$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa File: 328e6c00-d857-3fdd-bf11-e5ff675483b4.roa (raw, json) Hash identifier: ntRMjEZsd2h2rxqfgmvXk+EhrCll0qRW+7liZtvYaow= Subject key identifier: 41:BE:FD:A0:A8:B9:2A:FE:A7:45:12:C5:1E:90:2D:B9:57:B4:F2:35 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F66E0A4643C51FB39ABA80 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 3136 IP address blocks: 198.150.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6e:0a:46:43:c5:1f:b3:9a:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=fd8a7376-83a6-4ef7-934b-91e86ed58e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:72:36:9a:c3:f1:75:39:e3:7e:dd:1e:4b: 10:ad:fa:ce:74:ea:67:e1:47:b0:95:bf:6b:f4:39: 7e:b6:aa:ef:76:c0:9d:7b:7e:cb:05:25:00:ac:9d: 5c:9a:20:88:53:e6:dc:90:e9:2f:cd:f2:61:56:8e: 8c:5d:6e:d0:37:ee:e4:26:43:bc:e1:4a:1c:77:07: c8:44:41:69:1f:f5:70:0c:e6:c4:56:98:ff:11:0d: 4d:cd:13:85:f2:86:87:3b:da:6c:1f:52:9e:4b:dc: e0:a8:c0:e1:f8:47:ad:e0:fb:c6:7d:c5:9c:01:89: 23:e3:3c:34:a7:61:a6:b9:15:5a:63:d3:a0:71:50: 41:3d:eb:95:6c:26:5b:84:6e:80:5a:ef:ee:0b:22: 0d:61:3a:42:7a:dd:7e:0d:d1:27:91:9a:3d:e6:7c: 77:4c:fd:59:de:82:ab:b3:15:2f:f2:62:c5:a4:8b: 13:e1:82:b7:6f:5e:ef:0b:8a:4f:cb:8a:1f:6b:a2: 33:ae:2d:43:a9:6d:aa:c6:40:0b:f5:39:23:f0:dc: f0:ee:a9:63:ae:ad:22:3a:16:43:c6:13:3c:b9:d9: d0:d4:b3:b0:6d:33:e1:5b:e1:bb:ce:09:a2:f3:29: 07:e2:d9:d7:14:ec:dc:49:35:56:88:b5:13:d7:fa: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BE:FD:A0:A8:B9:2A:FE:A7:45:12:C5:1E:90:2D:B9:57:B4:F2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a7:74:8b:5e:9f:b3:df:70:d1:1d:3a:eb:31:c6:6e:6e:eb: ee:eb:02:e6:f9:a3:59:03:b2:1f:a2:5a:7f:47:79:93:a6:75: 06:39:bd:e6:06:29:d8:2a:81:79:0f:f0:b8:35:32:cc:f2:62: 5b:7a:4a:24:db:5b:0f:eb:46:03:5e:24:ed:c6:7c:6c:93:e2: 09:71:d3:ed:29:af:26:09:4d:05:eb:8a:a6:2a:17:95:dd:3e: 74:58:fc:0b:dc:62:37:e4:ff:54:e3:2b:dd:9b:49:b0:75:09: 62:94:a8:5e:d0:a4:6a:71:15:c4:88:d3:fa:e6:13:37:77:87: 8d:51:7d:fe:44:a3:5c:87:5a:59:ba:9b:7f:8c:7e:0e:fe:70: b9:11:e2:b4:78:5b:69:42:30:93:c6:79:b9:bd:bd:fd:ba:b4: 56:3d:dc:24:54:72:f0:f4:ab:ae:41:07:6a:46:73:0b:88:d4: f8:31:96:34:68:d5:aa:2c:c5:3a:7f:35:c2:26:eb:96:f0:69: 0d:47:0b:0f:78:05:b9:04:29:c3:8c:72:12:59:cf:88:35:8e: bd:df:05:b5:a3:37:1c:3d:98:44:1c:0f:7f:db:6d:0b:ca:24: f2:f3:78:af:93:bc:60:6b:7d:13:d0:8b:df:14:e0:0f:63:1e: 89:bc:b3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9m4KRkPFH7OauoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ4YTczNzYtODNhNi00ZWY3LTkzNGItOTFlODZlZDU4ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9yNprD8XU5437dHksQrfrOdOpn4Uewlb9r 9Dl+tqrvdsCde37LBSUArJ1cmiCIU+bckOkvzfJhVo6MXW7QN+7kJkO84UocdwfI REFpH/VwDObEVpj/EQ1NzROF8oaHO9psH1KeS9zgqMDh+Eet4PvGfcWcAYkj4zw0 p2GmuRVaY9OgcVBBPeuVbCZbhG6AWu/uCyINYTpCet1+DdEnkZo95nx3TP1Z3oKr sxUv8mLFpIsT4YK3b17vC4pPy4ofa6Izri1DqW2qxkAL9Tkj8Nzw7qljrq0iOhZD xhM8udnQ1LOwbTPhW+G7zgmi8ykH4tnXFOzcSTVWiLUT1/obswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG+/aCouSr+p0USxR6QLblXtPI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMzI4ZTZjMDAtZDg1Ny0z ZmRkLWJmMTEtZTVmZjY3NTQ4M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+ndIten7PfcNEdOusxxm5u6+7rAub5o1kDsh+iWn9HeZOmdQY5veYG KdgqgXkP8Lg1MszyYlt6SiTbWw/rRgNeJO3GfGyT4glx0+0pryYJTQXriqYqF5Xd PnRY/AvcYjfk/1TjK92bSbB1CWKUqF7QpGpxFcSI0/rmEzd3h41Rff5Eo1yHWlm6 m3+Mfg7+cLkR4rR4W2lCMJPGebm9vf26tFY93CRUcvD0q65BB2pGcwuI1PgxljRo 1aosxTp/NcIm65bwaQ1HCw94BbkEKcOMchJZz4g1jr3fBbWjNxw9mEQcD3/bbQvK JPLzeK+TvGBrfRPQi98U4A9jHom8s/s= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:03 2025 by rpki-client