$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa File: 4878931d-006f-3a18-90e2-6866a003ef29.roa (raw, json) Hash identifier: zxBUsH2NuTEDgv36APZD4zep3TOJA1M6aO8CW2T3Nm8= Subject key identifier: 1F:06:E4:D7:C6:81:05:58:03:39:4E:FD:EE:5C:DF:4A:B9:99:DB:B5 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584B12F01E8B5BB33BA53FFB0C00 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa Signing time: Wed 03 Sep 2025 17:16:04 +0000 ROA not before: Wed 03 Sep 2025 17:16:04 +0000 ROA not after: Tue 02 Dec 2025 18:16:04 +0000 asID: 3356 IP address blocks: 198.89.160.0/20 maxlen: 24 198.89.176.0/21 maxlen: 24 198.89.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:f0:1e:8b:5b:b3:3b:a5:3f:fb:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Sep 3 17:16:04 2025 GMT Not After : Dec 2 18:16:04 2025 GMT Subject: CN=0d0827fd-9ebd-4e2d-be8d-580139691486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:a7:45:a5:b4:73:93:e7:71:b6:24:6a:8c: d5:5f:e9:ee:63:62:14:01:17:be:21:04:71:a8:e6: 89:a1:f3:a9:a4:b5:d7:a4:54:0b:6d:56:40:af:d4: 44:a8:ff:f9:5c:f2:a4:7a:05:b0:29:7f:a4:08:e5: f0:f8:30:db:9c:ae:9e:90:d7:73:0d:db:85:d9:54: 19:60:c2:af:63:9c:b0:7f:64:86:8a:42:3f:58:7d: 64:84:6a:e4:d0:f7:92:43:b5:06:4f:48:7c:40:19: 11:32:64:ff:49:26:e5:e8:cf:84:db:d6:f6:81:7f: a6:fb:dd:a9:c0:29:e4:96:48:4a:93:45:f2:be:fe: 5a:b3:8c:0f:15:a4:98:58:14:09:d7:b9:e7:9f:a8: 56:2e:6f:3e:ef:69:ec:7f:a8:d2:83:d5:44:75:e3: dd:27:99:99:31:87:a3:1f:d3:af:ab:e7:8d:28:b7: d1:e6:4c:b2:c4:9a:de:ac:2a:7a:d2:cc:68:95:2b: 76:ee:fb:20:92:13:26:a4:33:3b:6b:03:7c:78:28: 9d:35:1d:b4:b1:14:ff:ea:74:d8:4f:2c:b7:11:17: 74:4d:31:98:44:11:1a:0c:ba:0d:57:82:83:9e:32: dd:80:a7:63:14:98:e6:bf:46:33:15:48:2b:82:3c: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:E4:D7:C6:81:05:58:03:39:4E:FD:EE:5C:DF:4A:B9:99:DB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/4878931d-006f-3a18-90e2-6866a003ef29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 198.89.160.0-198.89.185.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:08:bc:f5:d5:6a:00:b5:9e:77:ec:14:e2:f4:60:d6:6a:73: 0e:d6:17:ce:36:8d:bb:77:b3:5f:ee:56:09:35:b5:35:8c:37: 5c:d8:80:1b:08:5b:1c:dc:36:02:10:2a:a3:2d:30:07:f7:e4: 36:e6:9b:90:60:a5:ba:eb:e9:ff:0e:7a:fe:c9:a3:f5:ae:e9: 58:b0:80:1e:e3:b9:85:dd:1a:0f:d8:02:b3:93:cf:34:4f:b1: d6:63:f3:d6:11:53:b9:61:a2:d8:c4:6b:69:6f:31:3b:4d:1b: 26:f4:02:c3:a5:44:9f:a7:d5:68:4f:45:17:e4:5b:c6:36:2e: 2d:53:f4:a9:ad:39:b3:c8:8d:5f:27:64:bf:c5:3e:f3:c1:c4: a4:15:a5:0e:27:fc:d9:e5:68:cd:a5:8a:9b:37:6b:02:fd:26: 39:e8:e4:dd:e2:42:22:41:4c:69:5f:4d:af:4a:29:8a:cb:c3: 1b:29:91:41:f2:63:70:72:a5:46:67:2c:cf:3e:36:c3:7d:fa: 1e:ad:93:d2:9b:23:45:53:87:ba:bc:89:ac:aa:c0:e0:41:75: bb:4e:65:23:40:b1:f0:73:24:0b:17:61:13:a8:1e:b3:b1:06: 41:93:95:c1:de:c4:36:7c:f9:de:bb:82:22:b2:93:62:8b:5f: d4:11:c4:b1 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsS8B6LW7M7pT/7DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI1MDkwMzE3MTYwNFoXDTI1MTIwMjE4MTYwNFowLzEtMCsGA1UEAxMk MGQwODI3ZmQtOWViZC00ZTJkLWJlOGQtNTgwMTM5NjkxNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBOnRaW0c5PncbYkaozVX+nuY2IUARe+IQRx qOaJofOppLXXpFQLbVZAr9REqP/5XPKkegWwKX+kCOXw+DDbnK6ekNdzDduF2VQZ YMKvY5ywf2SGikI/WH1khGrk0PeSQ7UGT0h8QBkRMmT/SSbl6M+E29b2gX+m+92p wCnklkhKk0Xyvv5as4wPFaSYWBQJ17nnn6hWLm8+72nsf6jSg9VEdePdJ5mZMYej H9Ovq+eNKLfR5kyyxJrerCp60sxolSt27vsgkhMmpDM7awN8eCidNR20sRT/6nTY Tyy3ERd0TTGYRBEaDLoNV4KDnjLdgKdjFJjmv0YzFUgrgjwYeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFB8G5NfGgQVYAzlO/e5c30q5mdu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNDg3ODkzMWQtMDA2Zi0z YTE4LTkwZTItNjg2NmEwMDNlZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXGWaAD BAHGWbgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZQi89dVqALWed+wU4vRg1mpzDtYXzjaNu3ezX+5WCTW1 NYw3XNiAGwhbHNw2AhAqoy0wB/fkNuabkGCluuvp/w56/smj9a7pWLCAHuO5hd0a D9gCs5PPNE+x1mPz1hFTuWGi2MRraW8xO00bJvQCw6VEn6fVaE9FF+RbxjYuLVP0 qa05s8iNXydkv8U+88HEpBWlDif82eVozaWKmzdrAv0mOejk3eJCIkFMaV9Nr0op isvDGymRQfJjcHKlRmcszz42w336Hq2T0psjRVOHuryJrKrA4EF1u05lI0Cx8HMk CxdhE6ges7EGQZOVwd7ENnz53ruCIrKTYotf1BHEsQ== -----END CERTIFICATE-----Generated at Wed Sep 17 04:07:58 2025 by rpki-client