$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa File: bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa (raw, json) Hash identifier: q17AoLRocE54JUkC36L3YJcdhq4Tspq4FmmXj2Bq380= Subject key identifier: 87:34:CE:B3:A9:C2:80:22:9D:F8:3A:58:26:E3:D7:17:8D:3A:1D:0D Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B13D6FE6694BF91378460D180 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 401585 IP address blocks: 198.176.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fe:66:94:bf:91:37:84:60:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=5aae8d0b-c3b0-4c16-ae1a-61b3961f9094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:42:b4:77:0d:e8:ae:70:c5:b4:bc:9e:89: a8:e5:4a:1b:3c:41:2f:10:4f:4d:51:ca:fb:14:9e: a2:9e:8e:1f:6d:34:01:68:d9:66:6e:c9:b9:2c:4d: d0:36:f8:f5:e9:74:9c:66:7f:ea:b0:ef:de:ae:f8: 3e:81:c5:35:c5:31:4c:55:5a:77:de:36:db:f1:95: 79:26:91:e0:e4:87:64:03:c1:c9:53:17:0b:bd:72: d9:42:1a:1b:e0:ec:39:3f:2c:1b:ef:30:2d:41:17: aa:78:60:9a:ef:07:e8:bd:84:f9:71:ab:75:87:ce: f0:2c:f7:17:c1:4c:1c:d8:67:fd:08:30:4a:1f:b5: 14:d2:c2:b1:91:28:c2:12:8b:88:09:25:54:ce:1f: 19:54:9d:4e:63:64:b8:4d:1e:18:a1:b4:df:96:d1: 49:cb:c0:29:89:91:3f:11:47:23:75:21:1e:1e:93: 98:78:f7:87:bd:97:d5:b1:d5:65:4b:ce:7e:b5:4f: 58:7e:5c:66:38:09:8f:a3:98:5a:db:a0:4b:e3:19: d7:50:a2:05:2f:36:68:f8:fa:c9:f0:f9:a5:b3:91: 75:32:e9:59:55:96:d1:b7:3c:ff:3b:f1:39:ae:8b: 1a:1d:56:d1:5b:60:db:0e:23:7a:d5:3c:24:34:4a: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:34:CE:B3:A9:C2:80:22:9D:F8:3A:58:26:E3:D7:17:8D:3A:1D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 198.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:95:e5:02:18:e7:2e:50:4c:a8:db:bd:51:8f:47:de:40:fb: 59:d4:d4:2b:1d:7a:97:e9:c1:48:8c:67:88:53:d6:74:94:61: 92:5c:de:8f:d7:79:6d:06:79:71:08:59:72:c9:d2:88:2e:82: 97:80:ef:45:31:1c:d8:92:d6:d0:9c:3b:44:8d:51:89:6e:12: 8f:e5:05:6c:cf:9f:91:8c:6c:a5:54:52:96:78:1d:25:b6:69: 3a:98:69:8a:05:69:b9:81:0e:39:ca:e8:ad:45:90:87:02:d5: 03:42:8b:99:25:82:6d:71:06:6f:82:9f:47:b6:d9:f9:7f:dd: 7a:79:b0:3e:db:b3:62:a5:d1:9d:74:ed:65:29:4f:73:4e:0f: 10:5d:59:28:0d:d7:5b:15:ab:fd:8e:7e:9f:6d:2c:4e:1b:8e: 77:f8:a7:40:8f:e7:72:f9:08:b9:26:d2:a4:87:26:f9:68:6b: 12:44:f6:23:48:e4:aa:c5:7f:36:07:6c:df:a9:f3:20:33:b5: 8a:97:3d:5b:95:9e:3b:64:fb:ff:df:0c:f9:24:a9:22:94:22: ed:bb:a4:1f:99:65:84:ec:12:b1:4d:f8:e2:ed:70:3e:dd:d1: 2d:ef:f4:d1:df:37:a7:f1:2c:a9:1e:d2:19:e3:3b:7e:37:08: 40:83:0d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1v5mlL+RN4Rg0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NWFhZThkMGItYzNiMC00YzE2LWFlMWEtNjFiMzk2MWY5MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n9CtHcN6K5wxbS8nomo5UobPEEvEE9NUcr7 FJ6ino4fbTQBaNlmbsm5LE3QNvj16XScZn/qsO/ervg+gcU1xTFMVVp33jbb8ZV5 JpHg5IdkA8HJUxcLvXLZQhob4Ow5Pywb7zAtQReqeGCa7wfovYT5cat1h87wLPcX wUwc2Gf9CDBKH7UU0sKxkSjCEouICSVUzh8ZVJ1OY2S4TR4YobTfltFJy8ApiZE/ EUcjdSEeHpOYePeHvZfVsdVlS85+tU9YflxmOAmPo5ha26BL4xnXUKIFLzZo+PrJ 8Pmls5F1MulZVZbRtzz/O/E5rosaHVbRW2DbDiN61TwkNEonLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc0zrOpwoAinfg6WCbj1xeNOh0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYmRkNDI0YmQtNTk1NS0z ZWE0LTkyZDYtNTA5YWEzYmUxOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExrAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByV5QIY5y5QTKjbvVGPR95A+1nU1CsdepfpwUiMZ4hT1nSUYZJc3o/X eW0GeXEIWXLJ0ogugpeA70UxHNiS1tCcO0SNUYluEo/lBWzPn5GMbKVUUpZ4HSW2 aTqYaYoFabmBDjnK6K1FkIcC1QNCi5klgm1xBm+Cn0e22fl/3Xp5sD7bs2Kl0Z10 7WUpT3NODxBdWSgN11sVq/2Ofp9tLE4bjnf4p0CP53L5CLkm0qSHJvloaxJE9iNI 5KrFfzYHbN+p8yAztYqXPVuVnjtk+//fDPkkqSKUIu27pB+ZZYTsErFN+OLtcD7d 0S3v9NHfN6fxLKke0hnjO343CECDDec= -----END CERTIFICATE-----Generated at Sat Sep 6 07:31:50 2025 by rpki-client