$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa File: 5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json) Hash identifier: Q6teKNtU+IE2c9D5IOaobk7iDtZBMP86NCBqiu8tyRU= Subject key identifier: 2E:00:64:02:A6:10:61:81:1F:BA:E8:DD:55:7C:D5:C5:5D:BC:F2:7E Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBEDBBD338C13ECED3D80 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 198.84.128.0/17 maxlen: 17 198.84.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:db:bd:33:8c:13:ec:ed:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=fef32917-47d8-47c7-baf0-b7c40bb2b495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:10:f8:bc:4d:c8:5f:70:95:1d:42:ba:67: 4e:59:ee:4b:85:b6:f4:27:ff:44:58:4d:fc:cd:04: 40:31:d0:7b:11:74:ba:a2:e6:b4:97:a6:5c:c7:aa: d7:74:24:7e:29:41:c6:8e:70:5a:9b:4b:3a:e4:57: b2:81:12:50:c7:ee:38:79:cf:26:59:02:1c:e5:c0: d7:c2:6e:d7:27:23:d7:5d:fd:25:45:d0:80:ce:1b: bd:fd:d2:28:7a:82:79:03:79:62:75:96:a8:30:c0: 27:3f:e8:ca:c0:3d:79:9a:81:2d:aa:3d:ba:4a:2b: 58:92:ee:49:03:44:38:e9:3b:1b:12:66:aa:8d:ff: d2:fb:75:d1:e1:4c:08:fa:a7:67:2e:a2:9c:55:2e: b4:85:11:18:b4:fc:10:57:b1:ac:a6:27:7f:8c:d2: 20:8d:1d:fd:8f:d4:a4:e2:9f:39:19:78:8d:c6:c4: 08:e7:34:19:63:4f:1f:c2:b0:2a:20:1b:d9:f8:5a: 95:f7:4a:86:0e:ba:71:3c:50:34:9e:50:0f:d3:8c: c2:b2:79:38:c7:ca:18:d5:e4:50:3f:9e:cc:3f:62: 79:ea:d4:1d:d7:f6:58:de:63:01:a8:6f:5a:2d:27: ec:5b:d8:e9:40:18:cb:72:07:7d:4c:87:5d:04:8e: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:64:02:A6:10:61:81:1F:BA:E8:DD:55:7C:D5:C5:5D:BC:F2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.84.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:07:a8:f8:1b:e7:b5:b3:b4:f3:54:fb:cf:7f:02:3f:04:5a: 4b:60:a9:ce:aa:97:a8:5e:13:2d:9c:c2:39:c8:f9:9a:32:2d: 12:ff:a4:5e:4c:f2:aa:ba:04:5a:d4:aa:59:52:6e:f7:a9:c5: 1e:33:0f:b4:1f:72:cf:a2:0b:45:51:0a:90:e9:ba:23:96:e6: 50:1b:4c:6f:84:77:bf:50:f1:21:bc:b5:73:a2:b0:cc:9f:ee: 1d:01:51:1a:9e:90:0b:36:23:33:73:78:68:b5:c3:1f:0d:48: 42:24:14:a3:87:e1:1c:d0:7b:35:53:41:13:8d:ef:34:44:83: 85:56:db:fc:d9:e2:ce:db:3a:27:91:d8:03:40:ea:e3:0d:3e: dd:fb:f0:60:d6:cd:75:ee:b2:ad:43:a8:65:09:2d:c3:45:ac: 46:10:85:09:f2:fd:78:5c:47:93:15:56:80:44:be:24:15:59: 40:db:97:54:42:38:85:e9:d6:4a:8e:af:fc:23:c1:d9:27:1b: 3e:a0:c8:0a:03:1c:62:36:e1:95:14:26:d3:8d:a7:04:59:ad: 10:8a:23:bf:31:10:67:bc:d7:7f:df:9c:01:b5:5a:3a:f3:65: 52:77:e8:16:1d:fd:0c:20:b2:80:30:68:a5:1a:e4:9d:7b:4f: 6c:75:d8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL7bvTOME+ztPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZmVmMzI5MTctNDdkOC00N2M3LWJhZjAtYjdjNDBiYjJiNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3QQ+LxNyF9wlR1CumdOWe5Lhbb0J/9EWE38 zQRAMdB7EXS6oua0l6Zcx6rXdCR+KUHGjnBam0s65FeygRJQx+44ec8mWQIc5cDX wm7XJyPXXf0lRdCAzhu9/dIoeoJ5A3lidZaoMMAnP+jKwD15moEtqj26SitYku5J A0Q46TsbEmaqjf/S+3XR4UwI+qdnLqKcVS60hREYtPwQV7Gspid/jNIgjR39j9Sk 4p85GXiNxsQI5zQZY08fwrAqIBvZ+FqV90qGDrpxPFA0nlAP04zCsnk4x8oY1eRQ P57MP2J56tQd1/ZY3mMBqG9aLSfsW9jpQBjLcgd9TIddBI5npwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4AZAKmEGGBH7ro3VV81cVdvPJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTM4MmM5ODYtZTNhNS0z ZWE3LWI0YzctMzQ3NDg4MmY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAHqPgb57WztPNU+89/Aj8EWktgqc6ql6heEy2cwjnI+ZoyLRL/pF5M 8qq6BFrUqllSbvepxR4zD7Qfcs+iC0VRCpDpuiOW5lAbTG+Ed79Q8SG8tXOisMyf 7h0BURqekAs2IzNzeGi1wx8NSEIkFKOH4RzQezVTQRON7zREg4VW2/zZ4s7bOieR 2ANA6uMNPt378GDWzXXusq1DqGUJLcNFrEYQhQny/XhcR5MVVoBEviQVWUDbl1RC OIXp1kqOr/wjwdknGz6gyAoDHGI24ZUUJtONpwRZrRCKI78xEGe813/fnAG1Wjrz ZVJ36BYd/QwgsoAwaKUa5J17T2x12Js= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:13 2025 by rpki-client