$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa File: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (raw, json) Hash identifier: OTU4rbXNbbBphC/iC+RM8RTYQIc98of0HAm4sA2K7Rw= Subject key identifier: 33:4B:87:0F:B8:E3:A4:48:E7:A1:D1:3C:0B:22:A7:34:9B:AE:BF:5A Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F4328584B1C36C3FF96AB327FB96EA780 Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 394907 IP address blocks: 159.242.32.0/19 maxlen: 24 172.83.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c3:ff:96:ab:32:7f:b9:6e:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e754fe46-62d6-4422-825d-dac177ca7e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:75:7f:43:8f:1b:0c:cd:04:39:cf:5c:18: 1d:61:19:7e:39:73:c4:16:44:93:88:45:60:81:3c: 26:4a:bb:39:7f:82:04:34:3f:d2:42:2c:2d:f6:14: 99:c2:bd:2a:ab:4a:96:f7:7b:cd:2e:d1:94:4c:69: 47:bb:32:fe:9d:13:c3:8b:72:25:26:04:45:6d:21: 34:27:af:43:26:24:7f:62:a9:e3:fb:26:ef:97:93: d5:8d:70:7d:cf:f1:41:e2:3f:e9:23:bf:a9:23:9b: 2a:f7:84:13:ae:28:ad:32:8c:33:1f:0c:8e:b7:4b: 92:f7:4e:00:82:cb:76:e3:a6:85:ba:de:38:8a:39: b9:97:36:ea:58:83:00:c0:a6:6f:57:66:54:43:19: c9:1d:74:ce:76:02:95:b0:3e:75:39:5c:fa:52:18: 42:e1:cc:cc:8d:1f:85:22:4d:2f:a0:12:37:fd:de: b4:a5:ba:8b:7e:b6:60:85:a0:82:5a:a2:6c:4c:da: 9c:73:45:d5:68:4a:81:b2:18:12:3e:cb:e6:36:c2: d0:2e:cb:70:2f:5d:73:47:19:22:7a:01:61:e2:82: 1d:6d:98:f8:53:a3:56:c0:c3:bf:d5:02:10:0f:86: ef:8a:80:65:63:d5:4b:c6:4c:0e:23:81:ed:59:4e: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4B:87:0F:B8:E3:A4:48:E7:A1:D1:3C:0B:22:A7:34:9B:AE:BF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: 159.242.32.0/19 172.83.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f1:fb:9e:70:61:46:5a:69:5d:b7:de:01:81:8c:86:09:c2: b5:4e:1f:47:e3:ed:2f:86:b0:f3:71:84:d6:c2:22:d4:de:0f: 59:d9:f0:46:1b:1a:d8:49:03:4f:ca:2a:ca:fe:e2:b6:ed:87: 41:51:e0:9d:e9:46:9b:aa:4f:fe:14:db:e0:71:e0:63:4c:7b: db:31:04:a5:74:a1:b8:ef:71:37:2f:84:a7:cd:87:a6:69:19: a4:bb:94:6d:ae:ee:c3:7e:1f:f5:0a:25:ca:25:70:57:88:71: ea:72:02:45:52:66:85:c0:8a:e1:fd:2c:f1:c1:85:59:4e:e8: 71:55:99:6b:58:4f:36:fd:b0:ef:ba:9e:08:33:69:c4:b8:93: 05:0b:f0:5e:8b:fd:b6:08:31:ef:53:6f:d8:2f:8d:2a:d1:bb: 70:35:04:ed:dd:e1:4a:de:6e:c9:14:50:79:70:d9:1b:27:b5: da:39:a9:ef:2a:44:b3:58:64:3d:f2:d3:3d:ec:40:8f:c5:0d: 28:f1:ae:6e:e1:b2:c1:f1:c5:8c:ef:d8:9a:03:57:81:6e:f3: 4c:b5:71:d7:60:1b:88:2a:03:f8:2b:13:a1:d5:a6:57:39:75: 95:17:d2:9b:da:5d:8b:78:92:ee:cf:fe:c9:a6:72:d3:3e:45: be:b8:75:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEscNsP/lqsyf7lup4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTc1NGZlNDYtNjJkNi00NDIyLTgyNWQtZGFjMTc3Y2E3ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8N1f0OPGwzNBDnPXBgdYRl+OXPEFkSTiEVg gTwmSrs5f4IEND/SQiwt9hSZwr0qq0qW93vNLtGUTGlHuzL+nRPDi3IlJgRFbSE0 J69DJiR/Yqnj+ybvl5PVjXB9z/FB4j/pI7+pI5sq94QTriitMowzHwyOt0uS904A gst246aFut44ijm5lzbqWIMAwKZvV2ZUQxnJHXTOdgKVsD51OVz6UhhC4czMjR+F Ik0voBI3/d60pbqLfrZghaCCWqJsTNqcc0XVaEqBshgSPsvmNsLQLstwL11zRxki egFh4oIdbZj4U6NWwMO/1QIQD4bvioBlY9VLxkwOI4HtWU40IQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDNLhw+446RI56HRPAsipzSbrr9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvOThiNzZhZjQtY2RhMy0z ZDk0LTk1NTEtNjc3YmEwY2MzNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn/IgAwQE rFMQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC/x+55wYUZaaV233gGBjIYJwrVOH0fj7S+GsPNxhNbCItTe D1nZ8EYbGthJA0/KKsr+4rbth0FR4J3pRpuqT/4U2+Bx4GNMe9sxBKV0objvcTcv hKfNh6ZpGaS7lG2u7sN+H/UKJcolcFeIcepyAkVSZoXAiuH9LPHBhVlO6HFVmWtY Tzb9sO+6nggzacS4kwUL8F6L/bYIMe9Tb9gvjSrRu3A1BO3d4UrebskUUHlw2Rsn tdo5qe8qRLNYZD3y0z3sQI/FDSjxrm7hssHxxYzv2JoDV4Fu80y1cddgG4gqA/gr E6HVplc5dZUX0pvaXYt4ku7P/smmctM+Rb64dWE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:29:45 2025 by rpki-client