$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa File: 8d352a99-b26f-325a-8066-4e236b1102a1.roa (raw, json) Hash identifier: 9tYRTXQRpKNIwv/t4gYz3hg9yIEgFDj2w9xtzCsrXxk= Subject key identifier: B3:35:ED:C7:6F:CA:A0:9B:BF:BD:25:F4:AF:ED:9D:86:7C:CC:B2:DB Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F4328584B5C6C790424FC5C2C9946C950 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 134365 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:79:04:24:fc:5c:2c:99:46:c9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=7dbb4bdf-2f17-4615-bf51-0c82dfd015b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:e1:1d:13:fa:f3:ea:b5:dc:91:46:d0:7b: e8:7d:ff:82:d9:4e:20:b9:f7:41:fd:92:2c:a8:1d: 50:02:25:53:74:93:d0:4f:99:b7:f1:13:6d:10:df: 72:7c:82:99:ab:45:2c:04:ed:8c:ff:a1:74:d6:a8: 80:89:11:e8:38:e6:e5:4a:f5:56:76:0f:15:b4:97: 43:50:72:81:b2:91:68:09:74:fb:53:2a:21:fe:3a: 42:01:f7:05:44:72:5f:ff:c4:c1:05:e5:6c:6d:bc: 67:eb:7a:55:95:81:a2:27:f6:c3:b6:43:e5:6c:f9: 69:89:58:51:78:e4:ad:e5:52:41:e4:24:ae:0a:65: 41:e2:82:c6:23:0f:9b:9b:86:89:e2:3f:8d:df:d1: 38:59:08:fd:d3:a0:4c:26:e7:77:85:e7:cd:d6:45: e0:89:e7:16:3d:30:ae:ec:f9:7b:27:1f:01:b4:e1: 7f:d1:d5:92:73:17:49:0a:8e:bb:ab:ca:39:7d:16: 37:2c:69:ee:f1:99:7c:c9:b4:72:89:e6:f0:2f:41: 12:84:0b:8e:87:c4:4d:21:16:3c:b9:a4:63:c9:69: 0c:fd:2e:4c:73:18:de:10:04:27:28:57:3c:30:3f: 02:c5:fc:17:4d:3e:e4:18:fc:cd:f2:7a:28:c8:f5: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:35:ED:C7:6F:CA:A0:9B:BF:BD:25:F4:AF:ED:9D:86:7C:CC:B2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9b:52:48:81:f0:a7:9d:71:51:1f:31:e3:71:08:e0:c7:aa: 09:47:ae:48:ae:56:ef:d7:14:00:f8:f6:b1:59:5d:08:14:61: dd:ca:f0:34:c1:a0:3a:06:3d:97:21:ae:6d:86:a4:6c:2a:71: 71:e1:7d:5e:6f:83:b2:6f:09:d0:4e:92:b4:78:ae:27:20:c9: 63:de:df:bb:49:2b:f9:51:7b:77:d2:4e:d0:f9:5d:27:ac:44: ba:b9:5a:fe:f2:8f:75:f9:3c:05:36:34:90:c3:cf:14:6c:74: 3a:d5:50:70:6c:b7:22:a8:21:64:49:a0:92:b5:89:2b:cc:2e: 0b:7a:2c:2f:8b:16:b5:15:96:69:54:52:59:99:da:2f:0f:3a: 62:4f:fd:d1:af:07:46:ba:5d:09:da:61:79:44:55:83:d9:12: 93:d2:fd:35:08:50:00:72:73:13:b4:b1:91:67:78:cf:c4:1c: a4:13:32:87:a2:d9:39:50:55:18:5e:82:aa:36:69:b8:81:ca: d9:87:a4:c2:15:23:82:f1:2d:29:b5:12:a5:4f:88:94:04:cb: 11:9d:ff:92:e3:9f:d3:8e:65:4d:1c:f4:16:85:89:5f:cf:ce: b0:7f:4b:53:6e:09:3a:17:51:16:38:fb:00:88:f1:3d:df:ed: 43:27:0c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHkEJPxcLJlGyVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk N2RiYjRiZGYtMmYxNy00NjE1LWJmNTEtMGM4MmRmZDAxNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgXhHRP68+q13JFG0Hvoff+C2U4gufdB/ZIs qB1QAiVTdJPQT5m38RNtEN9yfIKZq0UsBO2M/6F01qiAiRHoOOblSvVWdg8VtJdD UHKBspFoCXT7Uyoh/jpCAfcFRHJf/8TBBeVsbbxn63pVlYGiJ/bDtkPlbPlpiVhR eOSt5VJB5CSuCmVB4oLGIw+bm4aJ4j+N39E4WQj906BMJud3hefN1kXgiecWPTCu 7Pl7Jx8BtOF/0dWScxdJCo67q8o5fRY3LGnu8Zl8ybRyiebwL0EShAuOh8RNIRY8 uaRjyWkM/S5McxjeEAQnKFc8MD8CxfwXTT7kGPzN8nooyPVhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM17cdvyqCbv70l9K/tnYZ8zLLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvOGQzNTJhOTktYjI2Zi0z MjVhLTgwNjYtNGUyMzZiMTEwMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIybUkiB8KedcVEfMeNxCODHqglHrkiuVu/XFAD49rFZXQgUYd3K8DTB oDoGPZchrm2GpGwqcXHhfV5vg7JvCdBOkrR4ricgyWPe37tJK/lRe3fSTtD5XSes RLq5Wv7yj3X5PAU2NJDDzxRsdDrVUHBstyKoIWRJoJK1iSvMLgt6LC+LFrUVlmlU UlmZ2i8POmJP/dGvB0a6XQnaYXlEVYPZEpPS/TUIUABycxO0sZFneM/EHKQTMoei 2TlQVRhegqo2abiBytmHpMIVI4LxLSm1EqVPiJQEyxGd/5Ljn9OOZU0c9BaFiV/P zrB/S1NuCToXURY4+wCI8T3f7UMnDEU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:28 2025 by rpki-client