$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa File: 3df5c989-5d1e-3810-980c-0ab3219805da.roa (raw, json) Hash identifier: 3vonBXQYvLqWeRMCZs9qnKKP1sFEKK1QN+SXj2WnITA= Subject key identifier: A7:3B:62:39:C3:B9:CE:16:08:A5:6B:0C:9B:AC:C7:1B:83:1B:6E:23 Certificate issuer: /CN=19e99068-492b-4b53-9e32-828f20955f8d Certificate serial: 010D0C9F4328584AE8912D22B8EAE312E14984C0 Authority key identifier: 58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 27275 IP address blocks: 198.161.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2d:22:b8:ea:e3:12:e1:49:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e99068-492b-4b53-9e32-828f20955f8d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=896bd9fa-e23d-4425-af1f-1f610d6d86f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:1f:aa:76:13:e7:7e:b2:54:46:35:4a:ad: 8c:6d:bd:04:17:ba:81:8c:d2:c1:56:ae:7c:bf:6c: 15:1c:c2:0a:d8:ee:a4:df:b7:0c:41:be:5c:2f:71: ef:39:f0:ce:5f:a0:ee:5d:63:a7:da:45:29:7f:39: 1d:3d:13:e6:40:82:83:1a:e6:e8:31:49:1c:e5:c3: 98:1a:39:6e:85:02:0c:95:84:b4:b0:94:f3:ad:da: 63:02:28:44:73:18:3e:5a:18:43:7f:93:fd:b0:5f: 0f:c6:03:4c:32:f6:04:ac:59:a3:b9:f3:38:41:c6: 57:88:e1:1f:d2:dd:4e:81:d2:af:97:d8:77:1a:34: 81:64:90:6c:c9:f8:82:80:a0:ec:a6:64:18:4d:81: 36:71:9d:19:c0:91:2f:59:fc:cd:09:9c:f5:cf:f8: b0:3a:43:4d:30:ea:43:1d:01:6b:65:50:91:89:df: c7:22:99:4b:8c:e3:01:7a:6e:97:2a:05:b4:dd:43: 45:88:99:42:fc:9b:af:95:54:eb:0e:cc:76:45:fe: 99:9f:a2:fa:95:18:a1:d4:93:0f:9a:2f:3d:37:05: cc:be:f1:5c:50:e3:a6:95:76:4c:34:65:44:f1:83: dd:fd:ff:a2:6c:a0:05:b1:3f:97:c4:cf:b8:83:e8: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:62:39:C3:B9:CE:16:08:A5:6B:0C:9B:AC:C7:1B:83:1B:6E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl X509v3 Authority Key Identifier: keyid:58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d7:83:70:75:f5:ea:5e:b9:71:b5:41:95:1f:b8:78:a1:2c: 65:1d:94:c5:48:1f:18:ec:ef:e2:49:b7:47:b3:76:9a:1b:17: d1:1e:94:d4:f6:77:9f:64:47:1c:3b:69:2e:07:90:74:67:a0: 03:c2:87:1f:51:d5:40:ba:3a:df:62:a4:41:ea:01:bc:3e:b4: ea:3f:f7:06:41:cc:b8:6b:27:1f:60:4b:97:88:f2:89:7b:72: 37:2b:f4:d0:3d:d6:d9:3c:d3:95:7c:63:70:2e:59:5a:e1:4a: 1a:81:3c:5b:91:a6:90:2e:bd:ef:e7:ac:0f:a5:af:9e:13:11: 2f:c9:1d:91:71:73:03:2f:b9:07:71:c9:52:6a:22:c1:4d:d9: 67:af:75:79:81:cc:a8:31:e4:71:e4:3a:64:34:ac:6b:5c:e0: 44:7d:7b:f7:1c:45:7c:08:f0:39:78:4d:51:8e:f1:70:21:f4: 42:52:a1:37:7f:57:d1:c3:44:6f:5a:52:fa:d3:4e:cc:08:79: c6:1a:03:22:3a:1c:02:6f:8f:15:1d:52:ab:50:2f:7c:40:d4: 09:0d:81:29:b4:82:3f:d1:56:51:bd:b3:96:2c:c3:c1:4a:ba: 19:99:7c:4a:af:6a:9f:ee:53:85:44:b8:49:da:59:4a:d5:05: 5c:01:3b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS0iuOrjEuFJhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllOTkwNjgtNDkyYi00YjUzLTllMzItODI4ZjIwOTU1 ZjhkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ODk2YmQ5ZmEtZTIzZC00NDI1LWFmMWYtMWY2MTBkNmQ4NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ofqnYT536yVEY1Sq2Mbb0EF7qBjNLBVq58 v2wVHMIK2O6k37cMQb5cL3HvOfDOX6DuXWOn2kUpfzkdPRPmQIKDGuboMUkc5cOY GjluhQIMlYS0sJTzrdpjAihEcxg+WhhDf5P9sF8PxgNMMvYErFmjufM4QcZXiOEf 0t1OgdKvl9h3GjSBZJBsyfiCgKDspmQYTYE2cZ0ZwJEvWfzNCZz1z/iwOkNNMOpD HQFrZVCRid/HIplLjOMBem6XKgW03UNFiJlC/JuvlVTrDsx2Rf6Zn6L6lRih1JMP mi89NwXMvvFcUOOmlXZMNGVE8YPd/f+ibKAFsT+XxM+4g+iHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc7YjnDuc4WCKVrDJusxxuDG24jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5 OTA2OC00OTJiLTRiNTMtOWUzMi04MjhmMjA5NTVmOGQvM2RmNWM5ODktNWQxZS0z ODEwLTk4MGMtMGFiMzIxOTgwNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTllOTkwNjgtNDkyYi00YjUzLTll MzItODI4ZjIwOTU1ZjhkLzE5ZTk5MDY4LTQ5MmItNGI1My05ZTMyLTgyOGYyMDk1 NWY4ZC5jcmwwHwYDVR0jBBgwFoAUWOqtfxWWBokA016B7EFTCIb4JYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5OTA2OC00OTJiLTRiNTMtOWUzMi04Mjhm MjA5NTVmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHXg3B19epeuXG1QZUfuHihLGUdlMVIHxjs7+JJt0ezdpobF9EelNT2 d59kRxw7aS4HkHRnoAPChx9R1UC6Ot9ipEHqAbw+tOo/9wZBzLhrJx9gS5eI8ol7 cjcr9NA91tk805V8Y3AuWVrhShqBPFuRppAuve/nrA+lr54TES/JHZFxcwMvuQdx yVJqIsFN2WevdXmBzKgx5HHkOmQ0rGtc4ER9e/ccRXwI8Dl4TVGO8XAh9EJSoTd/ V9HDRG9aUvrTTswIecYaAyI6HAJvjxUdUqtQL3xA1AkNgSm0gj/RVlG9s5Ysw8FK uhmZfEqvap/uU4VEuEnaWUrVBVwBO9c= -----END CERTIFICATE-----Generated at Sun Aug 24 04:52:05 2025 by rpki-client