$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa File: d5f143af-ba0a-3780-a98d-6780498dc1dd.roa (raw, json) Hash identifier: PIAeCCJmrRbz0OCgDdRgVDCgBGSyVIcigI/8fmsDkzM= Subject key identifier: B6:4B:1B:30:4E:35:BD:22:E4:7C:5D:CE:AE:29:1A:91:C1:20:85:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A3DCE662B6CFE1B46180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397243 IP address blocks: 198.133.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a3:dc:e6:62:b6:cf:e1:b4:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=e2306a41-a7ee-4ff8-a4d9-3171b5c4e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:95:ce:5a:5a:91:9e:9c:73:22:9c:d5:e2: 75:7b:c9:a7:d6:a6:91:bf:38:32:82:42:82:f9:72: 83:15:57:fd:46:80:03:23:f3:62:a2:bd:34:89:7b: d2:c5:5e:cc:ba:c2:b1:19:d1:ad:b6:90:72:19:bd: 53:2a:af:d9:05:50:ff:2c:40:78:ae:25:21:a5:33: 47:52:84:91:ce:f7:cd:ea:ab:8d:0e:42:8d:e2:ad: b0:ae:4e:a7:a8:ff:d7:b4:07:16:98:68:2d:38:c0: 8c:2c:b7:67:53:69:ff:62:eb:11:7c:d4:f1:fd:c0: 17:11:ea:a6:ce:94:88:c8:9d:0a:0a:90:d2:98:c4: 89:a0:8d:2f:57:f4:1f:7d:94:97:9c:4b:0f:f1:3f: 6d:51:38:b5:6b:e9:fa:4e:56:11:a0:0a:23:4b:0c: ff:9c:d5:4a:c1:09:89:ec:37:3b:e6:32:69:25:0a: fe:fd:3e:61:61:f9:6b:7d:51:6b:f3:50:86:d9:c0: 42:62:c7:31:50:96:42:01:0f:b1:2c:37:c6:f1:3e: a5:82:bd:7d:39:0a:ee:e3:ad:62:63:71:44:e4:b6: 0b:6c:61:57:e6:e8:0c:50:9c:4e:9e:06:63:ae:cd: dc:c4:c5:39:9c:b5:04:b1:cc:01:e2:47:77:e6:d9: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:1B:30:4E:35:BD:22:E4:7C:5D:CE:AE:29:1A:91:C1:20:85:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 198.133.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:73:86:05:81:60:d8:92:ab:e4:c2:59:8a:9c:dc:7c:c3:e3: 1c:e8:41:44:84:6b:33:11:5a:77:f4:34:cc:08:68:c4:04:45: ce:05:2a:39:9a:4e:53:bb:81:70:17:01:8a:34:0d:0a:4a:24: 16:01:dd:6d:86:a0:d7:29:f4:dd:b9:88:df:05:d3:96:12:aa: 3a:1d:05:4c:4f:33:05:7e:31:2c:66:e1:ad:39:28:e2:00:3c: 06:48:c4:ba:f4:54:7a:00:73:12:41:32:bc:75:c0:cb:0f:07: 47:e7:2a:52:e7:96:9b:ba:ff:d6:e3:ed:96:63:c1:7f:58:34: 2e:3d:0f:1e:ba:3c:e2:33:97:dc:3b:36:b2:a0:a0:7d:a5:d4: ca:44:75:43:de:33:3e:20:4f:7f:a1:88:f5:52:e9:a9:1a:13: 60:25:09:a7:60:6e:bf:ba:94:59:f5:1f:d5:92:af:0a:db:cc: c6:4d:87:b9:5a:9c:53:7f:f1:72:d4:fa:75:6f:c7:67:a2:92: 57:52:0e:d2:79:f0:69:22:40:ad:6b:6b:e7:d2:95:d7:ed:bd: a7:23:d2:64:3a:7c:ca:18:9f:25:df:73:b5:56:63:b6:d4:86: e1:bc:e4:3a:4e:88:a7:54:d2:0a:85:82:b2:2d:f3:2f:99:6d: 9d:b5:11:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaPc5mK2z+G0YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTIzMDZhNDEtYTdlZS00ZmY4LWE0ZDktMzE3MWI1YzRlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzOVzlpakZ6ccyKc1eJ1e8mn1qaRvzgygkKC +XKDFVf9RoADI/Nior00iXvSxV7MusKxGdGttpByGb1TKq/ZBVD/LEB4riUhpTNH UoSRzvfN6quNDkKN4q2wrk6nqP/XtAcWmGgtOMCMLLdnU2n/YusRfNTx/cAXEeqm zpSIyJ0KCpDSmMSJoI0vV/QffZSXnEsP8T9tUTi1a+n6TlYRoAojSwz/nNVKwQmJ 7Dc75jJpJQr+/T5hYflrfVFr81CG2cBCYscxUJZCAQ+xLDfG8T6lgr19OQru461i Y3FE5LYLbGFX5ugMUJxOngZjrs3cxMU5nLUEscwB4kd35tkF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZLGzBONb0i5Hxdzq4pGpHBIIX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDVmMTQzYWYtYmEwYS0z NzgwLWE5OGQtNjc4MDQ5OGRjMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1zhgWBYNiSq+TCWYqc3HzD4xzoQUSEazMRWnf0NMwIaMQERc4FKjma TlO7gXAXAYo0DQpKJBYB3W2GoNcp9N25iN8F05YSqjodBUxPMwV+MSxm4a05KOIA PAZIxLr0VHoAcxJBMrx1wMsPB0fnKlLnlpu6/9bj7ZZjwX9YNC49Dx66POIzl9w7 NrKgoH2l1MpEdUPeMz4gT3+hiPVS6akaE2AlCadgbr+6lFn1H9WSrwrbzMZNh7la nFN/8XLU+nVvx2eikldSDtJ58GkiQK1ra+fSldftvacj0mQ6fMoYnyXfc7VWY7bU huG85DpOiKdU0gqFgrIt8y+ZbZ21EbU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:02 2025 by rpki-client