$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa File: bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa (raw, json) Hash identifier: gJvyPdadYZDWEo8XRZet5O8FRnrCIj6sH7N/5+c/u+0= Subject key identifier: B8:E2:4B:A1:D1:FE:B6:5D:2A:14:18:16:26:3D:43:7A:FE:FA:8E:C8 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B84F493BA8391F7C6BD1F1D40 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa Signing time: Tue 14 Oct 2025 13:27:12 +0000 ROA not before: Tue 14 Oct 2025 13:27:12 +0000 ROA not after: Mon 12 Jan 2026 14:27:12 +0000 asID: 30383 IP address blocks: 198.208.8.0/24 maxlen: 24 198.208.56.0/23 maxlen: 23 198.208.66.0/24 maxlen: 24 198.208.72.0/24 maxlen: 24 198.208.74.0/24 maxlen: 24 198.208.75.0/24 maxlen: 24 198.208.80.0/23 maxlen: 23 198.208.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:f4:93:ba:83:91:f7:c6:bd:1f:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Oct 14 13:27:12 2025 GMT Not After : Jan 12 14:27:12 2026 GMT Subject: CN=84bdb965-84db-4c29-babc-f2df8590b0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:d2:e1:9e:3e:98:bc:5a:62:4d:9e:5b:48: da:85:21:13:53:22:a2:8c:9c:7f:60:db:35:3c:c6: 03:5c:d6:37:7d:6e:78:75:4b:6e:93:3d:10:f0:b4: 4a:2a:71:5b:e1:52:53:b2:59:65:eb:de:eb:f1:7a: b0:0f:a2:16:54:59:84:97:91:07:a1:23:dc:a6:f3: da:ad:88:2f:01:b6:51:fc:9f:4c:0f:8d:34:1c:d2: 79:81:ed:fe:0c:e9:a3:ef:2b:ab:82:74:8c:eb:7a: 44:85:8f:ca:cf:d3:08:6f:fa:4b:18:19:9c:18:0a: b3:83:4e:45:36:a0:88:19:74:c0:f0:0d:a6:c8:00: 6b:d3:bc:60:df:ef:43:5f:dc:35:73:45:5c:c4:09: 0c:9c:d1:b5:72:33:6b:0b:f9:2c:d5:dd:7f:d8:95: 5a:ea:c3:a8:47:a9:dd:c3:2a:ea:69:fa:4a:24:b5: 55:fa:f1:e8:99:66:5e:75:f3:1a:f6:eb:df:8b:a3: f7:b7:01:33:4a:de:31:d6:8a:68:c2:d1:9d:aa:a1: f4:b4:4d:2c:a6:16:91:50:2a:bd:44:31:10:5a:63: 6c:73:1b:10:2a:3d:0c:a5:9b:eb:df:b7:7e:8f:dd: 68:41:6a:c3:73:68:aa:cb:0f:1b:e5:1c:5f:55:f6: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:4B:A1:D1:FE:B6:5D:2A:14:18:16:26:3D:43:7A:FE:FA:8E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/bd7bb650-bbec-30f2-8958-07d0a4d923d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.8.0/24 198.208.56.0/23 198.208.66.0/24 198.208.72.0/24 198.208.74.0/23 198.208.80.0/23 198.208.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a3:22:58:1d:ab:c5:ad:21:2f:fe:be:c4:40:0a:df:e0:1c: 3f:1d:18:d7:a8:c7:78:0f:fb:8d:47:37:e7:f0:50:d0:7f:91: d8:fa:3f:98:57:73:61:bc:ef:26:2b:b9:98:b7:62:65:89:3f: bf:71:83:54:df:2c:dc:7a:16:eb:18:e4:92:ad:9c:46:49:7b: d9:ce:3b:c7:09:f8:d7:b9:04:3d:9c:63:f8:c7:f4:f2:3f:a7: 0a:f0:d5:93:b5:04:6c:06:0b:1c:64:12:60:00:ac:f4:be:39: 55:cb:71:39:55:0f:ec:ce:52:5e:f3:d7:a0:ef:4b:e2:ae:ac: e8:e2:0b:5f:0a:3c:58:b7:36:10:a4:7a:42:17:6d:ba:ff:ab: 7f:16:0d:ad:be:05:97:1e:6f:04:dc:d2:8a:d4:52:43:a0:97: 16:16:0c:8f:dc:92:a3:bb:83:8c:50:64:df:63:e6:e4:c3:4b: 79:0a:92:3f:fb:a5:77:e0:e7:4f:ef:3f:d7:3e:3a:65:fc:19: 2b:00:1e:4a:36:ef:b6:15:b0:58:e1:fa:9f:17:5b:b4:3d:0c: c2:a0:d2:8f:0f:09:be:98:13:69:c2:fb:95:14:ea:50:ab:ad: f8:6e:34:1b:eb:55:a9:4b:94:39:44:25:56:ef:99:94:2c:4b: 48:a5:0d:52 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEuE9JO6g5H3xr0fHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MTAxNDEzMjcxMloXDTI2MDExMjE0MjcxMlowLzEtMCsGA1UEAxMk ODRiZGI5NjUtODRkYi00YzI5LWJhYmMtZjJkZjg1OTBiMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5XS4Z4+mLxaYk2eW0jahSETUyKijJx/YNs1 PMYDXNY3fW54dUtukz0Q8LRKKnFb4VJTslll697r8XqwD6IWVFmEl5EHoSPcpvPa rYgvAbZR/J9MD400HNJ5ge3+DOmj7yurgnSM63pEhY/Kz9MIb/pLGBmcGAqzg05F NqCIGXTA8A2myABr07xg3+9DX9w1c0VcxAkMnNG1cjNrC/ks1d1/2JVa6sOoR6nd wyrqafpKJLVV+vHomWZedfMa9uvfi6P3twEzSt4x1opowtGdqqH0tE0sphaRUCq9 RDEQWmNscxsQKj0MpZvr37d+j91oQWrDc2iqyw8b5RxfVfbC9QIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFLjiS6HR/rZdKhQYFiY9Q3r++o7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYmQ3YmI2NTAtYmJlYy0z MGYyLTg5NTgtMDdkMGE0ZDkyM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAxtAIAwQB xtA4AwQAxtBCAwQAxtBIAwQBxtBKAwQBxtBQAwQAxtBcMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGyjIlgd q8WtIS/+vsRACt/gHD8dGNeox3gP+41HN+fwUNB/kdj6P5hXc2G87yYruZi3YmWJ P79xg1TfLNx6FusY5JKtnEZJe9nOO8cJ+Ne5BD2cY/jH9PI/pwrw1ZO1BGwGCxxk EmAArPS+OVXLcTlVD+zOUl7z16DvS+KurOjiC18KPFi3NhCkekIXbbr/q38WDa2+ BZcebwTc0orUUkOglxYWDI/ckqO7g4xQZN9j5uTDS3kKkj/7pXfg50/vP9c+OmX8 GSsAHko277YVsFjh+p8XW7Q9DMKg0o8PCb6YE2nC+5UU6lCrrfhuNBvrValLlDlE JVbvmZQsS0ilDVI= -----END CERTIFICATE-----Generated at Tue Nov 4 09:41:44 2025 by rpki-client