$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa File: 43d601dd-3d32-35d5-9f2e-d40b27897027.roa (raw, json) Hash identifier: RxnU4ovQEz4tBApm6zjKs89ltl0S49jXJZB5NDP9jbg= Subject key identifier: 08:77:85:12:C3:7A:98:F6:66:53:03:29:BC:FB:E3:94:B5:25:E3:89 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B84EF8BE28F91347EB8E01080 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa Signing time: Tue 14 Oct 2025 13:17:03 +0000 ROA not before: Tue 14 Oct 2025 13:17:03 +0000 ROA not after: Mon 12 Jan 2026 14:17:03 +0000 asID: 30383 IP address blocks: 198.208.14.0/24 maxlen: 24 198.208.15.0/24 maxlen: 24 198.208.115.0/24 maxlen: 24 198.208.119.0/24 maxlen: 24 198.208.128.0/24 maxlen: 24 198.208.135.0/24 maxlen: 24 198.208.142.0/24 maxlen: 24 198.208.144.0/24 maxlen: 24 198.208.149.0/24 maxlen: 24 198.208.156.0/23 maxlen: 23 198.208.161.0/24 maxlen: 24 198.208.163.0/24 maxlen: 24 198.208.165.0/24 maxlen: 24 198.208.170.0/24 maxlen: 24 198.208.172.0/23 maxlen: 23 198.208.176.0/24 maxlen: 24 198.208.179.0/24 maxlen: 24 198.208.180.0/24 maxlen: 24 198.208.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:ef:8b:e2:8f:91:34:7e:b8:e0:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 14 13:17:03 2025 GMT Not After : Jan 12 14:17:03 2026 GMT Subject: CN=a9632ba9-bf71-4a94-a6c7-7259ca62d000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:02:1d:d3:7d:ac:f8:b4:8f:92:83:40:c0: d0:7f:3f:cf:da:e8:02:33:ab:6f:37:50:17:c2:63: 50:07:ec:00:5d:dd:12:fc:9b:87:6a:48:b1:b8:32: 6d:0e:46:ef:23:ce:d2:31:fe:c0:6d:9a:aa:0b:b0: 32:ea:17:a5:9c:e7:5b:fb:26:0b:d9:f8:0c:77:fa: 6a:c0:74:ce:27:a8:70:3b:83:e7:92:66:7c:83:b7: 69:73:3d:85:3d:05:48:09:e9:8a:54:17:eb:de:7f: 04:eb:8f:88:ba:3c:6d:b2:43:e2:7f:b3:45:78:cc: ef:eb:53:97:d0:d1:26:2b:48:d5:22:3c:1d:03:b4: e7:2f:1a:e4:b4:8a:7d:01:30:e5:32:5f:0e:54:4e: 63:92:07:a2:59:3c:ee:cb:23:c1:a8:c6:15:3b:27: 1f:fc:72:53:d8:1a:2f:a1:ea:54:0e:c4:24:5b:7c: e2:a4:7d:70:36:30:bf:ef:45:19:35:9f:2a:dc:55: 0f:f9:ba:67:c1:61:f7:99:a2:7a:51:34:6a:e4:6b: 0a:69:b8:c8:f2:0b:49:25:f9:7d:7c:40:48:42:ca: 8b:7d:c8:5e:ff:73:c8:e1:17:46:bb:f8:ad:ea:5b: f2:b5:e1:5d:90:2c:00:7f:67:02:e1:bd:d1:15:ed: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:77:85:12:C3:7A:98:F6:66:53:03:29:BC:FB:E3:94:B5:25:E3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.14.0/23 198.208.115.0/24 198.208.119.0/24 198.208.128.0/24 198.208.135.0/24 198.208.142.0/24 198.208.144.0/24 198.208.149.0/24 198.208.156.0/23 198.208.161.0/24 198.208.163.0/24 198.208.165.0/24 198.208.170.0/24 198.208.172.0/23 198.208.176.0/24 198.208.179.0-198.208.180.255 198.208.