$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa File: 455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa (raw, json) Hash identifier: e7yfEy3y5d68Y9aXX3NfrSRutwu2id544Zv+xW2s2cg= Subject key identifier: D5:89:4B:D5:D1:9B:DA:12:89:CE:C0:31:D8:C3:D5:59:68:01:52:C2 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B4081AAAC961103BC1B12A080 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 398317 IP address blocks: 198.52.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:aa:ac:96:11:03:bc:1b:12:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=6f2aab27-8cd6-43f0-9b2c-e7cec1fda81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:0b:cd:6c:6b:e9:96:48:b8:ac:83:f3:1d: ff:5c:c4:15:62:d9:f7:72:f3:a8:3e:0e:46:a1:76: e7:c0:4d:17:f8:06:a4:9a:fd:37:81:b4:8a:97:ee: a6:85:3b:87:ed:71:dd:cf:b5:c8:2d:8b:82:2d:d8: 4b:d8:3b:60:63:0d:8e:29:3a:1e:06:85:ee:a7:02: c8:91:20:ba:89:b8:82:a4:85:7e:38:83:b1:0d:ef: 8d:cb:b1:5b:6e:19:a2:7a:1b:4d:39:d3:34:f2:8e: 2c:0b:09:1e:c6:93:cb:dd:89:00:96:a2:4e:60:a9: f1:bb:fc:f7:b4:9e:a2:35:1a:80:3a:17:5c:b6:37: f7:f1:4a:4e:31:38:b0:d7:57:2b:fe:3b:8e:9d:2c: ee:82:fb:6b:95:e0:4f:bc:cd:a1:47:af:75:47:c3: 75:f0:98:c0:3c:e9:c3:fb:aa:e6:8c:1d:9e:19:1d: e0:60:3a:27:d7:0d:ba:a1:8b:76:f6:4e:d5:2c:66: 9d:29:5e:34:8e:2a:cb:c4:15:56:8f:84:25:7c:a5: 3a:1f:e5:8d:8a:b4:11:7e:6e:71:bb:06:1b:db:ed: 1e:16:3b:f0:c3:2c:9f:2f:75:ca:79:18:a3:3a:c2: 70:3c:2e:07:5b:4b:1e:d6:c8:6f:46:8e:93:65:4a: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:4B:D5:D1:9B:DA:12:89:CE:C0:31:D8:C3:D5:59:68:01:52:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 198.52.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cc:4f:79:8f:2b:8b:be:4c:00:33:d4:19:2a:bf:55:1f:f6: 87:84:87:7f:8d:14:81:e1:b3:0f:09:0c:f5:9f:8c:f7:23:2e: 00:14:f3:33:ae:2f:1f:0e:e0:28:e5:c1:56:a8:09:32:0f:30: 01:83:f0:12:1b:73:f9:a3:fd:a1:8b:9e:f3:17:81:33:00:4a: a4:52:41:f1:17:a7:e7:b5:b6:39:17:ed:27:a6:5e:72:36:cd: 16:9d:75:9b:a7:d0:d8:60:f8:a9:d4:f1:da:be:1d:34:fb:31: db:50:31:51:5c:a6:eb:4a:f6:e2:51:b2:27:92:e0:ff:8c:eb: 3b:38:c2:90:9f:dc:39:d1:8e:87:88:32:cd:80:4c:63:1f:02: 3d:c3:20:73:07:39:6d:93:d3:c6:f8:33:00:fa:9d:3d:04:91: ba:7a:9b:f2:98:82:5f:64:51:ed:57:8c:8f:a7:f6:a4:5c:6d: 54:20:9e:33:2c:4f:52:3b:41:9f:02:72:d7:b0:54:38:b0:1e: 24:1d:b1:83:a5:95:a9:df:ac:ab:08:0c:67:25:47:49:d5:29: 14:53:39:bb:a9:bf:a0:44:bf:3e:2b:35:a5:5f:96:58:a4:8c: 0a:8d:76:87:5c:63:ff:93:08:4a:af:ca:79:0e:97:d3:40:d1: 5f:ea:ac:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaqslhEDvBsSoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NmYyYWFiMjctOGNkNi00M2YwLTliMmMtZTdjZWMxZmRhODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwoLzWxr6ZZIuKyD8x3/XMQVYtn3cvOoPg5G oXbnwE0X+Aakmv03gbSKl+6mhTuH7XHdz7XILYuCLdhL2DtgYw2OKToeBoXupwLI kSC6ibiCpIV+OIOxDe+Ny7FbbhmiehtNOdM08o4sCwkexpPL3YkAlqJOYKnxu/z3 tJ6iNRqAOhdctjf38UpOMTiw11cr/juOnSzugvtrleBPvM2hR691R8N18JjAPOnD +6rmjB2eGR3gYDon1w26oYt29k7VLGadKV40jirLxBVWj4QlfKU6H+WNirQRfm5x uwYb2+0eFjvwwyyfL3XKeRijOsJwPC4HW0se1shvRo6TZUrlWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWJS9XRm9oSic7AMdjD1VloAVLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDU1ZDFlYzctZjViOS0z ZGQwLWE2ZmUtZjQ5NGI4NjFhZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7MT3mPK4u+TAAz1Bkqv1Uf9oeEh3+NFIHhsw8JDPWfjPcjLgAU8zOu Lx8O4CjlwVaoCTIPMAGD8BIbc/mj/aGLnvMXgTMASqRSQfEXp+e1tjkX7SemXnI2 zRaddZun0Nhg+KnU8dq+HTT7MdtQMVFcputK9uJRsieS4P+M6zs4wpCf3DnRjoeI Ms2ATGMfAj3DIHMHOW2T08b4MwD6nT0Ekbp6m/KYgl9kUe1XjI+n9qRcbVQgnjMs T1I7QZ8CctewVDiwHiQdsYOllanfrKsIDGclR0nVKRRTObupv6BEvz4rNaVfllik jAqNdodcY/+TCEqvynkOl9NA0V/qrLY= -----END CERTIFICATE-----Generated at Tue Oct 21 05:28:51 2025 by rpki-client