$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f1181a43-c02e-3af9-b4be-1d7dca0476b3.roa File: f1181a43-c02e-3af9-b4be-1d7dca0476b3.roa (raw, json) Hash identifier: xRxK6OCDEhVMqrg4vXE/8euKKvU/hDt4hsnmx+qeeUQ= Subject key identifier: A6:55:ED:1C:2C:C1:C0:DD:51:04:3B:89:A9:82:42:D8:15:CE:54:5F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AFFE7C117024778893E6F4680 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f1181a43-c02e-3af9-b4be-1d7dca0476b3.roa Signing time: Wed 27 Aug 2025 21:38:51 +0000 ROA not before: Wed 27 Aug 2025 21:38:51 +0000 ROA not after: Tue 25 Nov 2025 22:38:51 +0000 asID: 22616 IP address blocks: 198.14.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:c1:17:02:47:78:89:3e:6f:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 27 21:38:51 2025 GMT Not After : Nov 25 22:38:51 2025 GMT Subject: CN=5035d5b0-7c94-4556-b486-aa2bfd2060e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:17:26:47:af:38:d2:4e:f9:9a:c0:a2:7c: bb:d4:da:7c:2f:e0:b1:37:ae:90:55:3b:28:a0:65: ed:97:e3:0f:f9:32:b9:e1:21:f9:9d:dd:58:32:ba: 75:2a:7c:c0:85:4d:94:f1:a3:50:ea:33:85:20:0a: cd:d4:3b:e5:ec:6c:46:36:80:d9:d4:11:1c:94:46: 90:c4:bf:fa:06:cb:b7:e6:81:e2:f7:17:7d:6f:ca: 6a:83:c1:e1:26:ed:3d:bf:bc:5d:97:c9:c9:5e:4f: b6:95:c1:a7:05:af:4a:1d:4f:f8:57:81:ce:e5:42: 38:e7:ba:19:67:88:b0:79:c7:a2:33:1d:2a:1e:67: 96:91:c6:84:f9:04:fa:87:a4:dc:ee:a5:50:b0:bb: f1:71:ea:e9:2f:80:c3:2f:fe:15:39:0f:5e:b3:16: 76:17:63:42:1b:d3:0f:67:f9:2e:f1:fc:39:90:f9: 58:b7:d7:ab:b8:f6:21:7f:e9:6a:15:ea:b9:5b:8c: 35:7e:16:ff:02:9a:0b:4e:6d:b8:bc:86:27:40:94: 30:b7:d9:db:75:12:3a:56:cd:83:27:7f:ff:36:38: c1:ff:5c:a4:0c:99:86:61:85:8f:9c:eb:58:f1:6a: a1:7f:25:1f:cd:4a:4a:09:e4:b9:fc:70:9b:d2:34: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:55:ED:1C:2C:C1:C0:DD:51:04:3B:89:A9:82:42:D8:15:CE:54:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f1181a43-c02e-3af9-b4be-1d7dca0476b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e6:36:26:d9:25:14:31:8f:aa:bc:0c:53:16:ff:18:ba:04: 99:ea:5f:8d:a9:a4:3a:78:fd:34:fb:4d:48:66:e2:99:23:4a: 94:1c:df:5c:2d:ad:53:e1:e1:7a:52:77:b5:a9:b1:79:49:98: be:ad:94:77:cb:9d:f9:68:05:c2:3a:fc:ea:47:c6:50:66:f8: 91:9f:c9:2f:51:35:6d:86:dc:1c:07:b2:97:08:53:45:f2:ef: df:3c:7e:ea:bb:6b:d8:f3:c2:2b:71:c3:5b:8e:82:cc:d7:a8: 1a:67:97:3a:a4:95:e0:32:06:47:cc:f0:a8:1e:35:5c:6e:03: a8:0e:72:8a:50:23:e2:a7:f8:10:9a:ee:6b:f9:49:ec:d4:6b: e1:4c:44:08:78:63:1c:53:ef:62:24:30:ac:82:18:03:21:7d: 42:11:fc:2c:2b:28:09:ca:95:28:b5:c1:ee:95:3a:02:8a:4d: 14:1c:b4:3f:c7:e7:e4:c7:99:5b:c2:01:ac:47:75:40:e4:ee: 13:34:37:27:42:0a:02:28:e0:1b:cf:5d:5f:13:08:8c:49:d7: 52:64:bd:77:c1:06:bc:41:54:9d:af:34:6d:de:57:a7:4e:be: d7:ae:7e:c4:7e:ba:9a:ca:2d:3a:94:93:7d:7c:b6:27:b1:0b: a7:cc:64:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/58EXAkd4iT5vRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyNzIxMzg1MVoXDTI1MTEyNTIyMzg1MVowLzEtMCsGA1UEAxMk NTAzNWQ1YjAtN2M5NC00NTU2LWI0ODYtYWEyYmZkMjA2MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjMXJkevONJO+ZrAony71Np8L+CxN66QVTso oGXtl+MP+TK54SH5nd1YMrp1KnzAhU2U8aNQ6jOFIArN1Dvl7GxGNoDZ1BEclEaQ xL/6Bsu35oHi9xd9b8pqg8HhJu09v7xdl8nJXk+2lcGnBa9KHU/4V4HO5UI457oZ Z4iweceiMx0qHmeWkcaE+QT6h6Tc7qVQsLvxcerpL4DDL/4VOQ9esxZ2F2NCG9MP Z/ku8fw5kPlYt9eruPYhf+lqFeq5W4w1fhb/ApoLTm24vIYnQJQwt9nbdRI6Vs2D J3//NjjB/1ykDJmGYYWPnOtY8WqhfyUfzUpKCeS5/HCb0jQSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZV7RwswcDdUQQ7iamCQtgVzlRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjExODFhNDMtYzAyZS0z YWY5LWI0YmUtMWQ3ZGNhMDQ3NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbmNibZJRQxj6q8DFMW/xi6BJnqX42ppDp4/TT7TUhm4pkjSpQc31wt rVPh4XpSd7WpsXlJmL6tlHfLnfloBcI6/OpHxlBm+JGfyS9RNW2G3BwHspcIU0Xy 7988fuq7a9jzwitxw1uOgszXqBpnlzqkleAyBkfM8KgeNVxuA6gOcopQI+Kn+BCa 7mv5SezUa+FMRAh4YxxT72IkMKyCGAMhfUIR/CwrKAnKlSi1we6VOgKKTRQctD/H 5+THmVvCAaxHdUDk7hM0NydCCgIo4BvPXV8TCIxJ11JkvXfBBrxBVJ2vNG3eV6dO vteufsR+uprKLTqUk318tiexC6fMZLI= -----END CERTIFICATE-----Generated at Sun Sep 7 16:14:35 2025 by rpki-client