$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa File: 85a54aff-5d43-3350-b694-903671b40801.roa (raw, json) Hash identifier: ug72gMkBTAQNOP7bY3Lxab6rk3B3/VU51FhiEEfbWTg= Subject key identifier: 3F:14:26:8B:8E:23:E3:76:0F:70:41:22:FE:13:25:58:3E:F6:E7:2B Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584B153C0F45A0033898D6013B80 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 13538 IP address blocks: 198.32.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:0f:45:a0:03:38:98:d6:01:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=54a7d4f9-b339-43da-8ef5-4aed4c0ced6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:73:f9:09:50:ea:97:55:40:f0:cd:22:1a: dd:b9:72:c5:46:c5:14:d7:b1:c2:8b:d7:9f:87:fc: 06:85:d0:7e:43:69:48:01:d1:ba:a4:1f:91:9c:9a: 9a:65:af:8f:d9:e4:40:a5:73:c1:3b:69:27:cb:86: c5:f3:a7:60:b3:7a:30:a5:fd:b0:2a:0f:c3:c2:3f: bb:21:76:06:56:50:43:f9:8b:2b:58:80:48:4f:0d: 1c:9f:79:34:01:36:ec:3f:c8:af:6e:27:14:fe:90: ca:b3:9d:0a:a9:64:86:f5:7b:29:bc:b4:4e:f1:f6: 8a:51:51:33:f5:10:ec:f3:49:84:ae:46:5f:ba:be: 55:35:b7:af:1a:b0:0b:da:d7:e4:3a:02:52:df:1e: 76:47:11:08:ed:68:b2:da:2d:9d:ff:04:be:73:ab: a1:ff:cc:ff:d7:3f:ab:13:97:6c:47:95:84:1e:a0: ac:50:43:b8:6e:b9:a1:52:1f:9b:6e:f6:d1:19:f1: da:5e:7a:c3:0e:ca:98:58:41:fb:ba:f0:56:88:8d: 94:be:74:df:f5:2e:46:d8:91:9d:06:a7:09:5d:7e: 6f:a9:0c:e5:3d:0f:74:97:80:74:0d:53:88:fc:ed: dd:ca:ec:c9:6b:b0:30:f5:20:5a:2e:6d:7b:09:b6: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:26:8B:8E:23:E3:76:0F:70:41:22:FE:13:25:58:3E:F6:E7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:86:a6:c8:a8:e1:e0:a1:7b:7f:4d:a7:71:fc:fc:28:04:36: 18:49:b7:e1:4a:63:84:93:a0:0e:c3:fc:d6:f4:5a:85:b0:73: be:81:b8:d0:78:35:6f:bf:6c:7c:42:7c:4f:9f:90:b9:96:69: c6:7f:3a:ea:d3:8d:a9:40:53:c8:21:48:54:c4:06:ad:d0:38: 17:76:f2:a2:7b:46:2a:92:42:77:28:da:be:ab:7c:f3:b3:04: 8d:9a:fc:a8:e8:14:fe:73:8d:4a:3f:f6:21:b9:4c:18:8e:84: ff:a5:c1:a2:56:0a:90:46:82:b1:83:21:18:bc:64:fa:6c:40: 93:ba:77:77:df:90:8a:aa:f3:5b:af:87:0b:63:b2:7d:c7:2a: 9e:73:15:f0:4f:cc:3e:64:25:64:f4:aa:2c:b7:29:65:be:bf: eb:23:28:ea:85:6e:42:bb:97:2b:30:1d:bd:e8:dc:af:ba:3d: 59:78:0c:54:b3:51:a9:1d:85:1f:a9:5b:d5:2b:69:03:cd:96: 05:a8:5b:81:38:3a:cc:1f:15:50:c0:23:58:ee:ca:85:49:3b: e3:d0:3d:79:2b:5f:ca:39:74:ff:d1:55:04:b3:6a:4e:96:d2: 4d:9e:9a:17:82:3b:26:76:70:06:7e:ab:c4:94:e2:c3:b4:c5: 26:b5:b6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPA9FoAM4mNYBO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NTRhN2Q0ZjktYjMzOS00M2RhLThlZjUtNGFlZDRjMGNlZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNz+QlQ6pdVQPDNIhrduXLFRsUU17HCi9ef h/wGhdB+Q2lIAdG6pB+RnJqaZa+P2eRApXPBO2kny4bF86dgs3owpf2wKg/Dwj+7 IXYGVlBD+YsrWIBITw0cn3k0ATbsP8ivbicU/pDKs50KqWSG9XspvLRO8faKUVEz 9RDs80mErkZfur5VNbevGrAL2tfkOgJS3x52RxEI7Wiy2i2d/wS+c6uh/8z/1z+r E5dsR5WEHqCsUEO4brmhUh+bbvbRGfHaXnrDDsqYWEH7uvBWiI2UvnTf9S5G2JGd BqcJXX5vqQzlPQ90l4B0DVOI/O3dyuzJa7Aw9SBaLm17CbYjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8UJouOI+N2D3BBIv4TJVg+9ucrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvODVhNTRhZmYtNWQ0My0z MzUwLWI2OTQtOTAzNjcxYjQwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICGpsio4eChe39Np3H8/CgENhhJt+FKY4SToA7D/Nb0WoWwc76BuNB4 NW+/bHxCfE+fkLmWacZ/OurTjalAU8ghSFTEBq3QOBd28qJ7RiqSQnco2r6rfPOz BI2a/KjoFP5zjUo/9iG5TBiOhP+lwaJWCpBGgrGDIRi8ZPpsQJO6d3ffkIqq81uv hwtjsn3HKp5zFfBPzD5kJWT0qiy3KWW+v+sjKOqFbkK7lyswHb3o3K+6PVl4DFSz UakdhR+pW9UraQPNlgWoW4E4OswfFVDAI1juyoVJO+PQPXkrX8o5dP/RVQSzak6W 0k2emheCOyZ2cAZ+q8SU4sO0xSa1tjk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:55:47 2025 by rpki-client