:6f:3a:f9:2d:05:a1:59:52:2c:1b: df:98:03:c8:56:df:a5:87:01:b8:88:38:bf:54:9f: 60:be:2a:18:65:a4:ee:4b:fb:09:8f:94:8b:93:d8: 02:6b:e0:7e:ab:7b:4e:2e:6a:0b:0f:50:eb:14:e8: ce:ff:da:f3:31:cd:16:a0:df:e9:b1:fd:79:5f:21: ac:7e:5a:6a:21:5a:fe:23:06:23:24:8c:e1:04:ee: 05:4e:c0:90:06:73:a6:2f:4c:23:f2:d8:09:11:44: 2b:26:3a:7b:a2:30:87:cb:97:4c:b2:9f:f0:8f:08: 49:2f:21:a7:19:3b:cf:7e:52:c7:33:cb:6f:47:88: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8F:24:C9:06:9B:53:77:A2:2C:22:01:FF:4E:8A:6C:0D:1A:06:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 198.58.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:75:4a:55:bb:75:f3:9f:df:59:3d:89:58:30:5d:66:35:42: db:4a:80:d3:f6:ab:08:47:22:80:42:15:d6:f7:d7:bd:be:9c: 79:16:63:4e:57:5d:6b:51:85:2b:19:c2:fc:35:50:1e:12:3e: 66:38:a5:7b:37:42:a7:96:ac:89:ae:4c:49:fa:de:a3:0c:3f: bc:fe:c0:b0:f6:76:0d:76:91:e1:c4:3c:e5:ff:32:1e:43:bd: 82:a9:bb:af:9d:d5:80:2c:c2:5d:16:5a:06:12:46:ab:08:06: cb:59:34:fd:dc:12:48:39:4c:70:fe:05:78:cb:9a:62:ae:36: 12:9e:b0:c9:12:0f:0f:b8:ef:e3:b6:20:c4:36:10:08:ae:6c: bf:1d:d9:66:41:07:ba:9b:3a:78:0c:39:2d:91:60:93:a6:4d: a2:96:8c:3c:ee:81:da:41:f9:51:d6:d4:92:71:02:f4:2b:30: 84:a3:0e:fc:0c:2d:59:ec:5d:23:f4:1b:0a:d9:48:44:37:09: b7:7f:0b:8f:50:2e:5c:b0:9c:8a:74:d9:36:1c:84:f5:48:0f: 04:44:8b:65:6e:6b:a6:36:0e:3e:97:3e:ce:24:4c:b1:3e:67: 1a:36:44:b8:6e:18:2c:c8:75:f7:c4:9d:9d:97:d1:95:94:a4: 8b:72:1b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMUUi9VfPpJaMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzE4MGEwY2YtNzE4MS00ODUzLTliMTAtMjlkOThiZjA2MmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS06e1jk5JXspEUBS+mstHYpbvZmI0F1dnGQ naZAMUaKP2227J08bNUpMbgkmrJx/BtjR79ri6mfJ6pgyP4aDnhI2rKHa+8BGowu 7UtMvs3sxR6nm4FpPoBUZgBXGUSSyBkL6u9rv+k8aP02pRzgt6xsltY57TwdS8+O Q286+S0FoVlSLBvfmAPIVt+lhwG4iDi/VJ9gvioYZaTuS/sJj5SLk9gCa+B+q3tO LmoLD1DrFOjO/9rzMc0WoN/psf15XyGsflpqIVr+IwYjJIzhBO4FTsCQBnOmL0wj 8tgJEUQrJjp7ojCHy5dMsp/wjwhJLyGnGTvPflLHM8tvR4gOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKPJMkGm1N3oiwiAf9OimwNGgZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmM2OTkwYjctNTEzNS0z NGE2LThiN2YtZGE2MzYyNWE4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ1SlW7dfOf31k9iVgwXWY1QttKgNP2qwhHIoBCFdb3172+nHkWY05X XWtRhSsZwvw1UB4SPmY4pXs3QqeWrImuTEn63qMMP7z+wLD2dg12keHEPOX/Mh5D vYKpu6+d1YAswl0WWgYSRqsIBstZNP3cEkg5THD+BXjLmmKuNhKesMkSDw+47+O2 IMQ2EAiubL8d2WZBB7qbOngMOS2RYJOmTaKWjDzugdpB+VHW1JJxAvQrMISjDvwM LVnsXSP0GwrZSEQ3Cbd/C49QLlywnIp02TYchPVIDwREi2Vua6Y2Dj6XPs4kTLE+ Zxo2RLhuGCzIdffEnZ2X0ZWUpItyG5A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:26:27 2025 by rpki-client