$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa File: 58cb281c-c134-3300-b62f-7a82f33f8b29.roa (raw, json) Hash identifier: SAG3gz40HX8Yaycjeruhnb9813GUORrccM9jpZ/jruI= Subject key identifier: C1:5F:B9:84:08:F9:6E:72:4B:5C:31:53:C0:6C:14:8E:03:14:B5:DF Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B8EACEB8A725321467F43EC00 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 56274 IP address blocks: 198.208.133.0/24 maxlen: 24 198.208.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:eb:8a:72:53:21:46:7f:43:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d8f449fc-1eea-47b4-8238-66ae0c464d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:e4:d0:2a:ef:d2:78:a6:3d:68:d4:55:b7: 07:dc:ba:92:66:12:9f:47:2b:90:ab:36:3e:2f:93: 84:9d:c2:d0:6f:07:67:a8:26:44:0f:eb:05:c2:5f: a0:61:f8:51:be:1f:b7:b2:bf:cc:35:5d:9b:5f:76: b2:0d:10:83:bd:34:97:30:88:e1:94:da:08:2c:ba: 96:e6:f0:b9:b5:ca:0b:8a:09:9a:fe:3e:32:f7:d0: 7f:9d:ac:3d:51:e1:ee:86:5f:60:e2:09:08:d1:a1: bc:65:20:e4:78:59:b5:5d:69:a9:de:f9:59:38:b3: cf:3d:1a:bb:c4:38:3e:98:9c:9f:6e:03:c7:9a:f9: 93:0b:05:f2:16:80:09:8a:64:26:ce:42:4e:00:ee: 84:16:99:07:24:ff:b2:19:b8:55:00:54:b8:c5:52: 28:55:0b:e5:08:a7:03:d3:69:1c:75:40:1b:58:bf: ae:9d:e3:72:25:18:78:e5:c4:8f:9b:0d:88:19:84: 20:4d:cf:bc:f1:a7:dc:2e:03:88:2a:08:c1:e8:ce: 1f:fd:95:8e:80:aa:2c:5c:01:25:51:c1:25:b4:f0: 47:f7:e1:24:fe:42:c3:cc:5e:52:0d:b3:0f:f1:11: 6e:09:43:e9:42:1c:11:ef:83:ca:eb:ee:c1:97:7d: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:B9:84:08:F9:6E:72:4B:5C:31:53:C0:6C:14:8E:03:14:B5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.133.0/24 198.208.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ef:e6:b2:8f:92:0f:9c:a1:de:bd:6e:90:6f:36:47:76:3e: 71:2d:3e:e8:0e:72:3f:92:6a:3a:d8:2e:d1:5b:01:16:1e:ce: 4b:c9:70:bd:10:b0:87:71:48:2a:37:14:8c:b2:cf:54:50:7c: c6:69:87:d4:47:58:31:32:61:43:25:e6:7d:a2:0e:ba:e8:91: c6:79:00:ea:4e:a9:b0:31:4d:90:96:90:01:f6:8c:12:77:18: cd:32:78:72:70:5d:7e:71:fe:3a:23:88:d2:60:55:e4:05:9a: 3e:09:b8:22:97:b3:58:f2:3b:f2:60:50:2c:36:af:b6:12:3f: 1c:4d:9b:a5:7c:bd:19:fc:e8:81:b3:50:85:e2:7b:6f:de:40: 59:a2:80:3a:96:dc:c0:fb:c3:cb:01:54:36:fb:c7:b0:54:9b: 26:f9:d1:ee:9b:e2:8f:7b:8c:31:41:03:28:e2:33:bc:c9:a3: d5:42:b9:0c:fb:ac:39:4e:4b:39:56:64:0f:83:f1:2c:c3:4b: 28:fc:39:e2:8c:f8:7a:9d:2e:c4:10:8a:a0:ed:48:b6:34:da: c8:13:eb:db:99:bd:b8:cc:b1:d8:47:80:18:64:02:82:9f:8a: f3:72:85:6d:a2:15:db:1e:64:bc:c1:ec:ab:50:bd:10:39:72: b2:43:c7:a3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuOrOuKclMhRn9D7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDhmNDQ5ZmMtMWVlYS00N2I0LTgyMzgtNjZhZTBjNDY0ZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20fk0Crv0nimPWjUVbcH3LqSZhKfRyuQqzY+ L5OEncLQbwdnqCZED+sFwl+gYfhRvh+3sr/MNV2bX3ayDRCDvTSXMIjhlNoILLqW 5vC5tcoLigma/j4y99B/naw9UeHuhl9g4gkI0aG8ZSDkeFm1XWmp3vlZOLPPPRq7 xDg+mJyfbgPHmvmTCwXyFoAJimQmzkJOAO6EFpkHJP+yGbhVAFS4xVIoVQvlCKcD 02kcdUAbWL+uneNyJRh45cSPmw2IGYQgTc+88afcLgOIKgjB6M4f/ZWOgKosXAEl UcEltPBH9+Ek/kLDzF5SDbMP8RFuCUPpQhwR74PK6+7Bl31KOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMFfuYQI+W5yS1wxU8BsFI4DFLXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNThjYjI4MWMtYzEzNC0z MzAwLWI2MmYtN2E4MmYzM2Y4YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtCFAwQA xtDYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABrv5rKPkg+cod69bpBvNkd2PnEtPugOcj+SajrYLtFbARYe zkvJcL0QsIdxSCo3FIyyz1RQfMZph9RHWDEyYUMl5n2iDrrokcZ5AOpOqbAxTZCW kAH2jBJ3GM0yeHJwXX5x/jojiNJgVeQFmj4JuCKXs1jyO/JgUCw2r7YSPxxNm6V8 vRn86IGzUIXie2/eQFmigDqW3MD7w8sBVDb7x7BUmyb50e6b4o97jDFBAyjiM7zJ o9VCuQz7rDlOSzlWZA+D8SzDSyj8OeKM+HqdLsQQiqDtSLY02sgT69uZvbjMsdhH gBhkAoKfivNyhW2iFdseZLzB7KtQvRA5crJDx6M= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:46 2025 by rpki-client