$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa File: 4748e949-c2fb-3b07-a310-c7d6a2767edf.roa (raw, json) Hash identifier: A50scXq+dtBxol1NEOTQdpP1Gp/YmRjlSPeyvkN5y74= Subject key identifier: D7:17:4E:95:AD:39:4C:67:48:AC:FC:04:EE:2A:EB:8B:51:42:77:95 Certificate issuer: /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc Certificate serial: 010D0C9F4328584B1C36C09A9DA8AF2314CF0B00 Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 395101 IP address blocks: 199.175.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c0:9a:9d:a8:af:23:14:cf:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=bd204808-df6e-4ca4-8716-5b1c74a3b064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:3e:5b:11:31:be:1d:29:a3:2f:d6:84:b7: 47:5e:6e:52:f9:bd:f9:db:bb:70:4a:d9:8d:f9:7e: 29:e4:46:c3:43:55:ca:a8:5c:93:50:35:b1:44:55: f9:3f:c9:b8:63:46:5b:99:ca:ff:f6:d5:c5:1d:63: de:b3:c9:21:4c:20:32:32:28:6f:cf:fc:c5:0c:cc: db:91:a4:d9:21:de:9f:24:97:5f:3e:38:14:3b:a7: cc:0b:42:e6:d5:af:98:5e:c5:44:9e:7b:a6:56:ed: 17:98:75:54:0a:3b:97:72:fd:7c:a6:52:cf:af:ff: 61:bd:44:dd:e1:28:ed:e0:4d:a3:48:5b:e4:7f:d2: a7:30:0b:6e:4b:1c:d0:7d:cb:78:b9:90:3b:44:de: 93:92:ac:b9:e2:c6:f5:3e:22:e4:0b:01:e7:49:fe: cd:89:13:4e:c1:58:9d:5b:da:25:39:08:56:1e:8a: bb:7c:46:64:a6:f9:e5:8c:e7:02:6c:20:ab:f4:9e: df:60:27:2c:c8:f2:46:0b:97:fe:7b:93:7f:6a:09: 4a:3a:38:fd:15:0b:04:01:72:ee:34:09:65:aa:1d: b1:3c:f7:5a:ba:30:e5:6a:55:81:a5:4b:5d:25:bd: 90:2e:f1:d4:f9:c6:ca:21:55:b4:9c:e4:e8:18:a1: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:17:4E:95:AD:39:4C:67:48:AC:FC:04:EE:2A:EB:8B:51:42:77:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl X509v3 Authority Key Identifier: keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer sbgp-ipAddrBlock: critical IPv4: 199.175.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:82:54:b7:8b:9a:c7:41:b6:c9:f5:bd:ed:32:15:19:bd:ad: 65:bb:a8:9d:0d:92:ca:68:47:19:4f:d8:78:34:2c:97:04:71: ef:aa:39:30:8c:74:dc:8d:41:b8:df:c4:e2:26:a4:f9:a9:90: 6a:8e:e2:88:a8:57:87:84:d4:35:21:11:22:8d:fe:04:5b:3a: 54:b9:28:58:fd:1c:c7:51:bf:c1:9b:cd:55:7e:19:6a:d8:5c: cd:93:63:bd:bd:f8:d0:8a:12:4c:0c:25:67:7f:ac:f8:f5:0b: da:16:97:68:be:a4:f8:85:a8:b0:df:cc:17:0b:9a:00:d5:ef: 14:af:d2:a8:56:e2:96:b0:cf:fc:26:99:31:fa:47:f5:b4:79: 2b:99:8e:b8:64:c0:65:f5:5b:13:2a:45:64:54:5f:6a:7a:5b: b6:49:71:23:f8:3e:e6:61:ff:b6:e4:7b:a2:c2:1f:e0:68:d6: fe:f0:2e:44:f6:5d:5b:09:fc:3e:29:c9:27:cb:51:15:12:1b: 29:d4:3d:66:1a:ba:c6:07:dc:a4:36:51:fa:f9:84:d2:c7:ae: 6d:a9:64:b2:a4:a1:1a:3b:e1:30:c9:0c:cd:72:0c:ab:f3:52: 2c:67:1e:24:ee:52:a6:25:9a:3b:91:1b:d1:9c:87:3f:e0:da: d7:9c:b6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsCanaivIxTPCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5NmRlNDMtMTllZS00OGFjLThhMmYtYWNkOWVkMWNh ZmZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YmQyMDQ4MDgtZGY2ZS00Y2E0LTg3MTYtNWIxYzc0YTNiMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUM+WxExvh0poy/WhLdHXm5S+b3527twStmN +X4p5EbDQ1XKqFyTUDWxRFX5P8m4Y0Zbmcr/9tXFHWPes8khTCAyMihvz/zFDMzb kaTZId6fJJdfPjgUO6fMC0Lm1a+YXsVEnnumVu0XmHVUCjuXcv18plLPr/9hvUTd 4Sjt4E2jSFvkf9KnMAtuSxzQfct4uZA7RN6Tkqy54sb1PiLkCwHnSf7NiRNOwVid W9olOQhWHoq7fEZkpvnljOcCbCCr9J7fYCcsyPJGC5f+e5N/aglKOjj9FQsEAXLu NAllqh2xPPdaujDlalWBpUtdJb2QLvHU+cbKIVW0nOToGKHArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcXTpWtOUxnSKz8BO4q64tRQneVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYjk2 ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5ZWQxY2FmZmMvNDc0OGU5NDktYzJmYi0z YjA3LWEzMTAtYzdkNmEyNzY3ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWI5NmRlNDMtMTllZS00OGFjLThh MmYtYWNkOWVkMWNhZmZjL2FiOTZkZTQzLTE5ZWUtNDhhYy04YTJmLWFjZDllZDFj YWZmYy5jcmwwHwYDVR0jBBgwFoAUO8+DdRkuAYOzoP0kIZAh8WLHaJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYjk2ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5 ZWQxY2FmZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx69iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6CVLeLmsdBtsn1ve0yFRm9rWW7qJ0NkspoRxlP2Hg0LJcEce+qOTCM dNyNQbjfxOImpPmpkGqO4oioV4eE1DUhESKN/gRbOlS5KFj9HMdRv8GbzVV+GWrY XM2TY729+NCKEkwMJWd/rPj1C9oWl2i+pPiFqLDfzBcLmgDV7xSv0qhW4pawz/wm mTH6R/W0eSuZjrhkwGX1WxMqRWRUX2p6W7ZJcSP4PuZh/7bke6LCH+Bo1v7wLkT2 XVsJ/D4pySfLURUSGynUPWYausYH3KQ2Ufr5hNLHrm2pZLKkoRo74TDJDM1yDKvz UixnHiTuUqYlmjuRG9Gchz/g2tectkQ= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:06 2025 by rpki-client