$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9e0785f9-ab16-3b20-a438-a1cb93dc3dca.roa File: 9e0785f9-ab16-3b20-a438-a1cb93dc3dca.roa (raw, json) Hash identifier: k7TjC3dYmoH+IsH9V8vbtjKiKq2W+wzffv90DWuewuw= Subject key identifier: 02:17:95:3D:88:A6:2B:03:EB:19:09:A7:5F:B0:4A:B5:62:B3:C8:DD Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B4E7717ABF59D6DC1016B8F00 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9e0785f9-ab16-3b20-a438-a1cb93dc3dca.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 32771 IP address blocks: 198.241.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:17:ab:f5:9d:6d:c1:01:6b:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=ffcd76f0-29fb-4012-a093-6d9f98757252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:16:bc:b7:e4:f1:79:f9:d6:44:38:f5:9d: cc:97:b3:67:4e:5a:42:0f:e6:14:01:8a:b0:e0:f0: b9:f7:44:bf:fd:c1:ea:82:1a:8d:42:72:37:b8:1b: 21:6d:54:99:1d:07:f5:6c:5c:57:81:50:d4:7c:9a: bd:52:22:27:b5:42:1e:a0:3a:fa:5b:57:bc:22:67: 84:e6:23:dd:15:76:bf:0f:5e:f8:c2:cb:58:96:06: 7e:a3:6c:65:1f:d4:fa:ad:32:7d:37:15:6d:07:95: 84:0d:0b:97:ac:f9:ce:f9:25:82:42:49:75:74:07: 83:84:70:c8:e0:d1:95:06:6a:26:f0:5a:e7:54:32: f6:f5:4b:aa:af:98:ae:a5:9b:e6:ee:61:8c:38:68: e9:6b:31:be:85:1d:57:95:cf:87:48:fa:d5:f2:67: b7:12:60:8c:cb:f0:45:3f:ca:f0:a1:d0:ff:7e:fd: f8:7a:52:48:57:06:b1:ef:fd:ae:e1:f0:12:3b:91: da:99:fd:74:aa:3a:41:ea:88:d0:6f:8d:07:05:7c: 9b:f3:44:19:89:b7:f4:62:6c:eb:b3:32:29:a9:2e: 9d:f8:8e:b0:ba:e8:7e:3b:5a:cc:92:0b:63:32:be: 78:16:e1:85:86:88:26:37:4c:b8:41:fa:1b:41:a0: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:17:95:3D:88:A6:2B:03:EB:19:09:A7:5F:B0:4A:B5:62:B3:C8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9e0785f9-ab16-3b20-a438-a1cb93dc3dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv4: 198.241.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dd:d2:b9:60:fb:d2:e2:77:5d:74:b0:23:8b:f7:60:92:74: 00:e1:d5:a6:82:d5:35:92:da:d3:29:f0:9d:a0:49:4e:ce:b3: d9:82:0d:aa:a3:94:8a:c8:df:dc:8a:93:06:64:d1:41:7b:3f: 80:22:bc:97:31:de:3c:fb:61:a5:21:e9:23:19:9e:b9:fa:85: 1c:0c:a5:17:58:2c:16:79:38:03:7a:f5:40:8c:20:ad:d2:6e: 32:97:27:0e:25:6a:63:86:38:f6:01:fb:f2:5b:01:5a:ba:18: a0:26:d4:de:52:0d:44:2e:83:6c:30:c7:ab:52:aa:8a:09:b8: 22:c4:cb:72:88:4d:31:8a:7f:81:5c:84:5d:19:29:ae:4b:29: 56:42:94:89:78:3e:d4:d3:d5:3a:03:14:87:e6:2d:ef:48:52: a7:bb:61:df:fe:c1:e7:ac:fb:7d:4a:4d:cd:c0:6c:e3:22:e4: 12:84:2a:88:d9:9d:e7:da:1a:f7:b9:3f:72:25:2c:83:f0:b7: 2e:d9:34:50:7d:2a:c2:31:3c:b1:2a:5a:9f:5e:bc:b5:3e:7c: f6:fa:4b:e5:be:55:bb:79:01:70:8e:d7:67:71:dc:be:c4:8b: 8a:dc:e3:0f:9b:b7:dd:4e:30:50:74:64:82:28:29:e7:f8:76: bf:5b:76:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxer9Z1twQFrjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmZjZDc2ZjAtMjlmYi00MDEyLWEwOTMtNmQ5Zjk4NzU3MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY4WvLfk8Xn51kQ49Z3Ml7NnTlpCD+YUAYqw 4PC590S//cHqghqNQnI3uBshbVSZHQf1bFxXgVDUfJq9UiIntUIeoDr6W1e8ImeE 5iPdFXa/D174wstYlgZ+o2xlH9T6rTJ9NxVtB5WEDQuXrPnO+SWCQkl1dAeDhHDI 4NGVBmom8FrnVDL29Uuqr5iupZvm7mGMOGjpazG+hR1Xlc+HSPrV8me3EmCMy/BF P8rwodD/fv34elJIVwax7/2u4fASO5Hamf10qjpB6ojQb40HBXyb80QZibf0Ymzr szIpqS6d+I6wuuh+O1rMkgtjMr54FuGFhogmN0y4QfobQaDwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIXlT2IpisD6xkJp1+wSrVis8jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOWUwNzg1ZjktYWIxNi0z YjIwLWE0MzgtYTFjYjkzZGMzZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvELMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfd0rlg+9Lid110sCOL92CSdADh1aaC1TWS2tMp8J2gSU7Os9mCDaqj lIrI39yKkwZk0UF7P4AivJcx3jz7YaUh6SMZnrn6hRwMpRdYLBZ5OAN69UCMIK3S bjKXJw4lamOGOPYB+/JbAVq6GKAm1N5SDUQug2wwx6tSqooJuCLEy3KITTGKf4Fc hF0ZKa5LKVZClIl4PtTT1ToDFIfmLe9IUqe7Yd/+wees+31KTc3AbOMi5BKEKojZ nefaGve5P3IlLIPwty7ZNFB9KsIxPLEqWp9evLU+fPb6S+W+Vbt5AXCO12dx3L7E i4rc4w+bt91OMFB0ZIIoKef4dr9bdiw= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:44 2025 by rpki-client