$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa File: 7f2d1f41-a628-3634-bde1-7eeda4689406.roa (raw, json) Hash identifier: FOkBkPKXoNk1W0q5RgAmEOMB7aNRVPXWZMvjEopNGMg= Subject key identifier: 05:9F:52:A2:1C:38:5C:D8:42:CC:E9:20:F2:79:0A:52:4F:B0:4C:7C Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B742756EF5EA41B2688AA22C0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 0 IP address blocks: 198.20.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:56:ef:5e:a4:1b:26:88:aa:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=97ba1694-dd90-4deb-805e-cf58f9262684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:27:40:1a:65:84:74:ff:25:2a:ee:75:57: ef:23:72:d3:fb:b6:2e:39:0d:84:49:29:45:5e:e7: b1:f2:4e:27:07:db:89:e8:75:58:3d:3d:af:bd:92: 92:7b:12:b7:86:4a:d7:23:96:ca:4a:c3:4e:c8:c4: 75:eb:f1:8e:64:5c:65:15:b2:15:f6:cf:3c:4f:51: 53:3d:61:70:ab:60:88:39:b1:20:7a:e7:c7:73:fc: 59:10:1c:28:07:8b:c2:76:00:f3:ab:e4:a8:17:d8: 88:f9:bf:b9:5d:f2:03:fe:54:ec:92:6b:f6:32:7f: ea:ba:83:b1:4a:2e:39:71:52:9c:0a:40:e5:66:e7: 0d:7c:3e:ee:d1:6b:b1:e7:5d:0a:66:78:34:07:f3: 19:56:9d:f3:da:2f:cc:d5:80:fe:08:20:4f:54:53: 72:5a:e9:24:d8:74:2b:e8:93:e9:b6:54:44:85:a7: cd:05:ee:8d:f6:e6:b3:b3:49:48:ca:03:dd:dc:3f: b9:28:2b:b7:d0:fe:b4:a1:a6:a2:b4:2b:0f:ad:ec: a0:84:93:ea:e4:8e:3b:84:62:0a:4a:3d:80:f9:ad: 6f:4f:ba:c3:0d:73:15:09:da:67:b1:55:71:53:a8: 23:40:1d:c8:0d:0e:fe:6f:03:c5:e3:21:23:27:cd: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:52:A2:1C:38:5C:D8:42:CC:E9:20:F2:79:0A:52:4F:B0:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 198.20.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5d:6a:01:21:06:46:7b:48:5f:9c:40:5e:bc:d9:78:c2:99: 8d:ab:53:cd:9e:75:44:db:5a:59:5a:13:69:28:03:8f:0d:0a: ad:ed:cb:7f:24:b8:fb:76:2d:39:19:fd:d8:8f:5d:fe:ea:bd: 37:88:58:58:29:1f:06:60:e6:97:63:3d:e0:73:66:63:f6:e0: db:ed:31:bf:b7:c0:5b:f9:91:16:0b:f5:8c:55:e2:02:f2:4a: dd:3b:d3:fc:6d:95:e9:f5:5c:f2:0e:e8:40:b3:94:fb:f3:9d: 7d:13:cf:c2:7f:ac:63:b9:4d:1c:68:98:60:9e:4e:45:ba:61: 00:a3:54:32:4a:dd:66:24:e2:c2:6a:dd:3a:ec:fd:0f:8a:6f: 34:60:20:00:02:b2:5b:5b:04:34:48:1c:d6:24:de:78:f6:8e: b6:d9:6f:dc:8c:7b:10:00:16:39:1a:84:92:07:09:e4:e2:33: 6d:58:76:ec:3c:73:05:c7:65:80:9f:0b:9a:b2:ce:4b:98:67: 1d:b3:fa:3d:33:25:11:09:44:a1:fb:b7:75:bf:2f:d9:97:a4: f8:3c:2f:fc:a1:fb:17:cc:ac:af:60:c2:d5:1c:2a:b6:8f:ed: 0d:84:40:65:0d:7e:c4:af:45:42:4d:28:f6:78:b7:51:39:4e: d5:4d:87:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1bvXqQbJoiqIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk OTdiYTE2OTQtZGQ5MC00ZGViLTgwNWUtY2Y1OGY5MjYyNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSEnQBplhHT/JSrudVfvI3LT+7YuOQ2ESSlF Xuex8k4nB9uJ6HVYPT2vvZKSexK3hkrXI5bKSsNOyMR16/GOZFxlFbIV9s88T1FT PWFwq2CIObEgeufHc/xZEBwoB4vCdgDzq+SoF9iI+b+5XfID/lTskmv2Mn/quoOx Si45cVKcCkDlZucNfD7u0Wux510KZng0B/MZVp3z2i/M1YD+CCBPVFNyWukk2HQr 6JPptlREhafNBe6N9uazs0lIygPd3D+5KCu30P60oaaitCsPreyghJPq5I47hGIK Sj2A+a1vT7rDDXMVCdpnsVVxU6gjQB3IDQ7+bwPF4yEjJ83xswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWfUqIcOFzYQszpIPJ5ClJPsEx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2YyZDFmNDEtYTYyOC0z NjM0LWJkZTEtN2VlZGE0Njg5NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVdagEhBkZ7SF+cQF682XjCmY2rU82edUTbWllaE2koA48NCq3ty38k uPt2LTkZ/diPXf7qvTeIWFgpHwZg5pdjPeBzZmP24NvtMb+3wFv5kRYL9YxV4gLy St070/xtlen1XPIO6ECzlPvznX0Tz8J/rGO5TRxomGCeTkW6YQCjVDJK3WYk4sJq 3Trs/Q+KbzRgIAACsltbBDRIHNYk3nj2jrbZb9yMexAAFjkahJIHCeTiM21Yduw8 cwXHZYCfC5qyzkuYZx2z+j0zJREJRKH7t3W/L9mXpPg8L/yh+xfMrK9gwtUcKraP 7Q2EQGUNfsSvRUJNKPZ4t1E5TtVNh+c= -----END CERTIFICATE-----Generated at Sun Oct 19 21:12:57 2025 by rpki-client