$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa File: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (raw, json) Hash identifier: DKF86IRYRd4KuLt3QwpLXryQ/+agnhugMtGZIG3PZbw= Subject key identifier: 46:50:6E:8C:89:4D:12:32:02:D4:29:EE:29:D8:12:80:EF:46:9B:AB Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584B0CDC0A29E840CA636EF29E90 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8075 IP address blocks: 198.51.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0a:29:e8:40:ca:63:6e:f2:9e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=facc650e-0025-4cca-ab35-05d6e109c7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:4f:2f:15:5f:d4:e1:a8:f7:4a:7d:ca:ef: b7:41:5f:45:29:7c:36:f8:d8:3b:e5:df:74:1f:39: 88:b9:a7:29:33:a2:ec:cc:2c:77:92:8c:f1:71:35: 95:1c:5a:15:c4:93:f0:4a:3e:63:69:36:e1:5d:6a: da:ee:f2:91:09:14:6f:fa:75:1d:f0:c9:ab:1a:e4: 1b:e6:cf:78:c7:36:5c:64:2a:a7:f0:c0:1b:c8:4a: 81:75:b8:e7:d5:18:91:91:92:1c:1c:de:03:c8:59: 03:3c:72:d7:c7:75:bc:c7:b2:0f:9a:bc:48:11:71: 8a:fe:b7:e0:1c:29:64:ff:d9:33:27:0b:f8:de:df: 47:62:af:76:b1:ef:32:52:9c:00:bc:aa:c7:d5:55: f3:e6:68:4e:08:a5:d1:6b:36:88:51:29:2d:c8:16: 31:dc:ea:91:1b:65:b4:c4:35:1f:ee:7a:82:e8:fd: 6b:53:c1:6a:3c:1e:bb:fd:a6:05:5e:75:c1:cb:1d: 15:6f:d9:b6:dd:06:1c:38:3d:06:76:63:06:43:65: a3:8f:44:df:ec:a8:51:4d:59:64:96:49:03:73:83: 4e:4c:4e:2c:0d:2c:60:c9:6e:4d:3a:b9:3d:62:7c: 8d:92:12:ba:9b:3d:c4:a3:82:50:55:a7:08:6e:b8: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:50:6E:8C:89:4D:12:32:02:D4:29:EE:29:D8:12:80:EF:46:9B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: 198.51.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a2:13:27:64:85:1b:4d:88:54:68:58:65:85:40:98:01:e2: 21:74:de:8b:d6:3f:53:59:1c:1a:95:8c:ab:cb:84:c1:bb:22: e9:d7:d3:02:61:14:eb:b3:31:b3:76:6d:94:c4:6b:94:96:f6: 49:ca:5c:96:47:df:2f:8a:5d:53:80:72:79:1f:95:d5:3c:bd: 9d:29:12:42:2a:61:ec:0f:46:63:d4:1e:3d:58:2b:2d:09:99: eb:20:86:9d:da:9f:3d:58:2d:f3:5f:e0:d6:37:33:e4:d8:ce: 9d:29:d3:14:01:e3:ac:de:a8:48:f9:cf:7f:ba:cf:0b:0d:52: 3b:20:d6:4f:37:05:24:76:87:30:6a:cd:20:48:92:85:77:5a: 26:6a:63:d2:04:5f:09:b3:4d:f2:9f:bb:f7:26:d0:dc:5e:3e: 1e:49:93:c4:e1:92:bb:3e:90:78:3b:bb:3b:ae:be:5e:34:07: 8c:d7:c0:ad:5b:db:24:49:17:79:5d:ad:be:24:de:16:63:1a: b3:5d:4d:06:41:e5:0d:ea:44:22:a3:20:53:87:35:48:06:25: 6f:02:f4:56:4e:4a:b0:a0:f5:a0:2e:fa:c7:41:d3:37:2b:49: 19:53:a4:68:cb:cc:c2:8d:64:02:e6:e2:88:c2:6b:ef:a5:c2: 6c:58:23:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Aop6EDKY27ynpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZmFjYzY1MGUtMDAyNS00Y2NhLWFiMzUtMDVkNmUxMDljN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xPLxVf1OGo90p9yu+3QV9FKXw2+Ng75d90 HzmIuacpM6LszCx3kozxcTWVHFoVxJPwSj5jaTbhXWra7vKRCRRv+nUd8MmrGuQb 5s94xzZcZCqn8MAbyEqBdbjn1RiRkZIcHN4DyFkDPHLXx3W8x7IPmrxIEXGK/rfg HClk/9kzJwv43t9HYq92se8yUpwAvKrH1VXz5mhOCKXRazaIUSktyBYx3OqRG2W0 xDUf7nqC6P1rU8FqPB67/aYFXnXByx0Vb9m23QYcOD0GdmMGQ2Wjj0Tf7KhRTVlk lkkDc4NOTE4sDSxgyW5NOrk9YnyNkhK6mz3Eo4JQVacIbrgg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZQboyJTRIyAtQp7inYEoDvRpurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvNWU2YzVjMWItMWYxOS0z NDIyLTllODEtZjJmNjA4ZDczOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuiEydkhRtNiFRoWGWFQJgB4iF03ovWP1NZHBqVjKvLhMG7IunX0wJh FOuzMbN2bZTEa5SW9knKXJZH3y+KXVOAcnkfldU8vZ0pEkIqYewPRmPUHj1YKy0J mesghp3anz1YLfNf4NY3M+TYzp0p0xQB46zeqEj5z3+6zwsNUjsg1k83BSR2hzBq zSBIkoV3WiZqY9IEXwmzTfKfu/cm0NxePh5Jk8Thkrs+kHg7uzuuvl40B4zXwK1b 2yRJF3ldrb4k3hZjGrNdTQZB5Q3qRCKjIFOHNUgGJW8C9FZOSrCg9aAu+sdB0zcr SRlTpGjLzMKNZALm4ojCa++lwmxYI4Y= -----END CERTIFICATE-----Generated at Sat Oct 11 08:34:12 2025 by rpki-client