$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa File: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (raw, json) Hash identifier: dzgZxAXRQBXkFfKQPuzlnC+UssMADXXvcOg4JrrTCbQ= Subject key identifier: 57:99:10:C6:09:06:93:59:CB:ED:F0:A2:96:FF:6B:A7:96:99:63:4A Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584B715CA75221390E46EE8D0180 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 6531 IP address blocks: 198.186.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a7:52:21:39:0e:46:ee:8d:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0160a5d0-0082-4057-afbe-0ac160c08562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:c6:c8:9c:44:49:d1:58:bc:07:fd:36:b9: 87:2f:b0:73:c6:78:d6:fb:d3:f9:95:3e:30:37:9d: 76:65:93:9d:c4:64:f7:f3:4a:37:2f:85:30:4b:ac: b9:ca:a6:34:93:1e:63:9f:13:a1:ab:11:5d:eb:e9: 2c:f1:53:86:72:b6:62:e0:31:bc:3c:e9:06:9c:70: 55:cc:be:98:e7:5c:37:3a:49:09:0e:77:dd:cd:a0: f0:4b:f3:40:20:cb:97:14:c4:20:ec:ad:b2:ea:37: b4:29:8a:14:c8:2c:bc:9f:3f:b1:bc:83:c4:76:6f: e4:5f:9c:a1:2f:c3:da:b1:a6:7f:5b:ca:a6:4e:ff: 94:c6:6d:80:8c:a6:08:b7:dc:d3:ff:6b:c8:65:61: 51:fe:d5:6f:d0:31:fc:c4:64:8c:60:04:67:1c:ed: 1c:8f:5c:52:06:06:a5:6b:65:ce:e9:65:46:87:85: 9b:aa:75:26:54:bf:f4:74:7c:f1:21:eb:5e:ab:ff: fd:dd:d6:4b:43:f0:82:18:19:d4:0f:6e:6f:73:76: 8b:3a:93:65:34:0f:d8:b1:c0:55:15:d5:e1:67:b1: 61:31:c3:f5:8e:f8:2b:9d:ea:52:1d:72:e9:f0:eb: 31:82:71:0c:18:5e:79:c2:73:28:45:36:23:18:74: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:99:10:C6:09:06:93:59:CB:ED:F0:A2:96:FF:6B:A7:96:99:63:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: 198.186.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7b:fd:7a:a0:a3:ce:ae:3a:65:7d:a0:a3:02:c1:da:5b:c3: 38:56:0b:56:fa:2c:68:2b:24:ba:a3:42:80:12:37:87:c1:fa: a1:e3:f5:15:85:0b:93:69:ed:68:a8:de:d5:fd:1e:e7:36:78: 28:89:40:16:06:23:85:7a:af:e2:43:ca:df:11:25:6c:1b:33: 96:52:c2:0c:96:78:4c:e5:d8:70:72:7b:41:bc:55:43:a6:5e: 78:bd:3f:96:7b:c3:48:b3:4c:e5:24:10:7c:9b:75:22:11:ce: 93:2a:33:69:df:93:00:60:fd:73:97:c2:cd:2f:9a:6b:03:6c: 50:2c:2f:a9:7f:a5:53:60:52:bb:1b:55:51:2a:9e:49:b7:40: 11:dd:9d:e8:6a:c4:f2:15:bc:3b:f9:a8:8f:9c:e3:bc:24:65: 6d:cf:bf:d4:16:0a:40:1d:5a:e2:73:81:f4:fc:5b:35:d1:3d: 11:62:83:59:38:43:86:07:8f:48:18:c5:92:b8:91:7b:be:a2: 34:99:61:b7:6a:b6:2a:a1:dd:9c:ca:2a:b8:8c:f7:9f:56:06: 05:eb:42:c9:63:47:08:32:f2:ee:90:dc:00:96:5b:44:93:c8: da:06:ce:24:45:b2:82:f5:9a:a4:7d:7e:1e:c8:0e:2d:54:02: 66:0d:d4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKdSITkORu6NAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDE2MGE1ZDAtMDA4Mi00MDU3LWFmYmUtMGFjMTYwYzA4NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7fGyJxESdFYvAf9NrmHL7BzxnjW+9P5lT4w N512ZZOdxGT380o3L4UwS6y5yqY0kx5jnxOhqxFd6+ks8VOGcrZi4DG8POkGnHBV zL6Y51w3OkkJDnfdzaDwS/NAIMuXFMQg7K2y6je0KYoUyCy8nz+xvIPEdm/kX5yh L8PasaZ/W8qmTv+Uxm2AjKYIt9zT/2vIZWFR/tVv0DH8xGSMYARnHO0cj1xSBgal a2XO6WVGh4WbqnUmVL/0dHzxIeteq//93dZLQ/CCGBnUD25vc3aLOpNlNA/YscBV FdXhZ7FhMcP1jvgrnepSHXLp8OsxgnEMGF55wnMoRTYjGHSCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeZEMYJBpNZy+3wopb/a6eWmWNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvODIwYmVjMzktZDM2Ny0z MGE2LWI1ZDktNjI1Y2NiZjVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ7/Xqgo86uOmV9oKMCwdpbwzhWC1b6LGgrJLqjQoASN4fB+qHj9RWF C5Np7Wio3tX9Huc2eCiJQBYGI4V6r+JDyt8RJWwbM5ZSwgyWeEzl2HBye0G8VUOm Xni9P5Z7w0izTOUkEHybdSIRzpMqM2nfkwBg/XOXws0vmmsDbFAsL6l/pVNgUrsb VVEqnkm3QBHdnehqxPIVvDv5qI+c47wkZW3Pv9QWCkAdWuJzgfT8WzXRPRFig1k4 Q4YHj0gYxZK4kXu+ojSZYbdqtiqh3ZzKKriM959WBgXrQsljRwgy8u6Q3ACWW0ST yNoGziRFsoL1mqR9fh7IDi1UAmYN1MM= -----END CERTIFICATE-----Generated at Wed Oct 22 00:38:44 2025 by rpki-client