$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json) Hash identifier: 09EHjqdC7KCqY047vTqZK/aQOEepyMAonJIdWv/3SjQ= Subject key identifier: 0E:F8:E9:BC:F4:2B:99:C5:70:92:12:3A:0C:CF:20:94:D4:B6:0C:5D Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584AF0F149F9331D3951F1D5F800 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 30607 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.12.0/24 maxlen: 24 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:49:f9:33:1d:39:51:f1:d5:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=24c963d3-b1dd-4318-b252-fa5d689c1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:03:ba:0c:59:2e:33:e5:56:94:98:36:ef: b1:f2:04:ee:65:07:05:d5:e5:44:83:27:79:78:09: 6d:cb:cb:2a:a9:71:db:77:04:f2:64:a7:15:83:88: be:09:89:50:5c:1b:2c:27:7c:20:a6:09:8c:e3:cf: c4:44:1a:6a:eb:d7:db:ce:44:f3:ed:39:cb:71:2b: ab:88:e7:70:68:6a:ee:79:85:c0:58:73:70:6f:11: 0d:54:74:3e:78:25:06:cb:34:71:09:b8:d8:0a:d6: 56:a1:a9:1d:dc:2a:1a:95:42:56:62:9f:e6:6f:0f: d3:ca:69:ea:82:f5:4f:c1:e2:94:7d:33:3a:86:26: 25:5a:08:49:26:57:11:98:f4:eb:f3:ae:92:13:58: 55:7a:38:38:55:81:aa:a7:c8:8a:30:1b:54:73:0a: 89:b7:e0:10:20:d2:68:42:d2:25:47:e7:cf:98:f7: 5a:00:6d:75:67:f4:b5:40:eb:dc:d8:1d:b4:61:00: 0f:07:96:b7:61:21:75:4a:cb:d8:20:f0:7b:6f:9d: 2b:3d:50:92:d8:db:03:90:88:94:98:db:3f:5b:bc: c9:9b:c6:1a:04:3c:89:f7:32:47:55:30:fe:1d:8b: fb:d5:bd:22:b8:3c:5a:13:06:cd:10:27:83:92:ca: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:E9:BC:F4:2B:99:C5:70:92:12:3A:0C:CF:20:94:D4:B6:0C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3d:61:87:a9:cc:4c:57:d0:fd:7b:da:00:df:62:ad:5c:55: c9:ee:32:91:d8:c8:ca:40:e3:0b:1b:ba:1b:9c:cb:c9:11:c4: 24:b7:de:a7:ba:a4:53:be:84:aa:79:2c:74:ba:85:a4:41:02: 74:07:bc:51:2c:5c:71:44:4b:19:49:67:9f:7d:53:6a:f5:bd: 67:56:c1:d6:ee:ee:d4:29:ad:9b:3f:ad:6a:19:a7:b2:07:7e: 08:1a:72:1c:71:d9:b6:af:ee:ad:d9:7f:e6:dd:75:70:09:79: 4f:82:40:ea:7d:21:d9:b3:3b:51:f9:c6:9e:22:18:e1:a6:1a: 3d:96:d7:c5:b7:32:bc:2d:aa:17:1c:93:97:02:10:2e:fb:f3: b1:69:d3:47:38:ae:42:1b:c9:19:8c:fc:e3:8c:e2:0e:02:e7: 8a:f3:ac:b9:dd:a0:bc:eb:ce:d6:bd:b5:f2:af:bc:35:16:f7: 20:2c:96:eb:86:c5:86:df:1d:0d:74:a8:bf:ea:12:20:2f:d7: 51:7c:2c:50:cb:ad:a6:c0:2c:b4:82:fd:65:b9:77:79:c3:1f: 22:c4:0b:2c:e7:32:85:3a:ef:8d:44:ee:04:12:30:a0:d7:2b: 70:2f:46:42:f9:b8:53:9d:32:d7:e8:fa:cf:25:af:04:08:88: 23:c8:68:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Un5Mx05UfHV+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MjRjOTYzZDMtYjFkZC00MzE4LWIyNTItZmE1ZDY4OWMxMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvIDugxZLjPlVpSYNu+x8gTuZQcF1eVEgyd5 eAlty8sqqXHbdwTyZKcVg4i+CYlQXBssJ3wgpgmM48/ERBpq69fbzkTz7TnLcSur iOdwaGrueYXAWHNwbxENVHQ+eCUGyzRxCbjYCtZWoakd3CoalUJWYp/mbw/Tymnq gvVPweKUfTM6hiYlWghJJlcRmPTr866SE1hVejg4VYGqp8iKMBtUcwqJt+AQINJo QtIlR+fPmPdaAG11Z/S1QOvc2B20YQAPB5a3YSF1SsvYIPB7b50rPVCS2NsDkIiU mNs/W7zJm8YaBDyJ9zJHVTD+HYv71b0iuDxaEwbNECeDksoLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA746bz0K5nFcJISOgzPIJTUtgxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZjBhZWU1ZDEtZDQ0Yy0z NTY2LWI3MWYtMDVjYTgyZWZhYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs9YYepzExX0P172gDfYq1cVcnuMpHYyMpA4wsbuhucy8kRxCS33qe6 pFO+hKp5LHS6haRBAnQHvFEsXHFESxlJZ599U2r1vWdWwdbu7tQprZs/rWoZp7IH fggachxx2bav7q3Zf+bddXAJeU+CQOp9IdmzO1H5xp4iGOGmGj2W18W3Mrwtqhcc k5cCEC7787Fp00c4rkIbyRmM/OOM4g4C54rzrLndoLzrzta9tfKvvDUW9yAsluuG xYbfHQ10qL/qEiAv11F8LFDLrabALLSC/WW5d3nDHyLECyznMoU6741E7gQSMKDX K3AvRkL5uFOdMtfo+s8lrwQIiCPIaFY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:23 2025 by rpki-client