$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa File: 655bf99e-9879-33d3-ab34-9c30551ed533.roa (raw, json) Hash identifier: sEFSa29z0yn6ZbflXANIKxteCBlW+PqyQSlbaH5GeQg= Subject key identifier: 81:37:91:27:98:31:66:46:4F:AA:F2:E7:F2:36:C4:E8:7C:B4:20:CB Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B33F1A259E3C85D0588F14AC0 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 131477 IP address blocks: 198.176.48.0/22 maxlen: 24 198.176.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a2:59:e3:c8:5d:05:88:f1:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=27a1ec3c-aaa1-4f72-9983-ea1e809af5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:d3:a1:53:e5:ec:3b:c1:82:e1:0a:0a:cc: 23:9b:41:7b:c4:f5:6e:36:25:b6:c8:54:89:ac:13: 2f:59:06:bb:64:ea:f2:aa:b6:76:ce:88:b0:5e:eb: 87:5e:86:c0:98:25:3e:77:40:29:07:55:00:c5:b6: 6d:6d:48:3f:b2:fd:0b:89:9b:1c:ac:06:77:f9:0f: 06:6b:e9:da:90:66:da:92:28:31:50:5e:73:4f:fe: f7:e8:8f:4b:48:b5:27:82:65:8a:9a:67:a2:7c:f4: 5d:b5:aa:60:ff:95:b6:2f:0d:5f:62:45:32:32:29: e2:da:59:e7:33:a9:9e:e1:44:1d:77:d5:9c:9c:16: 59:c4:55:6d:1e:f2:eb:24:15:60:99:03:be:c5:b3: ce:5c:3c:bb:f5:2e:2b:b4:02:e0:fa:43:1d:92:0f: e4:e2:ee:4c:fe:64:f6:c7:9b:e1:e1:fd:d9:e1:29: 0f:ed:05:e8:d0:29:10:b7:30:de:9c:30:78:3a:2c: 56:bc:a2:44:2f:5e:75:be:56:db:aa:33:9a:74:f1: 77:79:8d:60:83:b4:8c:48:95:92:35:11:43:08:27: 02:ff:ab:d8:51:b6:91:30:be:52:1a:c8:ca:8d:70: d4:e5:ca:8c:66:41:bf:e8:ed:2a:fc:bb:06:5b:5f: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:91:27:98:31:66:46:4F:AA:F2:E7:F2:36:C4:E8:7C:B4:20:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/655bf99e-9879-33d3-ab34-9c30551ed533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 198.176.48.0-198.176.53.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:79:a1:86:37:58:ad:06:d6:a7:23:3a:11:93:9f:e7:23:1b: 25:e4:93:8b:26:4e:8d:0e:d6:79:06:14:73:bd:35:2f:2d:36: 9e:41:33:3f:46:22:0d:34:79:a4:2a:d4:0e:87:7a:a9:48:d3: fd:6b:0b:7d:50:75:f7:27:05:06:b7:a0:81:b6:17:57:33:ab: 69:28:26:3e:a3:a0:92:8b:07:8c:44:1b:91:92:1d:ec:03:26: 23:d8:d2:21:9b:b2:fa:5f:cb:b3:ef:20:43:f4:9a:00:b4:24: 6f:13:1c:64:72:4e:71:de:2b:2b:71:cb:c0:8e:82:e4:ea:de: c5:7e:1c:3b:dc:b4:30:3f:dd:96:2a:82:34:1b:b3:f3:d0:8b: 94:92:eb:29:4b:42:13:40:16:94:bb:b1:88:3e:fb:59:c2:4d: db:08:81:38:4a:9c:71:01:0e:e3:93:87:2a:f2:cf:df:b2:80: 28:a4:22:1f:6c:81:0c:e1:a6:d4:63:99:34:7d:e7:61:de:82: 4e:28:f7:3f:89:5b:82:fc:0d:29:27:c7:34:57:b0:d2:58:89: 94:10:6d:93:5f:83:38:6d:04:9c:27:c4:c9:31:bb:fa:b7:f3: 2e:81:3a:b5:c0:11:2b:3a:45:a9:c2:2e:7e:41:61:51:14:27: 6e:ef:f7:10 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsz8aJZ48hdBYjxSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MjdhMWVjM2MtYWFhMS00ZjcyLTk5ODMtZWExZTgwOWFmNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVTToVPl7DvBguEKCswjm0F7xPVuNiW2yFSJ rBMvWQa7ZOryqrZ2zoiwXuuHXobAmCU+d0ApB1UAxbZtbUg/sv0LiZscrAZ3+Q8G a+nakGbakigxUF5zT/736I9LSLUngmWKmmeifPRdtapg/5W2Lw1fYkUyMini2lnn M6me4UQdd9WcnBZZxFVtHvLrJBVgmQO+xbPOXDy79S4rtALg+kMdkg/k4u5M/mT2 x5vh4f3Z4SkP7QXo0CkQtzDenDB4OixWvKJEL151vlbbqjOadPF3eY1gg7SMSJWS NRFDCCcC/6vYUbaRML5SGsjKjXDU5cqMZkG/6O0q/LsGW18z5wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIE3kSeYMWZGT6ry5/I2xOh8tCDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNjU1YmY5OWUtOTg3OS0z M2QzLWFiMzQtOWMzMDU1MWVkNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATGsDAD BAHGsDQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZHmhhjdYrQbWpyM6EZOf5yMbJeSTiyZOjQ7WeQYUc701 Ly02nkEzP0YiDTR5pCrUDod6qUjT/WsLfVB19ycFBreggbYXVzOraSgmPqOgkosH jEQbkZId7AMmI9jSIZuy+l/Ls+8gQ/SaALQkbxMcZHJOcd4rK3HLwI6C5OrexX4c O9y0MD/dliqCNBuz89CLlJLrKUtCE0AWlLuxiD77WcJN2wiBOEqccQEO45OHKvLP 37KAKKQiH2yBDOGm1GOZNH3nYd6CTij3P4lbgvwNKSfHNFew0liJlBBtk1+DOG0E nCfEyTG7+rfzLoE6tcARKzpFqcIufkFhURQnbu/3EA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:22 2025 by rpki-client