$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa File: 3e887907-436f-3d03-83e7-402b8cdf233a.roa (raw, json) Hash identifier: uZT6LYqboqfPKsCRn/1sJzcbJJ538wHUnYbIVNSL2jw= Subject key identifier: A5:FA:06:7B:19:E3:70:0C:58:F3:3F:2A:26:5E:36:DE:61:5C:1F:B1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AFFE846A891655666967A7380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa Signing time: Wed 27 Aug 2025 21:39:54 +0000 ROA not before: Wed 27 Aug 2025 21:39:54 +0000 ROA not after: Tue 25 Nov 2025 22:39:54 +0000 asID: 22616 IP address blocks: 198.14.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e8:46:a8:91:65:56:66:96:7a:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 27 21:39:54 2025 GMT Not After : Nov 25 22:39:54 2025 GMT Subject: CN=d925a81e-2fa9-4137-9e42-2e8070ac5009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:d6:15:ad:23:5d:c4:99:70:0f:4a:d2:11: f4:e0:0a:3d:46:1c:45:28:6c:dc:65:0a:59:ff:82: 75:b6:48:49:40:29:2e:f8:a6:f6:b9:80:05:df:f0: e2:96:fd:f7:2a:97:60:56:c8:f6:95:0f:a4:ce:90: c8:46:cc:b3:6a:42:7e:e5:bc:b1:e0:89:14:03:da: ad:b3:d3:8f:7a:9c:43:7b:c5:ce:e3:ab:a5:e5:0f: bf:46:d2:28:af:6e:10:91:d1:10:78:76:5a:c4:09: e4:5c:3a:d5:12:b7:aa:51:cc:f6:7f:a0:85:50:b1: 45:cc:b1:ce:8e:d0:57:15:00:22:04:03:ec:c5:df: a7:ef:0a:4a:60:2f:43:10:b3:e2:a1:46:6a:fb:bf: 92:4a:a8:1e:c2:20:ae:63:1e:7d:fa:37:20:bb:89: b1:7b:4f:e0:56:f3:99:b6:40:e4:8c:5b:12:83:8a: ec:fc:d3:81:5b:73:23:5e:c0:65:66:00:20:04:83: 71:52:44:fa:36:ad:28:6a:94:9b:8e:4f:44:26:b6: 4e:5e:ee:0c:a2:02:76:15:8d:fc:51:cf:f1:34:0c: 75:24:f9:76:a5:b8:92:49:29:1d:45:d3:5b:47:2a: 19:b5:bd:00:f4:94:c6:5c:92:3f:e6:d3:d3:44:e4: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FA:06:7B:19:E3:70:0C:58:F3:3F:2A:26:5E:36:DE:61:5C:1F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e887907-436f-3d03-83e7-402b8cdf233a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:34:6b:c8:25:68:17:99:13:27:15:f3:54:9b:a5:4b:8c:71: 9b:fd:74:ac:3a:0a:ea:9d:21:d7:78:c4:e6:6a:81:c0:f5:f6: e6:38:a0:b7:57:5e:6e:f3:aa:9d:b2:b3:3b:c9:b6:7e:16:31: 7b:64:6a:b0:c2:f1:f0:03:79:a2:f9:4b:97:b8:31:2e:13:e6: a6:da:ee:5f:00:fd:80:25:a7:d8:3d:70:af:6d:f3:ae:9c:3b: 35:ea:35:a1:72:ff:b1:be:83:28:40:84:c4:12:a6:cc:8c:44: 8a:5b:94:21:d3:d8:ba:e3:f4:b2:51:0e:99:0b:45:0a:a6:1b: ca:69:2d:0b:06:bb:cc:3e:60:b3:c0:c6:42:ac:3d:69:89:56: fc:8c:ff:9b:37:a7:61:b0:dd:27:d8:92:27:a5:01:56:b8:4a: 31:4f:17:ca:d3:4e:d6:a6:1a:d9:9f:d4:5a:61:98:0c:5b:db: fc:76:04:ce:1b:0a:da:da:a3:47:eb:b1:a8:b2:51:cd:a4:d6: ea:d3:ff:27:32:75:fe:6b:7b:82:75:f6:29:f9:bc:45:92:05: 11:d9:83:01:74:1b:59:f3:d1:b7:0b:02:f5:46:65:e6:1e:f4: ba:44:0b:0d:d3:8e:48:8b:d4:b7:d3:a7:14:6f:c2:c1:26:04: b9:8d:8b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/6EaokWVWZpZ6c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyNzIxMzk1NFoXDTI1MTEyNTIyMzk1NFowLzEtMCsGA1UEAxMk ZDkyNWE4MWUtMmZhOS00MTM3LTllNDItMmU4MDcwYWM1MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsfWFa0jXcSZcA9K0hH04Ao9RhxFKGzcZQpZ /4J1tkhJQCku+Kb2uYAF3/Dilv33KpdgVsj2lQ+kzpDIRsyzakJ+5byx4IkUA9qt s9OPepxDe8XO46ul5Q+/RtIor24QkdEQeHZaxAnkXDrVEreqUcz2f6CFULFFzLHO jtBXFQAiBAPsxd+n7wpKYC9DELPioUZq+7+SSqgewiCuYx59+jcgu4mxe0/gVvOZ tkDkjFsSg4rs/NOBW3MjXsBlZgAgBINxUkT6Nq0oapSbjk9EJrZOXu4MogJ2FY38 Uc/xNAx1JPl2pbiSSSkdRdNbRyoZtb0A9JTGXJI/5tPTROTX8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX6BnsZ43AMWPM/KiZeNt5hXB+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2U4ODc5MDctNDM2Zi0z ZDAzLTgzZTctNDAyYjhjZGYyMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo0a8glaBeZEycV81SbpUuMcZv9dKw6CuqdIdd4xOZqgcD19uY4oLdX Xm7zqp2yszvJtn4WMXtkarDC8fADeaL5S5e4MS4T5qba7l8A/YAlp9g9cK9t866c OzXqNaFy/7G+gyhAhMQSpsyMRIpblCHT2Lrj9LJRDpkLRQqmG8ppLQsGu8w+YLPA xkKsPWmJVvyM/5s3p2Gw3SfYkielAVa4SjFPF8rTTtamGtmf1FphmAxb2/x2BM4b Ctrao0frsaiyUc2k1urT/ycydf5re4J19in5vEWSBRHZgwF0G1nz0bcLAvVGZeYe 9LpECw3TjkiL1LfTpxRvwsEmBLmNiyE= -----END CERTIFICATE-----Generated at Sun Sep 7 16:15:36 2025 by rpki-client