$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa File: 803f7ede-7615-343b-89d8-ee66fd03b3a9.roa (raw, json) Hash identifier: mAbzmo8gKqPF4pDEKaVFZoL5mS7KpFpxRKqZ0qVq224= Subject key identifier: 81:A3:39:C3:AE:68:24:EB:ED:7D:18:53:B9:E0:90:3F:2F:FC:03:A2 Certificate issuer: /CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Certificate serial: 010D0C9F4328584B821CD35EA6FFC30E310A8EC0 Authority key identifier: 97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 23389 IP address blocks: 198.212.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d3:5e:a6:ff:c3:0e:31:0a:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0d865718-b876-4f04-81d8-fa3aaf8fd54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:e0:b9:16:0c:08:7a:e2:83:72:75:cd:17: 4d:55:6a:25:6f:a1:b4:36:11:b1:30:78:1c:ea:48: 30:54:d4:80:46:30:7d:dc:ac:1c:c0:2b:b1:f5:73: a2:71:06:90:53:84:fe:16:63:57:6c:a0:6b:ee:ee: 96:ae:65:dd:54:33:ec:f9:53:21:ed:f5:fb:68:35: 7d:8c:0d:d6:01:d7:cc:81:d1:47:8e:8b:dd:f6:30: b2:5e:a4:34:72:91:1e:c0:d9:89:25:c1:84:f3:65: 45:55:79:dd:94:bc:db:70:06:92:e2:27:1d:d6:80: 74:56:eb:2a:04:e4:38:c3:9d:71:24:53:b3:bc:77: 8a:b0:20:0b:f6:f5:42:e1:3a:47:42:84:bc:4c:c7: 1b:6a:00:2e:28:23:a6:81:bc:d6:d0:27:da:34:2b: 17:22:d2:74:78:92:56:f1:a1:0a:05:80:e1:c1:7e: b3:25:64:0c:12:5c:9a:40:bc:fe:d0:e2:87:9c:eb: d0:73:50:09:5f:14:6a:42:9f:92:16:b8:b7:3f:8d: fb:80:65:1a:f8:43:1e:a8:2e:e9:2b:eb:29:12:83: 9b:8f:a9:b1:38:14:78:f9:95:fc:de:77:0b:47:78: c2:36:f4:91:3a:b5:5d:80:c6:fd:67:33:2b:af:dd: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:39:C3:AE:68:24:EB:ED:7D:18:53:B9:E0:90:3F:2F:FC:03:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl X509v3 Authority Key Identifier: keyid:97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer sbgp-ipAddrBlock: critical IPv4: 198.212.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:84:7e:f5:d8:8b:8f:e1:23:16:bf:93:99:c6:11:b1:f2:a7: f3:ca:50:9e:85:73:66:8e:10:a1:7f:ad:a5:10:4f:24:b4:71: c9:6d:39:d2:9f:ed:a2:e6:f2:85:aa:24:f8:9e:4c:6d:c5:9e: 55:d3:13:d7:09:9f:a8:aa:89:bc:50:1b:22:8b:ca:7e:d3:35: 69:e4:8e:6b:5a:16:d8:ec:04:82:bd:6e:eb:92:2f:53:c1:fd: 0d:a3:83:08:cb:49:a1:67:d2:8f:fc:96:a1:40:3a:30:8b:fb: 8b:e3:44:0f:c8:ed:95:c9:6d:e3:cb:73:59:eb:11:d8:8d:1c: 7a:71:78:5e:ef:d1:3b:2b:56:78:58:6b:b5:50:c8:a1:12:e5: b9:f4:04:a1:2c:33:6e:6e:d4:dd:44:05:de:a4:28:91:80:ea: cb:d8:9c:b7:82:94:3c:66:21:5a:c3:84:74:a8:62:b9:84:74: 01:23:65:f1:ca:71:6a:0b:e5:ce:d5:2e:89:0b:e4:d1:d9:eb: 33:7e:ba:51:c4:e1:c4:d6:39:48:fc:79:0d:5d:09:55:7e:c3: 1b:6f:da:f1:5d:3a:c1:47:3a:7d:23:b8:53:94:7a:48:b6:6a: ec:54:ea:4f:58:30:5c:cb:56:0f:a2:9e:24:38:9e:80:ac:d9: 50:43:ca:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNNepv/DDjEKjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc3MDc5MzEtOTc2NC00OGViLTlkYmQtYTQwZWY0MTY1 YzFiMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGQ4NjU3MTgtYjg3Ni00ZjA0LTgxZDgtZmEzYWFmOGZkNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvbguRYMCHrig3J1zRdNVWolb6G0NhGxMHgc 6kgwVNSARjB93KwcwCux9XOicQaQU4T+FmNXbKBr7u6WrmXdVDPs+VMh7fX7aDV9 jA3WAdfMgdFHjovd9jCyXqQ0cpEewNmJJcGE82VFVXndlLzbcAaS4icd1oB0Vusq BOQ4w51xJFOzvHeKsCAL9vVC4TpHQoS8TMcbagAuKCOmgbzW0CfaNCsXItJ0eJJW 8aEKBYDhwX6zJWQMElyaQLz+0OKHnOvQc1AJXxRqQp+SFri3P437gGUa+EMeqC7p K+spEoObj6mxOBR4+ZX83ncLR3jCNvSROrVdgMb9ZzMrr92zgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGjOcOuaCTr7X0YU7ngkD8v/AOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcw NzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBlZjQxNjVjMWIvODAzZjdlZGUtNzYxNS0z NDNiLTg5ZDgtZWU2NmZkMDNiM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjc3MDc5MzEtOTc2NC00OGViLTlk YmQtYTQwZWY0MTY1YzFiL2I3NzA3OTMxLTk3NjQtNDhlYi05ZGJkLWE0MGVmNDE2 NWMxYi5jcmwwHwYDVR0jBBgwFoAUl+D10E3FageFpuVgYZy8Q9ypORUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcwNzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBl ZjQxNjVjMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxtSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGEfvXYi4/hIxa/k5nGEbHyp/PKUJ6Fc2aOEKF/raUQTyS0ccltOdKf 7aLm8oWqJPieTG3FnlXTE9cJn6iqibxQGyKLyn7TNWnkjmtaFtjsBIK9buuSL1PB /Q2jgwjLSaFn0o/8lqFAOjCL+4vjRA/I7ZXJbePLc1nrEdiNHHpxeF7v0TsrVnhY a7VQyKES5bn0BKEsM25u1N1EBd6kKJGA6svYnLeClDxmIVrDhHSoYrmEdAEjZfHK cWoL5c7VLokL5NHZ6zN+ulHE4cTWOUj8eQ1dCVV+wxtv2vFdOsFHOn0juFOUeki2 auxU6k9YMFzLVg+iniQ4noCs2VBDyjo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:44 2025 by rpki-client