$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa File: 74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa (raw, json) Hash identifier: 4rHa7MEKHrL8X0+DNcmoJfO4eXry5PgSsZtmVuv3Wek= Subject key identifier: 96:D4:D8:D8:84:87:66:BA:60:FC:63:0A:6A:CE:3C:44:5C:6F:A9:D6 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F4328584B5141BCAA06A2B42B36ACB780 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 198949 IP address blocks: 198.135.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bc:aa:06:a2:b4:2b:36:ac:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=3703450a-ce10-4181-95c3-41b797f2918f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:9f:45:7f:69:7c:60:16:b2:6e:8c:7d:9e: 57:0c:1b:8a:a2:aa:d4:c6:55:39:1b:a6:c7:8c:41: 6d:61:e9:d4:e9:81:2b:19:53:cf:10:b8:19:e6:53: ab:84:ee:54:21:35:8a:50:7e:48:10:4e:98:39:7d: 33:72:39:93:96:5b:08:21:88:f6:40:df:f6:a5:e1: 3b:3a:57:04:8c:92:85:34:15:36:11:60:d2:6f:8c: df:0f:d0:d0:fc:f0:22:59:ed:8e:63:c5:63:68:01: c8:05:6a:7b:d7:e7:0e:a8:e3:01:a9:bf:5f:f6:db: e5:ac:93:73:36:41:18:07:11:40:86:00:b3:f8:58: fd:87:ff:d8:23:bc:ba:5c:29:67:52:11:ab:1b:96: 26:09:4f:d5:a6:54:eb:d8:71:81:79:19:a2:c0:00: b6:01:78:f2:9e:b0:50:18:3f:67:b8:6a:90:db:3b: 59:19:29:2a:d3:29:0c:23:9a:ca:7d:6e:d2:61:0f: 05:1b:c1:93:a5:e2:62:ce:21:34:1f:0c:fe:6c:d4: 85:02:3d:09:b1:65:9e:42:3d:b3:ef:e6:81:be:46: 57:c1:8e:0b:02:b1:0b:16:4b:50:86:df:f7:00:b6: a6:c2:26:97:48:71:3e:c1:51:4e:c2:64:c9:3b:09: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:D8:D8:84:87:66:BA:60:FC:63:0A:6A:CE:3C:44:5C:6F:A9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 198.135.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c0:6e:6b:0d:1e:02:f4:dd:ae:84:36:15:25:d2:98:da:90: 6b:75:86:d6:29:ae:bb:f3:69:e2:5d:f2:b4:97:9e:74:f8:2a: 81:2d:c0:26:f8:2a:ef:be:54:59:3b:69:b2:b2:52:65:a4:23: ad:33:60:75:5f:af:5a:20:fd:c2:a1:df:82:4c:7e:46:7a:a4: 76:d5:d6:30:81:f1:68:46:3e:c6:fa:f7:2c:02:bc:73:d7:d3: 36:a6:f2:73:ca:35:97:6f:7c:e6:65:ae:b4:b3:34:f2:94:1c: 1e:14:43:58:bc:3e:7f:1e:ca:8e:e9:08:70:6a:f5:d8:0b:52: 3b:80:40:8d:e5:de:82:8a:2c:00:58:7c:6a:ab:30:40:b5:7d: d3:fc:e0:5e:51:a9:71:59:ae:bd:21:02:e8:5c:59:1e:e2:ee: 85:0f:58:5a:02:00:5f:77:ef:da:ac:8e:97:f2:dc:4b:7a:d4: 4a:cb:85:84:70:46:3e:f2:eb:56:8e:e6:8c:f8:e8:7d:fc:c1: dc:a5:35:49:ee:85:75:6c:6c:18:d2:cb:b1:4f:db:d3:89:4e: 21:12:cc:f3:80:1a:de:ca:db:4e:c5:d3:0e:c2:3b:76:17:84: 93:b4:a4:3b:4a:48:6b:73:3f:bb:99:70:ef:0f:05:27:d0:9e: 62:62:08:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbyqBqK0Kzast4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MzcwMzQ1MGEtY2UxMC00MTgxLTk1YzMtNDFiNzk3ZjI5MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEafRX9pfGAWsm6MfZ5XDBuKoqrUxlU5G6bH jEFtYenU6YErGVPPELgZ5lOrhO5UITWKUH5IEE6YOX0zcjmTllsIIYj2QN/2peE7 OlcEjJKFNBU2EWDSb4zfD9DQ/PAiWe2OY8VjaAHIBWp71+cOqOMBqb9f9tvlrJNz NkEYBxFAhgCz+Fj9h//YI7y6XClnUhGrG5YmCU/VplTr2HGBeRmiwAC2AXjynrBQ GD9nuGqQ2ztZGSkq0ykMI5rKfW7SYQ8FG8GTpeJiziE0Hwz+bNSFAj0JsWWeQj2z 7+aBvkZXwY4LArELFktQht/3ALamwiaXSHE+wVFOwmTJOwmflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbU2NiEh2a6YPxjCmrOPERcb6nWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvNzRkM2ZiMWQtY2RiMC0z ODRmLThjMTQtNGRkNDA1Y2Q5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjAbmsNHgL03a6ENhUl0pjakGt1htYprrvzaeJd8rSXnnT4KoEtwCb4 Ku++VFk7abKyUmWkI60zYHVfr1og/cKh34JMfkZ6pHbV1jCB8WhGPsb69ywCvHPX 0zam8nPKNZdvfOZlrrSzNPKUHB4UQ1i8Pn8eyo7pCHBq9dgLUjuAQI3l3oKKLABY fGqrMEC1fdP84F5RqXFZrr0hAuhcWR7i7oUPWFoCAF9379qsjpfy3Et61ErLhYRw Rj7y61aO5oz46H38wdylNUnuhXVsbBjSy7FP29OJTiESzPOAGt7K207F0w7CO3YX hJO0pDtKSGtzP7uZcO8PBSfQnmJiCEg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:40 2025 by rpki-client