$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa File: dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa (raw, json) Hash identifier: AAt4tFxKe74sC2eXEh7XqneuHz7D8ezkoz+kFv0bK+Y= Subject key identifier: CE:5D:CC:9C:F8:B9:CF:02:71:04:D7:F3:3B:1D:A4:5F:15:08:B7:7E Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Certificate serial: 010D0C9F4328584B1AD18DD9F2AEA6C3E65EE200 Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40628 IP address blocks: 199.190.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8d:d9:f2:ae:a6:c3:e6:5e:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2aab58c2-8c2f-4242-a489-75808fcb8acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:ec:fd:67:2a:b2:21:f3:8a:00:0e:fd:25: ed:b1:b3:46:29:71:b7:33:f1:95:e3:e9:1f:fe:9b: 01:22:f7:d0:3e:02:4c:eb:5a:da:8a:57:71:39:d6: 78:8c:6c:13:15:73:5f:3e:eb:bd:a7:46:d4:5d:8f: b2:33:15:2a:c5:f5:09:37:34:6e:3f:14:cf:84:7a: c7:be:55:af:7f:d1:ab:b6:3a:9d:69:26:80:ad:e9: e6:99:cc:db:2b:3d:25:92:ed:b7:eb:d3:b5:a6:e4: 94:63:23:ce:56:1c:f5:b4:00:f5:a6:87:4c:2d:92: e1:8a:a3:05:f2:38:f5:7a:94:d6:5c:44:6e:6c:9c: 91:bc:a1:b8:c8:c9:5d:f5:d9:74:7e:65:ab:c1:33: 7e:24:08:be:89:e2:a4:e6:2f:47:99:cb:3c:fb:d0: aa:1e:6a:89:b6:ab:fb:40:89:e7:24:ab:c1:81:84: 92:a0:05:9c:88:a5:4b:68:58:26:79:e1:70:88:8b: a2:35:30:72:fb:be:b8:bb:65:21:60:a2:5d:49:7e: dd:cc:7b:66:8f:5b:db:de:c4:e7:00:84:3d:e5:66: 8d:54:f4:71:ad:78:58:9b:34:e0:10:92:5a:d0:7f: 1a:dd:8c:ed:6c:3f:08:7f:6e:80:59:0c:1d:25:73: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5D:CC:9C:F8:B9:CF:02:71:04:D7:F3:3B:1D:A4:5F:15:08:B7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl X509v3 Authority Key Identifier: keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer sbgp-ipAddrBlock: critical IPv4: 199.190.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:db:0b:a1:7e:77:05:cf:4a:9a:d9:e2:7c:71:c5:c7:97:24: 97:1f:7b:f7:97:16:a3:6d:0c:0e:f3:5b:c7:a5:06:9c:1a:4d: c8:af:a6:bc:44:f0:46:4a:62:a2:e0:43:4d:5e:4a:10:57:e3: 74:0b:0d:05:35:18:41:81:5c:21:71:41:c4:26:c1:b5:e2:f9: b8:53:e3:99:cb:a9:dc:81:72:24:d8:d4:de:03:2c:9c:80:e0: c8:34:9f:73:57:ae:d0:a4:51:d6:bf:ec:58:5a:34:fc:de:99: 04:c2:1d:6d:8d:77:d6:a1:89:fe:9c:e0:e5:24:f1:c1:7b:7d: 9b:87:17:2a:73:84:54:c1:35:40:dd:7f:dd:50:bb:7f:eb:72: 97:3e:05:58:97:ba:68:a7:d2:f0:8a:bb:06:f8:dd:3e:c4:a4: e4:6b:6c:01:46:b4:cf:fd:0c:c4:2b:21:f0:29:58:9a:c7:94: 2d:42:5a:2c:27:d2:7e:ec:b6:72:1f:4b:cd:c0:20:ec:a8:e5: 2a:4e:ee:c3:62:9e:2a:88:ff:ec:49:95:19:82:46:b0:b3:18: 39:22:0b:46:72:b3:81:26:c7:05:7f:6a:fa:7b:91:32:bc:cc: 01:08:46:a3:2f:22:56:84:e8:a6:7f:25:e0:1b:b0:4a:28:4c: f8:6f:7b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y3Z8q6mw+Ze4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4 YTU3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MmFhYjU4YzItOGMyZi00MjQyLWE0ODktNzU4MDhmY2I4YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yvs/WcqsiHzigAO/SXtsbNGKXG3M/GV4+kf /psBIvfQPgJM61raildxOdZ4jGwTFXNfPuu9p0bUXY+yMxUqxfUJNzRuPxTPhHrH vlWvf9GrtjqdaSaArenmmczbKz0lku2369O1puSUYyPOVhz1tAD1podMLZLhiqMF 8jj1epTWXERubJyRvKG4yMld9dl0fmWrwTN+JAi+ieKk5i9Hmcs8+9CqHmqJtqv7 QInnJKvBgYSSoAWciKVLaFgmeeFwiIuiNTBy+764u2UhYKJdSX7dzHtmj1vb3sTn AIQ95WaNVPRxrXhYmzTgEJJa0H8a3YztbD8If26AWQwdJXOyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5dzJz4uc8CcQTX8zsdpF8VCLd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvZGZjZGRlMmMtYWU0NS0z YmRmLThlMTYtZmFmNjk0YjQyYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1 NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1 OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx76AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzbC6F+dwXPSprZ4nxxxceXJJcfe/eXFqNtDA7zW8elBpwaTcivprxE 8EZKYqLgQ01eShBX43QLDQU1GEGBXCFxQcQmwbXi+bhT45nLqdyBciTY1N4DLJyA 4Mg0n3NXrtCkUda/7FhaNPzemQTCHW2Nd9ahif6c4OUk8cF7fZuHFypzhFTBNUDd f91Qu3/rcpc+BViXumin0vCKuwb43T7EpORrbAFGtM/9DMQrIfApWJrHlC1CWiwn 0n7stnIfS83AIOyo5SpO7sNiniqI/+xJlRmCRrCzGDkiC0Zys4EmxwV/avp7kTK8 zAEIRqMvIlaE6KZ/JeAbsEooTPhvewk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:26 2025 by rpki-client