$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa File: e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json) Hash identifier: BpzpYJ0GSZfqlpCYhLaJM1+0+DgJ63/eRUxUBAdYYJw= Subject key identifier: 04:9D:3F:DB:30:D8:17:9E:FD:C7:DE:EB:B5:44:D7:FF:F4:74:2B:F3 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584B5F3722FEE6CEE8BEF4B4B600 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 4186 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:fe:e6:ce:e8:be:f4:b4:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=fcfecddd-efb3-44ca-aa49-20e1530b04ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:97:a1:49:15:49:d7:09:5c:2c:1f:c2:67: 04:03:26:b1:22:06:e4:c2:f4:ea:4e:14:61:fd:f8: 35:36:fa:47:c5:b3:06:09:99:27:76:7e:c0:a5:4e: d7:92:37:14:b3:7e:4e:f0:7f:35:15:48:bc:fc:61: 52:dc:be:39:48:30:a4:75:c1:a2:ff:5e:b0:90:e5: 38:81:81:a5:b6:8d:47:2c:00:49:82:c0:81:d5:55: d8:20:33:07:12:a7:70:7a:47:75:f3:39:04:f1:c6: 0a:12:dd:02:3e:ab:53:32:5c:a6:cb:e7:1e:15:46: 59:3a:fe:eb:c7:7c:8b:e5:15:35:93:4a:49:79:34: ac:9f:97:9e:37:e4:0d:0a:78:18:4c:1c:5d:10:1b: ed:e3:5a:48:08:9d:6b:a1:8c:33:46:40:0b:1c:2b: a9:bc:56:6d:c9:de:a0:39:13:e4:e4:8c:7e:68:61: 7c:eb:96:01:7d:61:ff:c0:ca:2f:7f:3d:ca:d4:d6: 0f:c5:9a:84:88:cd:8f:04:79:40:ae:1f:25:59:26: a1:1d:56:67:ad:2f:4b:28:34:4c:39:da:55:d1:49: 65:c0:11:bf:6c:94:25:0b:ac:ff:59:9d:ac:6c:88: 8b:2e:61:0b:86:68:a7:f5:86:2f:2e:43:46:fe:21: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9D:3F:DB:30:D8:17:9E:FD:C7:DE:EB:B5:44:D7:FF:F4:74:2B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a4:2b:08:8a:56:a3:db:09:e1:2a:49:c1:17:ec:c0:67:74: cc:7c:d5:b4:a0:43:1c:16:20:63:02:6b:c2:b6:0a:25:8b:2e: 91:73:a1:04:b9:36:ea:98:aa:fd:35:c4:4c:c9:e3:b1:05:da: bc:69:c5:ce:a4:67:bc:ce:b7:cf:7f:ea:6e:12:e6:d7:95:87: 86:86:a5:ee:ec:58:0c:c2:0d:56:59:7e:15:bf:15:ae:f1:0b: 7d:fb:ca:a0:f0:ed:f7:96:f1:64:d5:6d:8b:29:7b:76:9c:42: a3:e6:7a:b5:76:d6:e6:ff:8a:ae:f2:fc:80:35:fe:6c:01:b0: fd:ed:da:ae:72:bd:10:72:c6:5c:3b:4e:33:7a:7b:ac:7c:bf: 3a:eb:c7:ef:2f:be:d1:b1:24:aa:27:91:df:e5:28:62:f0:27: 8c:d3:05:96:d9:e4:8a:f8:34:ae:51:9a:87:02:c6:b9:83:20: 3a:fe:21:c4:0d:00:81:a4:07:08:3d:be:1e:18:2c:ba:d9:a6: 54:e5:f1:17:ba:01:2b:ee:b7:83:d4:f1:de:ee:e6:33:01:e2: 60:78:65:4b:46:88:de:45:39:fb:4a:56:e1:c5:02:01:cb:46: 87:65:f4:d9:62:e9:93:89:a3:a3:db:9b:8c:d3:99:be:70:dd: 55:07:af:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyL+5s7ovvS0tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmNmZWNkZGQtZWZiMy00NGNhLWFhNDktMjBlMTUzMGIwNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwCXoUkVSdcJXCwfwmcEAyaxIgbkwvTqThRh /fg1NvpHxbMGCZkndn7ApU7XkjcUs35O8H81FUi8/GFS3L45SDCkdcGi/16wkOU4 gYGlto1HLABJgsCB1VXYIDMHEqdwekd18zkE8cYKEt0CPqtTMlymy+ceFUZZOv7r x3yL5RU1k0pJeTSsn5eeN+QNCngYTBxdEBvt41pICJ1roYwzRkALHCupvFZtyd6g ORPk5Ix+aGF865YBfWH/wMovfz3K1NYPxZqEiM2PBHlArh8lWSahHVZnrS9LKDRM OdpV0UllwBG/bJQlC6z/WZ2sbIiLLmELhmin9YYvLkNG/iHtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASdP9sw2Bee/cfe67VE1//0dCvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvZTVlNTYwZTMtNzExNC0z MzAxLTkyNjEtNzcyNWExMjQxZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGkKwiKVqPbCeEqScEX7MBndMx81bSgQxwWIGMCa8K2CiWLLpFzoQS5 NuqYqv01xEzJ47EF2rxpxc6kZ7zOt89/6m4S5teVh4aGpe7sWAzCDVZZfhW/Fa7x C337yqDw7feW8WTVbYspe3acQqPmerV21ub/iq7y/IA1/mwBsP3t2q5yvRByxlw7 TjN6e6x8vzrrx+8vvtGxJKonkd/lKGLwJ4zTBZbZ5Ir4NK5RmocCxrmDIDr+IcQN AIGkBwg9vh4YLLrZplTl8Re6ASvut4PU8d7u5jMB4mB4ZUtGiN5FOftKVuHFAgHL Rodl9Nli6ZOJo6Pbm4zTmb5w3VUHr5s= -----END CERTIFICATE-----Generated at Sat Oct 11 07:19:12 2025 by rpki-client