$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/fa7d294c-aa43-3537-9d42-17f4eb868794.roa File: fa7d294c-aa43-3537-9d42-17f4eb868794.roa (raw, json) Hash identifier: kY+pq3SltWZoR2RwhYFtdTIfKPKfRTFvRqWzBNmqHH0= Subject key identifier: 97:29:98:C5:F1:3A:2F:A7:F0:77:27:71:92:A1:27:47:83:48:4E:F7 Certificate issuer: /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Certificate serial: 010D0C9F4328584B08ABF0AE33088124C4CE8880 Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/fa7d294c-aa43-3537-9d42-17f4eb868794.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 4150 IP address blocks: 198.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:f0:ae:33:08:81:24:c4:ce:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=d786ba05-90d4-49bb-a7f0-9076660f4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:81:00:3e:cb:82:90:7d:12:24:ca:2b:5c: 40:b7:e2:e9:42:2c:1a:b0:24:dd:e9:63:63:80:07: 26:c6:a2:ce:16:54:3e:a8:7c:93:95:d7:ba:0d:29: 38:a2:c5:ce:af:79:8c:ad:70:6b:dc:1a:54:3e:ad: dd:ec:87:39:da:b8:7e:e5:87:f0:be:f8:83:23:00: 85:26:a3:61:2d:ad:7c:ec:65:f3:5d:d8:f7:24:3f: 6b:74:47:50:db:80:87:e8:ea:fa:3f:11:0c:09:ea: 77:f1:74:fd:34:47:2c:b2:2b:22:a3:b5:aa:3f:9a: 34:43:f6:7f:1a:d8:b0:53:3a:36:b8:ec:4e:65:8b: 5f:45:02:6f:8d:1b:4f:6d:0e:74:6a:ad:a2:bd:dd: dd:81:66:db:99:cd:a8:d6:3d:3a:6c:01:b1:3e:38: a2:85:86:63:d6:f9:82:a9:4a:70:b1:19:00:ce:2f: be:94:7b:11:87:ac:f7:b5:1d:7d:18:12:ad:d0:df: 90:9d:59:88:60:4a:c8:c7:a9:65:98:69:b9:1a:6a: 83:8e:c8:e0:fe:b7:b4:d4:cd:d4:15:da:cf:62:59: ad:98:29:52:4e:17:fc:6a:d5:15:89:4e:96:e4:09: 9c:07:6b:a4:10:11:58:4f:c0:7f:8f:8b:b2:b3:b0: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:29:98:C5:F1:3A:2F:A7:F0:77:27:71:92:A1:27:47:83:48:4E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/fa7d294c-aa43-3537-9d42-17f4eb868794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl X509v3 Authority Key Identifier: keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer sbgp-ipAddrBlock: critical IPv4: 198.27.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3e:ca:cf:df:8e:1b:c8:53:6b:b8:7e:d8:60:30:d3:cd:b0: 7c:7a:62:1e:0c:0a:30:88:82:d3:1e:42:3d:dd:58:a1:59:65: 1d:7a:dd:c7:c1:30:e4:69:98:31:4e:7f:cb:c9:15:13:72:fc: 54:5c:10:5b:c0:a4:8a:f1:a8:8e:fd:fa:6d:da:a0:4a:c4:07: a3:48:3d:ea:72:86:69:ba:25:72:e6:cd:71:51:d3:dd:30:ed: 50:f9:03:85:59:82:29:1d:27:46:2a:8a:23:a7:b4:a0:11:a0: c1:53:59:c0:22:7f:9e:58:3f:ad:a0:72:7c:f4:c5:3e:e2:74: 69:e7:60:32:80:ee:cb:99:46:b5:3f:de:ac:ae:93:05:43:56: ca:c6:29:41:00:a4:7b:fa:b2:f6:28:93:ed:8e:dd:66:9c:32: 47:1f:82:e0:d2:59:56:b4:8c:58:75:1f:b7:1d:3c:4c:cb:56: 97:d7:54:10:82:b2:9c:43:3c:fd:27:45:ff:e2:45:bc:24:87: 6b:ba:cf:c6:28:84:34:e9:b2:5a:a6:9a:ba:28:3f:1b:7a:dd: fe:7f:82:6b:df:d9:f9:2f:d6:22:08:d2:36:9e:15:1f:4d:a6: 99:7f:d7:f0:15:90:c0:14:bd:e5:5f:4f:0e:9c:4f:97:d8:76: cc:70:5c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq/CuMwiBJMTOiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1 ZmQyMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDc4NmJhMDUtOTBkNC00OWJiLWE3ZjAtOTA3NjY2MGY0NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+BAD7LgpB9EiTKK1xAt+LpQiwasCTd6WNj gAcmxqLOFlQ+qHyTlde6DSk4osXOr3mMrXBr3BpUPq3d7Ic52rh+5YfwvviDIwCF JqNhLa187GXzXdj3JD9rdEdQ24CH6Or6PxEMCep38XT9NEcssisio7WqP5o0Q/Z/ GtiwUzo2uOxOZYtfRQJvjRtPbQ50aq2ivd3dgWbbmc2o1j06bAGxPjiihYZj1vmC qUpwsRkAzi++lHsRh6z3tR19GBKt0N+QnVmIYErIx6llmGm5GmqDjsjg/re01M3U FdrPYlmtmClSThf8atUViU6W5AmcB2ukEBFYT8B/j4uys7C6wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcpmMXxOi+n8HcncZKhJ0eDSE73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3 OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvZmE3ZDI5NGMtYWE0My0z NTM3LTlkNDItMTdmNGViODY4Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWY0NzllMTMtNTVhMS00YTVkLWEw MDItMTE3MGEwZmY1ZmQyLzFmNDc5ZTEzLTU1YTEtNGE1ZC1hMDAyLTExNzBhMGZm NWZkMi5jcmwwHwYDVR0jBBgwFoAUqLXSOrVPs0AvMi4sLER4Y/pWWLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcw YTBmZjVmZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs+ys/fjhvIU2u4fthgMNPNsHx6Yh4MCjCIgtMeQj3dWKFZZR163cfB MORpmDFOf8vJFRNy/FRcEFvApIrxqI79+m3aoErEB6NIPepyhmm6JXLmzXFR090w 7VD5A4VZgikdJ0YqiiOntKARoMFTWcAif55YP62gcnz0xT7idGnnYDKA7suZRrU/ 3qyukwVDVsrGKUEApHv6svYok+2O3WacMkcfguDSWVa0jFh1H7cdPEzLVpfXVBCC spxDPP0nRf/iRbwkh2u6z8YohDTpslqmmrooPxt63f5/gmvf2fkv1iII0jaeFR9N ppl/1/AVkMAUveVfTw6cT5fYdsxwXFc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:12 2025 by rpki-client