$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa File: 7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa (raw, json) Hash identifier: hOlZvQxCxQ4SilLbqh3STHWzGXtSCfY05+dzi4r08m4= Subject key identifier: DA:2C:ED:BF:65:57:3B:27:B2:BC:FB:35:32:F5:27:1C:25:46:03:B9 Certificate issuer: /CN=89ee541c-de14-47cf-b4d0-081e933fb330 Certificate serial: 010D0C9F4328584AFEE69E08C93F6622310A0350 Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 53809 IP address blocks: 100.43.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9e:08:c9:3f:66:22:31:0a:03:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=98a10484-31f5-438c-858c-27fc5a622f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:fb:6e:40:d8:fd:a1:b9:56:c3:ed:a3:e6: 09:d7:8a:e2:0a:cb:8b:f7:15:db:0e:1b:75:5b:5f: 8a:d0:bd:4f:da:01:b2:1f:80:fa:28:40:d8:39:26: 81:ee:aa:44:99:1f:08:54:a0:5f:df:52:72:c8:bb: 51:32:c1:53:5e:75:b7:a9:a1:d9:0e:e4:1b:06:f3: fd:e9:26:e9:a5:ca:5b:90:1e:ad:61:b4:51:d3:5b: 3f:29:32:9b:2c:92:12:02:80:a2:61:06:bd:82:7e: f0:33:44:22:65:71:40:93:59:4e:c2:d2:34:83:83: 73:74:38:a4:19:c7:54:65:25:8b:c8:ab:88:69:ab: 8f:76:bd:fa:4a:4d:df:cc:4b:36:64:e2:8e:fd:fc: c8:44:f6:4c:39:86:82:5e:a4:f9:f8:50:b9:b3:ce: 79:15:16:40:84:24:8f:4a:50:be:96:e5:3d:aa:ca: c6:5b:0e:2b:45:8a:0d:e5:77:bd:d4:2c:37:87:3d: ab:31:cb:0c:17:f7:7a:b9:df:cd:0a:8d:52:2f:3a: 00:20:4f:6b:3b:8c:bb:9b:a6:94:18:a7:e3:77:46: 82:01:d7:6d:0d:ee:c1:89:51:1c:3a:b4:ec:5a:e2: e8:47:2f:58:fd:4d:a9:bc:80:cc:10:12:93:0c:6d: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2C:ED:BF:65:57:3B:27:B2:BC:FB:35:32:F5:27:1C:25:46:03:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl X509v3 Authority Key Identifier: keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer sbgp-ipAddrBlock: critical IPv4: 100.43.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ac:e6:8a:32:0e:9c:59:5f:8e:25:79:b1:18:6f:03:85:6e: fe:fc:51:66:7c:1b:cd:33:22:ae:47:a7:6f:7a:1c:91:92:25: 38:bb:09:f9:33:2f:6a:59:76:97:b5:b3:85:2c:16:2c:49:e8: 45:9b:42:65:7e:0b:41:f1:7e:4e:5c:05:0f:aa:a3:4c:10:3a: 63:4c:f0:74:98:10:88:cf:e4:bf:53:88:b5:2e:a0:ea:d1:a6: 90:58:0c:d3:2a:95:a4:d3:bb:c1:39:9c:7a:bf:37:27:c9:b6: 5d:5b:44:48:7e:37:af:c6:00:3d:f4:f0:c9:d1:e9:96:59:10: dd:07:0f:03:b6:01:31:67:47:6a:f2:20:69:14:9d:d8:08:42: e9:55:a1:67:fe:90:f6:35:cd:68:84:ed:59:d6:7a:98:70:62: 4a:53:1b:a1:f9:f7:1f:7a:a9:47:eb:d9:1c:df:f0:cb:53:fe: e5:da:fc:83:87:46:50:9d:7d:75:92:eb:66:f8:1e:48:b6:c8: c1:96:c0:eb:d4:47:f0:32:91:0f:62:05:2d:37:2a:dc:8d:42: cd:97:fd:48:24:d4:20:f9:1d:b6:d1:53:41:24:9e:de:6d:03: 22:d0:68:5e:ad:63:fb:35:0b:c1:3e:77:ce:73:62:62:b0:db: f4:45:f9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p4IyT9mIjEKA1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZTU0MWMtZGUxNC00N2NmLWI0ZDAtMDgxZTkzM2Zi MzMwMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OThhMTA0ODQtMzFmNS00MzhjLTg1OGMtMjdmYzVhNjIyZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4r7bkDY/aG5VsPto+YJ14riCsuL9xXbDht1 W1+K0L1P2gGyH4D6KEDYOSaB7qpEmR8IVKBf31JyyLtRMsFTXnW3qaHZDuQbBvP9 6SbppcpbkB6tYbRR01s/KTKbLJISAoCiYQa9gn7wM0QiZXFAk1lOwtI0g4NzdDik GcdUZSWLyKuIaauPdr36Sk3fzEs2ZOKO/fzIRPZMOYaCXqT5+FC5s855FRZAhCSP SlC+luU9qsrGWw4rRYoN5Xe91Cw3hz2rMcsMF/d6ud/NCo1SLzoAIE9rO4y7m6aU GKfjd0aCAddtDe7BiVEcOrTsWuLoRy9Y/U2pvIDMEBKTDG2fIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNos7b9lVzsnsrz7NTL1JxwlRgO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVl NTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFlOTMzZmIzMzAvNzU2M2FhMjYtYzE2Ny0z ZTg2LWI3YWUtZGQ5YjQ3NzNhZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODllZTU0MWMtZGUxNC00N2NmLWI0 ZDAtMDgxZTkzM2ZiMzMwLzg5ZWU1NDFjLWRlMTQtNDdjZi1iNGQwLTA4MWU5MzNm YjMzMC5jcmwwHwYDVR0jBBgwFoAU5c6XU3jki2pUQn5MS4/XJvVL58swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVlNTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFl OTMzZmIzMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFZCsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWs5ooyDpxZX44lebEYbwOFbv78UWZ8G80zIq5Hp296HJGSJTi7Cfkz L2pZdpe1s4UsFixJ6EWbQmV+C0Hxfk5cBQ+qo0wQOmNM8HSYEIjP5L9TiLUuoOrR ppBYDNMqlaTTu8E5nHq/NyfJtl1bREh+N6/GAD308MnR6ZZZEN0HDwO2ATFnR2ry IGkUndgIQulVoWf+kPY1zWiE7VnWephwYkpTG6H59x96qUfr2Rzf8MtT/uXa/IOH RlCdfXWS62b4Hki2yMGWwOvUR/AykQ9iBS03KtyNQs2X/Ugk1CD5HbbRU0Eknt5t AyLQaF6tY/s1C8E+d85zYmKw2/RF+RE= -----END CERTIFICATE-----Generated at Fri Oct 10 23:37:52 2025 by rpki-client