$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa File: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json) Hash identifier: TD2wMfZmZXmhbIHVzwOhr12tJZkOWDkrl2WIm6tn91s= Subject key identifier: 47:B9:C1:74:59:D5:A8:2B:11:D8:AE:BA:F0:B9:26:A8:CA:5C:CC:39 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584B2A2C60BE420261E5FC1F0C80 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 30387 IP address blocks: 156.40.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:60:be:42:02:61:e5:fc:1f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=c35c1ec7-f27d-4731-a778-cbc1aed3c26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:a9:2a:5b:2d:b8:95:bf:e3:11:fb:8e:6c: 91:cb:eb:c7:22:a9:51:fc:30:64:c6:7c:4b:dc:c6: a0:f0:12:4d:37:31:96:60:93:e1:34:63:8e:3b:61: 77:66:ad:b7:8f:98:75:ec:fe:b1:a5:1f:3c:a2:4a: 7c:e0:13:e0:37:e6:4a:71:f1:87:37:4f:3b:b5:d0: 0c:47:5d:fc:f8:01:3a:b4:7b:cc:23:21:0a:88:db: 80:bb:e8:f4:9f:be:1e:e5:b2:bf:82:62:2c:6c:8e: e6:c4:18:25:b1:c2:05:d2:23:93:93:3d:96:be:f7: 77:74:69:d1:9e:45:06:8b:c9:1b:ca:a5:03:0e:86: ec:b0:dd:bc:8e:96:37:83:ad:8b:ef:50:f6:4d:15: f3:fe:e8:d6:ef:f4:91:96:cf:cc:78:7e:cc:8a:86: d1:ef:3e:b8:50:76:82:a1:e3:cc:a2:b4:e3:15:7b: 10:5d:3e:11:37:1e:22:28:56:0b:75:f6:e0:3b:f1: af:ae:08:52:10:fa:39:1b:4a:35:ad:ee:1b:9c:3e: 1a:14:c9:19:72:e6:7d:00:e0:17:41:82:30:50:36: 99:11:bf:12:da:7e:ce:09:9d:2b:f9:f0:af:6c:87: 38:bc:e4:42:44:57:09:a1:6e:39:d1:ba:aa:31:67: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:C1:74:59:D5:A8:2B:11:D8:AE:BA:F0:B9:26:A8:CA:5C:CC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9e:4b:25:85:e1:48:ab:a9:e2:9d:3f:8d:94:0d:a4:f8:32: c0:ab:1b:08:22:57:3b:0f:55:0d:a5:ba:92:a5:af:8a:2d:3c: ca:3a:c2:2b:25:fb:d5:01:90:00:7e:b2:64:da:c4:b1:91:d6: 22:13:f4:2c:fc:5f:45:50:1b:a3:8a:ee:4d:3c:85:bf:5a:24: 2e:1c:2f:8e:e0:42:4b:46:f2:60:a9:30:3b:39:38:0d:99:a4: 1d:aa:8b:89:15:9f:f4:48:aa:3b:74:f3:dd:c3:ab:75:c6:66: a8:e6:3d:74:75:95:9d:8a:82:7a:cb:22:50:7e:fc:1f:46:39: d3:08:03:39:e7:31:35:c2:a4:46:1c:46:b5:07:ac:77:38:8b: 6c:46:b2:51:23:06:da:c8:71:3a:d1:b8:f8:dc:9f:7d:d7:82: e1:74:ce:85:93:dc:bf:92:5e:dc:78:7e:c5:63:67:e3:e5:ce: ef:74:f4:b9:04:cf:12:fd:39:61:a5:e1:d8:da:28:e3:a3:ab: e6:e1:d5:90:bf:e2:0a:f1:38:05:36:d7:24:a7:25:14:22:9b: fe:11:f6:97:04:56:89:53:72:55:af:68:13:ca:c4:a1:12:86: 96:f4:c1:98:89:c7:77:d8:52:eb:2d:2c:ff:2b:dc:35:56:e5: 83:8e:08:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLGC+QgJh5fwfDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YzM1YzFlYzctZjI3ZC00NzMxLWE3NzgtY2JjMWFlZDNjMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaSpKlstuJW/4xH7jmyRy+vHIqlR/DBkxnxL 3Mag8BJNNzGWYJPhNGOOO2F3Zq23j5h17P6xpR88okp84BPgN+ZKcfGHN087tdAM R138+AE6tHvMIyEKiNuAu+j0n74e5bK/gmIsbI7mxBglscIF0iOTkz2Wvvd3dGnR nkUGi8kbyqUDDobssN28jpY3g62L71D2TRXz/ujW7/SRls/MeH7MiobR7z64UHaC oePMorTjFXsQXT4RNx4iKFYLdfbgO/GvrghSEPo5G0o1re4bnD4aFMkZcuZ9AOAX QYIwUDaZEb8S2n7OCZ0r+fCvbIc4vORCRFcJoW450bqqMWfMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe5wXRZ1agrEdiuuvC5JqjKXMw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYTk5M2E2MTktZWUxZS0z NDM4LTg5NGQtN2I4ZGZhNTJkMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnChiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqeSyWF4UirqeKdP42UDaT4MsCrGwgiVzsPVQ2lupKlr4otPMo6wisl +9UBkAB+smTaxLGR1iIT9Cz8X0VQG6OK7k08hb9aJC4cL47gQktG8mCpMDs5OA2Z pB2qi4kVn/RIqjt0893Dq3XGZqjmPXR1lZ2KgnrLIlB+/B9GOdMIAznnMTXCpEYc RrUHrHc4i2xGslEjBtrIcTrRuPjcn33XguF0zoWT3L+SXtx4fsVjZ+Plzu909LkE zxL9OWGl4djaKOOjq+bh1ZC/4grxOAU21ySnJRQim/4R9pcEVolTclWvaBPKxKES hpb0wZiJx3fYUustLP8r3DVW5YOOCOY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:35 2025 by rpki-client