$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa File: 3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa (raw, json) Hash identifier: Sf5p3QI+8ztHQQWCIIxqlyYl/iJuI7qW/dVOj97NSh0= Subject key identifier: 99:81:D4:5C:F1:81:8B:7C:6A:DB:D1:1F:F2:E5:0D:3F:1E:58:D5:57 Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584B153C268894B4B1EC3C4D3398 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 13538 IP address blocks: 198.32.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:26:88:94:b4:b1:ec:3c:4d:33:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=990c6613-aa84-4e08-9465-88df3a03f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:64:f5:3b:10:4f:3d:82:c3:ce:cd:fc:f1: 8a:c6:cb:8d:f2:17:dd:ed:82:31:8c:04:38:f0:88: 1e:32:da:03:d7:a5:b4:da:dc:fd:98:92:ad:7c:f2: f6:91:7d:ce:70:2b:97:45:30:e9:59:79:96:3b:e9: 19:83:bd:7b:b9:79:d7:eb:e5:3e:05:af:2d:2a:85: 19:de:73:40:9a:3e:45:f0:f1:d8:d3:8e:7a:c0:77: 30:84:e2:42:c7:a3:b7:61:71:56:bc:3a:f3:12:31: 4e:ed:78:54:08:3e:03:99:d9:5c:f6:db:a9:3e:b0: f0:b3:65:0d:06:1e:98:c2:7a:51:44:7f:c5:9f:13: 73:12:95:71:ac:92:4f:eb:70:3a:af:37:66:65:80: 56:73:51:c3:8f:31:b8:c6:f1:f2:e0:6f:7b:03:d8: 62:48:6e:86:b0:6a:37:f2:8e:80:9c:3d:2a:99:a0: 94:13:a3:bd:10:06:97:24:fc:0c:bd:8a:b8:35:ca: ce:e4:e3:30:b4:8e:7b:55:99:56:c6:74:ee:9d:b6: de:d4:7f:50:e1:27:95:9f:36:b3:6a:4f:38:b9:2d: 18:cf:3d:6b:35:6b:16:6e:e1:2d:0b:ff:6f:0f:2c: bd:b9:1b:8f:19:1d:25:b8:7a:98:fa:b6:32:d6:40: cf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:81:D4:5C:F1:81:8B:7C:6A:DB:D1:1F:F2:E5:0D:3F:1E:58:D5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2f:84:00:58:63:b0:01:bf:99:68:7b:db:60:e5:1a:88:75: 31:44:31:f3:04:14:42:cb:41:64:e5:e9:57:ae:79:0b:f9:70: a7:9a:77:25:fe:0b:2f:99:4a:03:8f:f4:0a:c8:e0:6e:56:2b: 55:70:8f:78:e2:96:69:07:18:3b:d2:d0:0e:2a:a9:13:2f:5b: fd:a9:1f:5f:55:09:3c:eb:f7:1f:20:7d:e9:13:f9:11:06:5b: c8:fb:8f:a5:35:12:ab:82:6d:ea:ac:60:e3:8d:cf:e7:fa:45: 65:e0:5a:ec:23:c8:91:90:a8:a5:68:4c:6e:7b:87:32:fa:83: fa:22:95:e3:9f:04:66:c8:05:ee:b5:48:fd:1a:95:6f:b5:d2: e5:bf:47:90:ed:5d:26:2d:ec:63:94:35:9a:d9:7f:4c:7d:63: 12:b3:19:33:86:55:b9:bf:d5:55:34:a3:21:f5:63:6e:8b:09: 48:ad:57:41:02:44:59:fa:a3:6b:c4:ab:f9:42:f7:c8:ac:8b: ba:7d:9e:fd:b0:33:f1:34:85:48:e6:ac:07:a5:7f:7b:ce:21: c1:1e:f4:84:fe:5a:87:74:b0:b7:e6:01:dd:c1:a2:49:45:a8: 85:fc:ec:4c:5d:68:e3:9d:03:76:74:b5:96:49:f1:7b:07:77: 6a:bb:60:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCaIlLSx7DxNM5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk OTkwYzY2MTMtYWE4NC00ZTA4LTk0NjUtODhkZjNhMDNmMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMpk9TsQTz2Cw87N/PGKxsuN8hfd7YIxjAQ4 8IgeMtoD16W02tz9mJKtfPL2kX3OcCuXRTDpWXmWO+kZg717uXnX6+U+Ba8tKoUZ 3nNAmj5F8PHY0456wHcwhOJCx6O3YXFWvDrzEjFO7XhUCD4Dmdlc9tupPrDws2UN Bh6YwnpRRH/FnxNzEpVxrJJP63A6rzdmZYBWc1HDjzG4xvHy4G97A9hiSG6GsGo3 8o6AnD0qmaCUE6O9EAaXJPwMvYq4NcrO5OMwtI57VZlWxnTunbbe1H9Q4SeVnzaz ak84uS0Yzz1rNWsWbuEtC/9vDyy9uRuPGR0luHqY+rYy1kDP4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmB1FzxgYt8atvRH/LlDT8eWNVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvM2M2NTRjZDAtZmU2Zi0z ODhmLWFkOGEtZTdkZDA1NzZjMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUvhABYY7ABv5loe9tg5RqIdTFEMfMEFELLQWTl6VeueQv5cKeadyX+ Cy+ZSgOP9ArI4G5WK1Vwj3jilmkHGDvS0A4qqRMvW/2pH19VCTzr9x8gfekT+REG W8j7j6U1EquCbeqsYOONz+f6RWXgWuwjyJGQqKVoTG57hzL6g/oileOfBGbIBe61 SP0alW+10uW/R5DtXSYt7GOUNZrZf0x9YxKzGTOGVbm/1VU0oyH1Y26LCUitV0EC RFn6o2vEq/lC98isi7p9nv2wM/E0hUjmrAelf3vOIcEe9IT+Wod0sLfmAd3BoklF qIX87ExdaOOdA3Z0tZZJ8XsHd2q7YNc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:25 2025 by rpki-client