$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa File: 8f64503e-a39c-366b-89f7-6527525b2675.roa (raw, json) Hash identifier: NzgjIqSEfMOvJHXHmhQi1Nk8P2mjxJAiOlKhxnL+6TQ= Subject key identifier: 59:FA:42:29:D4:02:A6:F9:22:3D:F8:E7:78:0F:F8:16:94:31:E6:B8 Certificate issuer: /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5 Certificate serial: 010D0C9F4328584B583C87C82B2217A218692180 Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 399672 IP address blocks: 169.197.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:87:c8:2b:22:17:a2:18:69:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c81fb735-c1ab-4b80-8c9e-062297a60c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:7d:46:ff:cd:31:d0:79:ac:63:aa:43:c5: 7d:80:e3:8a:3f:47:66:00:17:fa:bf:5c:fd:02:ae: 19:cf:5f:87:ec:72:4d:d9:bd:5e:1f:d9:a8:c9:37: b6:81:8c:1b:c0:ca:9d:91:eb:68:14:69:5e:f4:0c: cc:1e:8c:94:68:5f:7c:c6:7b:40:a5:56:0b:bf:f9: f5:c2:d7:de:fd:e5:5a:33:a0:e4:4b:47:6b:82:47: db:bc:a3:2f:49:7d:84:11:c5:bb:4e:90:2a:89:df: 86:2b:f5:7b:de:6b:42:61:ea:c9:d8:7c:9c:ff:17: 18:1c:c7:c2:76:46:a2:7c:b1:f5:4b:ff:32:eb:d2: 8d:da:85:ae:b2:21:94:09:93:05:7c:60:d9:fe:46: 1b:ba:a1:e6:d0:2f:04:09:0c:00:de:88:cb:bf:7a: 34:bb:53:af:8f:58:d9:30:4a:9a:fd:3f:6f:f1:b4: 2d:80:ce:c9:0c:16:6e:b9:f1:dc:e8:ed:29:3a:62: 97:7f:70:52:c3:0b:f8:dc:ff:35:d4:08:72:86:b6: d7:de:d4:b7:f0:1e:7f:10:b8:47:6f:1a:81:2e:9c: 72:20:f1:ea:4f:14:e7:44:63:17:34:c5:68:02:33: dd:28:fe:35:13:53:f2:ce:ca:e3:30:94:0a:b8:7f: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FA:42:29:D4:02:A6:F9:22:3D:F8:E7:78:0F:F8:16:94:31:E6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl X509v3 Authority Key Identifier: keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer sbgp-ipAddrBlock: critical IPv4: 169.197.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6b:fe:3c:a9:8f:c1:69:b0:e8:ac:3e:5d:53:39:8d:36:1c: 44:6d:fb:35:5d:fa:9c:71:6d:9a:42:f5:35:b3:ff:92:c4:ca: df:b7:25:78:6b:47:29:39:78:4b:7e:e0:41:db:f7:80:6e:3e: 45:f1:cc:16:7d:5c:99:89:59:8c:a6:08:30:13:7e:79:8f:bb: cc:1f:78:e8:dc:39:a9:65:b8:11:6e:70:e6:db:ee:5a:ba:b8: 01:5b:bc:c2:a7:6f:32:46:b6:4d:8e:f6:fc:80:f7:c9:db:6f: 93:cf:69:09:de:7a:a2:bf:5a:87:25:6c:94:ad:72:93:dc:2a: 68:4c:d9:c2:79:5f:bb:a0:4f:90:b0:43:8f:9c:67:d7:fe:d0: 62:11:61:1a:4f:2f:5c:10:3b:58:8d:fa:2c:f1:68:da:c5:fb: 89:37:e3:51:58:f8:52:a3:64:70:95:c4:e1:4e:cf:34:2c:b3: 80:36:c7:67:13:10:93:c4:97:43:51:08:12:7d:82:a9:97:3f: b0:eb:65:f2:33:8b:45:5c:1e:2c:5c:e6:e3:58:8f:48:a7:5d: 1c:2d:09:ff:68:9d:bd:4e:2a:73:97:8b:7b:5a:24:31:39:3c: 40:9e:ca:77:dd:c5:bc:04:c6:b3:64:29:ec:4a:96:23:a4:2a: 7a:e9:76:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIfIKyIXohhpIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAyM2ZmYWYtYjJiMi00MzgyLTg0OWMtMmJjNWJmZDFh M2M1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzgxZmI3MzUtYzFhYi00YjgwLThjOWUtMDYyMjk3YTYwYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ19Rv/NMdB5rGOqQ8V9gOOKP0dmABf6v1z9 Aq4Zz1+H7HJN2b1eH9moyTe2gYwbwMqdketoFGle9AzMHoyUaF98xntApVYLv/n1 wtfe/eVaM6DkS0drgkfbvKMvSX2EEcW7TpAqid+GK/V73mtCYerJ2Hyc/xcYHMfC dkaifLH1S/8y69KN2oWusiGUCZMFfGDZ/kYbuqHm0C8ECQwA3ojLv3o0u1Ovj1jZ MEqa/T9v8bQtgM7JDBZuufHc6O0pOmKXf3BSwwv43P811AhyhrbX3tS38B5/ELhH bxqBLpxyIPHqTxTnRGMXNMVoAjPdKP41E1PyzsrjMJQKuH8toQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn6QinUAqb5Ij3453gP+BaUMea4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMDIz ZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1YmZkMWEzYzUvOGY2NDUwM2UtYTM5Yy0z NjZiLTg5ZjctNjUyNzUyNWIyNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzAyM2ZmYWYtYjJiMi00MzgyLTg0 OWMtMmJjNWJmZDFhM2M1L2MwMjNmZmFmLWIyYjItNDM4Mi04NDljLTJiYzViZmQx YTNjNS5jcmwwHwYDVR0jBBgwFoAUnjgJXihKxz4kSU7php5hSkIP7cowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMDIzZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1 YmZkMWEzYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhr/jypj8FpsOisPl1TOY02HERt+zVd+pxxbZpC9TWz/5LEyt+3JXhr Ryk5eEt+4EHb94BuPkXxzBZ9XJmJWYymCDATfnmPu8wfeOjcOalluBFucObb7lq6 uAFbvMKnbzJGtk2O9vyA98nbb5PPaQneeqK/WoclbJStcpPcKmhM2cJ5X7ugT5Cw Q4+cZ9f+0GIRYRpPL1wQO1iN+izxaNrF+4k341FY+FKjZHCVxOFOzzQss4A2x2cT EJPEl0NRCBJ9gqmXP7DrZfIzi0VcHixc5uNYj0inXRwtCf9onb1OKnOXi3taJDE5 PECeynfdxbwExrNkKexKliOkKnrpdiA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:11 2025 by rpki-client