$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json) Hash identifier: BAc2QcgyHx2PycSwauTEkv20bMsGzHRXfL5DAtOnnuc= Subject key identifier: 1A:32:7F:1C:6F:7F:1D:47:65:65:20:9D:91:8A:EF:9D:EA:C4:93:0D Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584B2FC19435ACEC2F4CDF82D700 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 2902 IP address blocks: 198.59.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:94:35:ac:ec:2f:4c:df:82:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=bc901fd4-3378-4208-9e1c-0f98ff3e990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:b0:50:c6:75:c5:6d:06:8d:49:76:3c:a3: ff:dc:2e:85:23:cd:3a:ec:77:04:d4:eb:47:6e:d3: 14:21:22:99:4b:a2:7b:ab:ef:41:9e:ec:91:b4:c6: 2b:7a:e0:d4:8c:68:77:00:b8:7e:83:50:fc:d4:5f: db:64:43:8b:d6:3b:8e:33:55:e3:36:66:0d:68:ed: b3:f6:cb:42:10:e6:b4:0b:35:3a:e5:f4:99:36:cc: 2f:64:2e:35:2d:50:ee:b0:5d:ff:2c:3f:f4:f6:a9: 43:02:f0:02:ef:bd:09:1f:21:84:3b:70:a0:d9:fd: 22:e9:28:9f:64:e4:f5:6c:23:60:a8:03:af:46:47: 36:f8:4f:b1:f5:bd:45:e8:b9:a8:a2:98:d0:82:82: 3e:31:7b:c5:3b:38:5f:ca:f6:36:85:2c:b6:5d:a6: 5e:3c:e9:dd:5e:8e:ac:1b:33:c6:e9:8b:2c:ef:cf: ae:ad:09:c0:be:86:bd:68:9a:7f:80:dc:29:d1:dc: 14:4b:2c:45:dc:b4:74:3c:f4:aa:0e:1f:fa:f5:e0: a4:0c:a7:ee:a9:1d:8b:e4:df:a1:08:48:2e:07:ed: b6:f8:90:2c:04:e0:12:f6:4b:23:11:3c:94:cd:b9: ee:f2:ce:70:ba:02:d0:a4:a7:95:b8:10:fa:64:f1: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:7F:1C:6F:7F:1D:47:65:65:20:9D:91:8A:EF:9D:EA:C4:93:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: 198.59.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:74:20:40:45:44:8f:b2:68:80:f3:cf:58:da:3f:b9:31:5d: b0:df:38:26:f7:f9:b0:ec:2c:cf:7a:96:4b:2a:c3:70:13:26: 09:b5:a9:f8:5b:f6:7b:28:e5:f8:80:bd:4b:b2:6e:45:05:45: 62:47:7c:fe:d3:81:fc:a6:c4:ce:13:00:62:53:4d:10:14:47: e6:66:32:7d:2e:2f:13:30:8f:87:2a:df:f3:d3:bb:6e:f6:6e: c8:8b:62:16:2e:69:df:b1:23:5c:11:a3:dc:51:fb:27:6b:c5: 08:d2:ea:52:bc:e4:74:40:77:66:df:ad:cf:36:75:17:c0:11: 75:74:2b:01:51:de:a3:15:7a:71:4d:c5:28:9b:d1:78:f4:a0: b1:eb:95:eb:64:c8:d1:7f:3b:0f:7c:7a:37:bd:e9:d8:07:b8: 7c:b5:3e:70:de:70:d8:87:2d:89:45:2c:ad:c2:db:52:e2:df: 63:56:ed:cc:c4:b5:27:9e:4e:88:08:3c:d0:d8:a5:92:a4:e1: 04:30:90:c8:05:02:87:b1:fd:d2:8d:8b:5b:60:8c:d4:5a:fd: 12:d2:15:57:51:a5:3f:c9:6b:1c:a9:20:d8:6a:0e:6e:83:b1: f1:61:d1:0e:1f:88:88:f1:61:1f:74:21:39:8f:44:8c:5d:5b: ec:23:62:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZQ1rOwvTN+C1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YmM5MDFmZDQtMzM3OC00MjA4LTllMWMtMGY5OGZmM2U5OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlawUMZ1xW0GjUl2PKP/3C6FI8067HcE1OtH btMUISKZS6J7q+9BnuyRtMYreuDUjGh3ALh+g1D81F/bZEOL1juOM1XjNmYNaO2z 9stCEOa0CzU65fSZNswvZC41LVDusF3/LD/09qlDAvAC770JHyGEO3Cg2f0i6Sif ZOT1bCNgqAOvRkc2+E+x9b1F6LmoopjQgoI+MXvFOzhfyvY2hSy2XaZePOndXo6s GzPG6Yss78+urQnAvoa9aJp/gNwp0dwUSyxF3LR0PPSqDh/69eCkDKfuqR2L5N+h CEguB+22+JAsBOAS9ksjETyUzbnu8s5wugLQpKeVuBD6ZPHv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoyfxxvfx1HZWUgnZGK753qxJMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvOWZmMzA4MjQtMTA4NC0z MmU5LWFhMTktNTNjNDliNWRiNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ0IEBFRI+yaIDzz1jaP7kxXbDfOCb3+bDsLM96lksqw3ATJgm1qfhb 9nso5fiAvUuybkUFRWJHfP7TgfymxM4TAGJTTRAUR+ZmMn0uLxMwj4cq3/PTu272 bsiLYhYuad+xI1wRo9xR+ydrxQjS6lK85HRAd2bfrc82dRfAEXV0KwFR3qMVenFN xSib0Xj0oLHrletkyNF/Ow98eje96dgHuHy1PnDecNiHLYlFLK3C21Li32NW7czE tSeeTogIPNDYpZKk4QQwkMgFAoex/dKNi1tgjNRa/RLSFVdRpT/JaxypINhqDm6D sfFh0Q4fiIjxYR90ITmPRIxdW+wjYgk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:30 2025 by rpki-client