$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa File: 8d05b34e-c249-392e-b896-84319c8e2955.roa (raw, json) Hash identifier: NqY787We0S/tkeFoLOhdpgG0gjfyDpmyoYVsxhVncnI= Subject key identifier: 56:16:AD:CC:2A:77:6A:81:25:A3:EE:79:25:35:02:95:11:B9:36:54 Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F4328584B51A457BB8C71CA51E644BB80 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa Signing time: Fri 26 Sep 2025 04:19:08 +0000 ROA not before: Fri 26 Sep 2025 04:19:08 +0000 ROA not after: Thu 25 Dec 2025 05:19:08 +0000 asID: 11878 IP address blocks: 198.44.128.0/19 maxlen: 32 198.54.128.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:a4:57:bb:8c:71:ca:51:e6:44:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Sep 26 04:19:08 2025 GMT Not After : Dec 25 05:19:08 2025 GMT Subject: CN=49ca4657-2da0-42ed-82c3-7297498e6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:72:27:8f:ef:93:25:15:58:c7:00:63:b4: f4:a8:a6:ff:25:fc:e1:10:65:52:d1:6c:ff:f9:da: 24:ec:8e:e0:cc:d0:78:0a:f3:ab:07:a7:71:0b:89: c8:b1:6c:04:57:79:53:82:ef:94:ac:2b:da:10:2e: a8:d8:25:c2:21:10:e7:cc:17:29:ba:73:a6:fc:a2: 4d:42:7c:8e:35:a1:0b:da:a2:9a:d0:d7:05:9d:05: 62:b3:de:b9:66:ec:02:40:a3:a3:bd:73:b3:88:13: 84:b4:71:fe:e1:eb:e0:c2:59:1b:02:19:9d:36:60: 78:58:af:3d:45:e0:2f:75:ce:43:15:b8:55:59:94: 03:0c:59:88:2e:c2:56:c0:34:00:6a:a7:60:10:a2: 31:8f:e0:f0:2d:00:30:c5:e7:27:96:f0:6a:63:94: b6:ec:da:c4:a8:58:7b:59:c6:63:e3:32:af:0b:49: ad:98:21:e2:03:ce:d2:4f:07:e1:ce:f5:97:52:82: 41:54:56:38:bf:cc:9b:fb:fe:21:8e:5d:47:53:49: a3:10:37:bf:ff:b4:bd:5c:33:f8:07:36:62:1b:5f: d7:8d:50:a5:93:81:05:01:1e:38:4d:7f:c6:c6:f1: ad:ae:f9:3c:31:f6:8a:89:6d:88:05:99:47:fc:cd: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:16:AD:CC:2A:77:6A:81:25:A3:EE:79:25:35:02:95:11:B9:36:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/8d05b34e-c249-392e-b896-84319c8e2955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv4: 198.44.128.0/19 198.54.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:4e:9c:3e:e4:e0:ec:85:12:46:68:46:d2:4f:d0:97:59: df:c9:89:1d:b4:62:6d:f8:5d:11:f8:08:b6:d8:53:1e:e3:9f: 37:95:28:93:e4:01:7b:3e:32:56:aa:1c:24:28:85:48:55:b1: 5a:f5:09:70:48:1b:3b:55:f8:6c:d8:1a:62:c2:1e:28:10:fb: 91:46:a5:12:b8:fa:90:01:60:0c:0d:c1:31:9e:3a:bd:cb:0f: b2:8b:9c:82:90:dc:2a:6a:4f:b2:b1:26:6c:64:f6:d5:da:52: f1:2e:3e:7b:df:9f:57:9b:88:49:97:83:17:de:88:79:fe:01: 91:1c:46:1b:9d:bd:41:6a:10:54:54:17:38:9a:e3:55:12:7a: a0:85:2e:69:3c:93:27:44:1d:8c:f2:16:6a:76:75:93:12:36: f2:df:13:5e:75:db:fd:3b:fd:89:71:1c:9b:27:90:e6:5d:62: 76:3e:cd:9d:3e:b2:e6:e2:3c:54:27:63:4e:88:7e:48:19:64: b6:f6:70:79:d3:e5:df:ce:2f:b0:79:c8:8a:fc:ef:0e:b0:ed: 89:02:6d:3c:4c:63:28:e0:d4:27:cc:94:2e:0c:17:fe:fa:f5: 98:64:67:87:0c:f6:df:1a:84:ab:d1:5c:39:e9:ba:53:88:f2: d8:9a:69:12 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtRpFe7jHHKUeZEu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI1MDkyNjA0MTkwOFoXDTI1MTIyNTA1MTkwOFowLzEtMCsGA1UEAxMk NDljYTQ2NTctMmRhMC00MmVkLTgyYzMtNzI5NzQ5OGU2NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDdyJ4/vkyUVWMcAY7T0qKb/JfzhEGVS0Wz/ +dok7I7gzNB4CvOrB6dxC4nIsWwEV3lTgu+UrCvaEC6o2CXCIRDnzBcpunOm/KJN QnyONaEL2qKa0NcFnQVis965ZuwCQKOjvXOziBOEtHH+4evgwlkbAhmdNmB4WK89 ReAvdc5DFbhVWZQDDFmILsJWwDQAaqdgEKIxj+DwLQAwxecnlvBqY5S27NrEqFh7 WcZj4zKvC0mtmCHiA87STwfhzvWXUoJBVFY4v8yb+/4hjl1HU0mjEDe//7S9XDP4 BzZiG1/XjVClk4EFAR44TX/GxvGtrvk8MfaKiW2IBZlH/M1jrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFYWrcwqd2qBJaPueSU1ApURuTZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvOGQwNWIzNGUtYzI0OS0z OTJlLWI4OTYtODQzMTljOGUyOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFxiyAAwQD xjaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAApiTpw+5ODshRJGaEbST9CXWd/JiR20Ym34XRH4CLbYUx7j nzeVKJPkAXs+MlaqHCQohUhVsVr1CXBIGztV+GzYGmLCHigQ+5FGpRK4+pABYAwN wTGeOr3LD7KLnIKQ3CpqT7KxJmxk9tXaUvEuPnvfn1ebiEmXgxfeiHn+AZEcRhud vUFqEFRUFzia41USeqCFLmk8kydEHYzyFmp2dZMSNvLfE1512/07/YlxHJsnkOZd YnY+zZ0+subiPFQnY06IfkgZZLb2cHnT5d/OL7B5yIr87w6w7YkCbTxMYyjg1CfM lC4MF/769ZhkZ4cM9t8ahKvRXDnpulOI8tiaaRI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:50 2025 by rpki-client