$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa File: 958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json) Hash identifier: XDjmD+K0sI3zdS56JEHNTBrH+bwrcExZjMqWjUugIbA= Subject key identifier: 3B:D0:46:A3:83:22:60:33:59:D9:24:25:0F:36:89:A6:14:3A:22:40 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B7F520BF88ACFEDE5E1E42F80 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 56274 IP address blocks: 198.208.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0b:f8:8a:cf:ed:e5:e1:e4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=78f80570-adf3-4828-811a-e3b0c75b3a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:0a:9d:90:2f:20:83:cf:5b:84:28:ef:49: 68:2e:5c:0a:31:e2:df:67:86:52:8b:55:03:17:0a: d4:65:e9:0a:2d:b4:2a:63:d8:e9:c5:ab:76:93:4e: cf:2e:c3:83:6f:60:15:d7:ac:2c:d9:51:c7:69:ab: 12:40:0e:11:6b:5c:8f:ba:70:25:47:cd:e6:c3:2f: e1:c6:21:c4:92:2e:b2:b0:0c:b3:be:56:74:22:a3: 75:5d:92:8e:9d:05:18:60:45:81:60:f7:d8:0b:8d: 9d:b8:be:38:70:9f:17:7d:c1:ce:40:4c:74:ee:8e: e4:36:f6:bd:76:ea:ec:9a:f8:40:29:e7:4e:8b:cd: bf:77:4e:f5:a0:d2:dc:e3:08:ad:64:ea:07:87:d7: ea:fe:e1:e1:78:1a:e0:af:b9:4b:6d:b2:c7:08:f9: d0:7e:74:a7:ad:c3:60:94:b2:20:1b:e3:b9:54:0c: 70:07:65:61:e2:a0:d6:31:f0:3e:a2:ad:de:c5:6f: a0:6d:11:e0:30:cd:af:d3:08:e1:e3:60:f3:f9:af: ff:7e:7a:33:58:99:c2:bc:4a:35:ee:ca:fc:5f:c5: d4:5a:e1:3c:e6:e2:e3:31:6d:1e:be:d0:8a:cf:e2: a8:95:a9:68:16:e8:ee:e6:a1:e5:09:3f:5f:c1:f0: ef:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:46:A3:83:22:60:33:59:D9:24:25:0F:36:89:A6:14:3A:22:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ff:0e:af:36:87:47:96:c1:c7:49:8c:01:48:76:89:de:6a: c3:b7:54:44:89:e4:e7:6c:ad:66:09:d1:2e:2e:4d:be:88:aa: 9f:29:c5:f0:62:25:e6:07:34:08:01:ba:ec:49:1d:a1:8e:62: 99:98:88:ea:6e:59:67:96:8e:9d:4b:0f:03:4a:e2:73:93:ef: 40:c5:48:c9:48:80:dd:e4:58:98:55:de:1a:96:9e:c9:3f:ea: c2:e5:4a:9b:20:1e:43:ac:83:ff:5f:74:18:20:fa:2a:65:42: 2e:0d:3c:9c:38:76:b0:da:cc:5b:6b:f6:36:33:90:f0:a2:d6: 0c:7d:0c:57:72:1c:2a:79:24:c9:c6:7c:94:1d:40:7b:d0:ed: 32:db:91:f6:02:d1:59:33:0a:01:1e:de:cc:cd:41:d7:8a:dd: b0:8c:b9:d6:ea:9a:b9:a1:0a:47:78:08:70:0f:2d:c5:47:a0: d9:8b:5c:fb:e1:60:8d:1f:6f:15:28:13:77:88:fa:89:5d:ca: c2:60:d7:7e:b1:a4:2a:02:0c:a3:00:13:b6:03:54:d3:c3:5b: a8:09:eb:26:c4:73:20:36:eb:1f:4d:f4:e0:33:5b:39:5f:97: bf:96:05:0f:d2:27:56:1c:1e:0e:20:89:f1:2c:49:6a:39:0c: f1:a1:d2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ugv4is/t5eHkL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzhmODA1NzAtYWRmMy00ODI4LTgxMWEtZTNiMGM3NWIzYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ggKnZAvIIPPW4Qo70loLlwKMeLfZ4ZSi1UD FwrUZekKLbQqY9jpxat2k07PLsODb2AV16ws2VHHaasSQA4Ra1yPunAlR83mwy/h xiHEki6ysAyzvlZ0IqN1XZKOnQUYYEWBYPfYC42duL44cJ8XfcHOQEx07o7kNva9 dursmvhAKedOi82/d071oNLc4witZOoHh9fq/uHheBrgr7lLbbLHCPnQfnSnrcNg lLIgG+O5VAxwB2Vh4qDWMfA+oq3exW+gbRHgMM2v0wjh42Dz+a//fnozWJnCvEo1 7sr8X8XUWuE85uLjMW0evtCKz+KolaloFuju5qHlCT9fwfDvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvQRqODImAzWdkkJQ82iaYUOiJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH/Dq82h0eWwcdJjAFIdoneasO3VESJ5OdsrWYJ0S4uTb6Iqp8pxfBi JeYHNAgBuuxJHaGOYpmYiOpuWWeWjp1LDwNK4nOT70DFSMlIgN3kWJhV3hqWnsk/ 6sLlSpsgHkOsg/9fdBgg+iplQi4NPJw4drDazFtr9jYzkPCi1gx9DFdyHCp5JMnG fJQdQHvQ7TLbkfYC0VkzCgEe3szNQdeK3bCMudbqmrmhCkd4CHAPLcVHoNmLXPvh YI0fbxUoE3eI+oldysJg136xpCoCDKMAE7YDVNPDW6gJ6ybEcyA26x9N9OAzWzlf l7+WBQ/SJ1YcHg4gifEsSWo5DPGh0jk= -----END CERTIFICATE-----Generated at Tue Nov 4 17:19:30 2025 by rpki-client