$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa File: f9a2facb-e73a-3151-8001-8276673133ae.roa (raw, json) Hash identifier: LwvM5gkuWpxLzGJsUzrOoIMXSXhoCxeBbYpEf72Zd20= Subject key identifier: 11:F6:D6:B9:00:21:DE:8E:D0:18:E0:BB:F8:9A:B4:52:2D:9E:0D:57 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B583C8E89781358742FFD3800 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 198.135.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:89:78:13:58:74:2f:fd:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1e649478-30b9-4b5b-80ae-edc87d6082d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:56:80:1a:53:d8:1b:93:e9:4c:9d:07:c7: b6:a5:0b:d1:44:e0:34:4f:d8:01:b2:9b:3e:77:70: e6:af:f7:ab:59:d2:76:09:12:7e:9c:2c:58:0b:de: cb:08:8d:38:f0:a2:c2:56:75:77:dc:7d:b5:b6:ca: 4e:7d:07:9c:aa:0a:91:8f:37:e6:f7:53:9d:d9:2a: 59:b8:5b:d4:ef:8a:65:d8:81:c5:21:ad:a1:6b:a5: 00:ce:e7:0b:88:28:44:c1:6b:2e:f6:94:0b:a9:3d: bb:4a:20:44:43:37:fb:8e:52:19:61:fa:05:b7:06: 71:8a:0d:64:ca:b5:97:ff:0c:ad:5d:f1:a7:b5:e6: f8:42:78:71:ce:e0:97:12:ce:3f:b8:08:69:48:07: c6:d1:b8:48:b5:ef:8c:71:fb:b8:20:69:ea:9b:fa: 51:56:54:5e:4f:d0:ea:c0:fc:11:6b:69:4e:92:bc: d2:4b:9e:8d:66:d7:46:32:d7:a3:af:97:04:85:ed: 0d:22:ad:27:71:d9:3d:bf:e8:a2:0a:90:be:c2:d9: 08:0e:df:00:66:c1:c0:b2:a7:cc:ab:11:0b:49:cd: e8:ac:95:aa:71:28:3d:a0:ad:3d:c3:42:72:24:d9: d7:fb:c7:10:68:14:29:a4:45:59:f4:f9:31:ef:c5: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:D6:B9:00:21:DE:8E:D0:18:E0:BB:F8:9A:B4:52:2D:9E:0D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.135.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:34:04:03:15:07:d7:a3:19:40:5d:58:16:8b:aa:69:37:b6: 51:ed:da:62:d1:97:0a:0a:cd:42:d5:43:b9:89:d3:6c:98:5f: 14:84:55:5b:36:c0:12:43:37:dd:85:0f:02:b7:47:c5:8f:53: 7a:f0:8b:43:2c:0e:fc:1f:a1:18:1c:f5:20:4e:30:b7:f6:40: 05:73:46:a1:4a:fa:15:dd:18:19:90:c6:cc:c9:3b:be:ad:fc: d9:13:00:47:21:5b:22:50:1d:54:c0:ef:8e:92:a1:66:ea:12: 68:d7:3f:ff:61:f5:ec:5f:bf:72:d2:15:91:09:eb:b1:2f:7c: c2:80:c5:f5:9d:44:07:64:93:a1:b2:28:6e:d2:40:0f:cd:07: 81:2d:15:61:da:e3:2a:b6:16:60:20:ff:5b:06:1d:44:29:ce: c1:f3:69:ce:d1:80:a2:cc:b7:b9:4f:aa:00:2f:72:d8:0c:37: 3b:36:80:71:e8:f0:53:8c:06:d7:a3:2c:44:56:02:51:b0:37: 06:59:88:ca:40:37:1d:90:d4:51:5c:f8:74:36:9c:b0:78:1c: 2c:14:de:73:aa:93:97:8f:cb:e8:b1:97:ae:b9:6f:f5:5a:3b: f9:e5:b1:17:d7:75:45:b3:83:77:30:1b:65:ff:6b:af:38:1a: 2a:da:1d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI6JeBNYdC/9OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWU2NDk0NzgtMzBiOS00YjViLTgwYWUtZWRjODdkNjA4MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5dWgBpT2BuT6UydB8e2pQvRROA0T9gBsps+ d3Dmr/erWdJ2CRJ+nCxYC97LCI048KLCVnV33H21tspOfQecqgqRjzfm91Od2SpZ uFvU74pl2IHFIa2ha6UAzucLiChEwWsu9pQLqT27SiBEQzf7jlIZYfoFtwZxig1k yrWX/wytXfGnteb4QnhxzuCXEs4/uAhpSAfG0bhIte+Mcfu4IGnqm/pRVlReT9Dq wPwRa2lOkrzSS56NZtdGMtejr5cEhe0NIq0ncdk9v+iiCpC+wtkIDt8AZsHAsqfM qxELSc3orJWqcSg9oK09w0JyJNnX+8cQaBQppEVZ9Pkx78VF2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH21rkAId6O0Bjgu/iatFItng1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjlhMmZhY2ItZTczYS0z MTUxLTgwMDEtODI3NjY3MzEzM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxoegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII0BAMVB9ejGUBdWBaLqmk3tlHt2mLRlwoKzULVQ7mJ02yYXxSEVVs2 wBJDN92FDwK3R8WPU3rwi0MsDvwfoRgc9SBOMLf2QAVzRqFK+hXdGBmQxszJO76t /NkTAEchWyJQHVTA746SoWbqEmjXP/9h9exfv3LSFZEJ67EvfMKAxfWdRAdkk6Gy KG7SQA/NB4EtFWHa4yq2FmAg/1sGHUQpzsHzac7RgKLMt7lPqgAvctgMNzs2gHHo 8FOMBtejLERWAlGwNwZZiMpANx2Q1FFc+HQ2nLB4HCwU3nOqk5ePy+ixl665b/Va O/nlsRfXdUWzg3cwG2X/a684GiraHbo= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:39 2025 by rpki-client