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:00:1b:ee:c9:c6:ce:8a:55:0a:68:a1:e2:04:06:58:d7:0c: 93:76:87:56:cd:46:9e:2c:49:f5:a7:70:99:b5:46:52:5d:18: db:bb:2b:77:f4:76:b7:df:dd:ff:08:0a:b6:52:71:59:36:a3: 3b:29:af:0a:6a:d9:3f:bd:86:52:1d:db:a8:c2:4e:b1:93:e0: bd:c3:a0:76:44:fc:a5:cf:60:b8:84:ef:27:8c:54:c0:04:62: 28:ee:a2:8a:c9:23:fd:7c:95:28:c6:df:0f:51:89:7e:82:ad: ea:21:d3:96:48:0d:49:87:ce:09:57:f9:a0:5c:41:7b:01:ee: 35:20:42:67:8e:95:d4:92:55:81:95:fa:c5:fb:27:9b:ae:98: 9d:2e:e3:43:05:38:bf:1e:2c:55:c9:cb:c5:21:bb:a4:ec:67: 41:32:c1:99:a2:8c:c7:20:3f:77:b8:17:51:c0:37:d4:f7:4f: 0a:e0:8e:9d:f0:d5:05:71:82:a9:ff:17:db:a6:95:49:26:9e: 2b:5c:84:8a:91:b9:4c:9d:11:04:f9:67:79:55:ee:de:88:c6: a7:21:1b:7d:f6:e4:f3:a5:3c:90:a3:a6:cd:95:44:39:53:b0: 7a:c8:96:50:0b:71:bf:f1:4e:50:e3:b7:7d:fa:e4:6c:f6:8e: 96:10:97:27 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUAQ0Mn0MoWEuE74vij5E0frjgEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTAxNDEzMTcwM1oXDTI2MDExMjE0MTcwM1owLzEtMCsGA1UEAxMk YTk2MzJiYTktYmY3MS00YTk0LWE2YzctNzI1OWNhNjJkMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8YCHdN9rPi0j5KDQMDQfz/P2ugCM6tvN1AX wmNQB+wAXd0S/JuHakixuDJtDkbvI87SMf7AbZqqC7Ay6helnOdb+yYL2fgMd/pq wHTOJ6hwO4PnkmZ8g7dpcz2FPQVICemKVBfr3n8E64+IujxtskPif7NFeMzv61OX 0NEmK0jVIjwdA7TnLxrktIp9ATDlMl8OVE5jkgeiWTzuyyPBqMYVOycf/HJT2Bov oepUDsQkW3zipH1wNjC/70UZNZ8q3FUP+bpnwWH3maJ6UTRq5GsKabjI8gtJJfl9 fEBIQsqLfche/3PI4RdGu/it6lvyteFdkCwAf2cC4b3RFe2n8wIDAQABo4IDvjCC A7owHQYDVR0OBBYEFAh3hRLDepj2ZlMDKbz745S1JeOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNDNkNjAxZGQtM2QzMi0z NWQ1LTlmMmUtZDQwYjI3ODk3MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAcbQDgME AMbQcwMEAMbQdwMEAMbQgAMEAMbQhwMEAMbQjgMEAMbQkAMEAMbQlQMEAcbQnAME AMbQoQMEAMbQowMEAMbQpQMEAMbQqgMEAcbQrAMEAMbQsDAMAwQAxtCzAwQAxtC0 AwQBxtC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAAAAG+7Jxs6KVQpooeIEBljXDJN2h1bNRp4sSfWncJm1 RlJdGNu7K3f0drff3f8ICrZScVk2ozsprwpq2T+9hlId26jCTrGT4L3DoHZE/KXP YLiE7yeMVMAEYijuoorJI/18lSjG3w9RiX6Creoh05ZIDUmHzglX+aBcQXsB7jUg QmeOldSSVYGV+sX7J5uumJ0u40MFOL8eLFXJy8Uhu6TsZ0EywZmijMcgP3e4F1HA N9T3Twrgjp3w1QVxgqn/F9umlUkmnitchIqRuUydEQT5Z3lV7t6IxqchG3325POl PJCjps2VRDlTsHrIllALcb/xTlDjt3365Gz2jpYQlyc= -----END CERTIFICATE-----Generated at Tue Nov 4 09:41:46 2025 by rpki-client