$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa File: efa85352-f35c-30e0-843c-54ae2ccbec9a.roa (raw, json) Hash identifier: ttf4Bk/Eg4558I57wFBxdvL4MPmA0fOEWddG/oRD1qI= Subject key identifier: C2:B0:51:B4:94:9F:5F:7D:1D:03:35:4C:8C:B5:12:23:DC:C4:F9:22 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584AF521441A98D0A8A36F3CAC00 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 56274 IP address blocks: 198.208.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:44:1a:98:d0:a8:a3:6f:3c:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=904af1a5-5479-4f9d-a4af-0cce018fd240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:5a:36:b2:be:f3:be:2e:f7:05:d5:21:72: b8:a1:a6:be:41:b6:54:90:85:85:b9:01:07:b5:46: 03:9a:47:c1:24:1a:bd:07:c8:f9:dc:99:67:e5:3d: fd:68:f9:1c:79:1b:ab:26:46:e0:b5:61:ee:ab:31: e8:89:15:15:7c:2c:34:5a:dd:a4:d2:83:b0:f0:7d: f2:07:84:83:a7:2d:f8:92:5a:a2:d8:77:aa:cf:74: f1:b1:01:5b:00:2c:6e:e5:51:71:0b:65:ac:c8:fd: 8f:83:ac:bf:fe:72:b9:17:3f:d7:2b:da:e5:77:5d: 29:ef:0e:7c:3f:64:cc:4d:a9:33:20:5a:48:3c:2d: 91:9b:aa:05:3a:57:9f:1b:c1:97:80:16:d8:72:04: 81:d1:ff:09:50:30:60:e3:58:23:8e:99:62:3c:e9: 82:86:b3:c4:91:fc:e4:cd:44:ed:b3:30:79:ed:66: d6:13:14:09:af:0e:b3:5f:48:8e:71:0c:42:2a:a8: 0a:cb:fd:64:81:38:29:be:24:50:43:fe:ce:b3:d2: dc:2b:38:18:5e:c6:64:85:30:15:e9:57:53:03:05: 79:1d:d9:ad:dc:57:17:6b:36:37:75:7c:8c:93:36: bf:63:d3:66:27:6f:15:3c:bc:73:6e:c3:d4:6b:a0: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:51:B4:94:9F:5F:7D:1D:03:35:4C:8C:B5:12:23:DC:C4:F9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:42:e8:87:21:84:46:b4:10:a8:05:ba:9e:ac:c3:8a:fc:56: a4:57:18:a6:44:72:43:75:fc:a6:9e:9c:cb:36:66:60:5b:95: d1:b2:ff:af:b7:13:12:d1:7e:33:9f:63:d6:6f:71:2f:e3:76: c8:e5:9f:f0:2c:e5:86:5b:bd:2d:e2:42:00:17:ba:89:f8:2d: f9:7d:3e:2a:2f:4d:82:f6:6b:40:f4:c3:66:76:e5:83:8f:a3: ea:fc:df:b8:13:3f:9b:60:55:6e:98:0f:d5:51:5b:84:f4:bd: f2:f1:58:80:97:2a:a1:c8:7b:a8:5f:33:4c:90:41:2e:40:a1: ad:6a:d3:8b:38:d4:3f:a2:6b:eb:4e:8f:16:c5:b2:25:ff:2b: 90:68:d2:f5:6c:69:9d:b1:6f:31:64:8d:59:b4:3c:ba:b5:30: 74:6b:7c:dc:2a:48:62:ff:74:23:b0:d9:6d:39:55:37:bd:3f: 6c:e9:44:9c:20:1d:51:a2:fe:e5:ef:3d:a2:d3:82:8d:aa:75: 07:e6:b2:25:40:57:93:e4:5f:47:10:d7:93:7a:2d:d3:60:d4: 80:16:29:51:ee:48:8a:ed:40:dc:de:7c:d1:d5:bd:39:06:d6: 24:aa:ca:fe:e5:a6:ba:5b:81:73:92:09:ca:95:82:ae:92:54: 5e:7d:76:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUQamNCoo288rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTA0YWYxYTUtNTQ3OS00ZjlkLWE0YWYtMGNjZTAxOGZkMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdaNrK+874u9wXVIXK4oaa+QbZUkIWFuQEH tUYDmkfBJBq9B8j53Jln5T39aPkceRurJkbgtWHuqzHoiRUVfCw0Wt2k0oOw8H3y B4SDpy34klqi2Heqz3TxsQFbACxu5VFxC2WsyP2Pg6y//nK5Fz/XK9rld10p7w58 P2TMTakzIFpIPC2Rm6oFOlefG8GXgBbYcgSB0f8JUDBg41gjjpliPOmChrPEkfzk zUTtszB57WbWExQJrw6zX0iOcQxCKqgKy/1kgTgpviRQQ/7Os9LcKzgYXsZkhTAV 6VdTAwV5Hdmt3FcXazY3dXyMkza/Y9NmJ28VPLxzbsPUa6B1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKwUbSUn199HQM1TIy1EiPcxPkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWZhODUzNTItZjM1Yy0z MGUwLTg0M2MtNTRhZTJjY2JlYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhC6IchhEa0EKgFup6sw4r8VqRXGKZEckN1/KaenMs2ZmBbldGy/6+3 ExLRfjOfY9ZvcS/jdsjln/As5YZbvS3iQgAXuon4Lfl9PiovTYL2a0D0w2Z25YOP o+r837gTP5tgVW6YD9VRW4T0vfLxWICXKqHIe6hfM0yQQS5Aoa1q04s41D+ia+tO jxbFsiX/K5Bo0vVsaZ2xbzFkjVm0PLq1MHRrfNwqSGL/dCOw2W05VTe9P2zpRJwg HVGi/uXvPaLTgo2qdQfmsiVAV5PkX0cQ15N6LdNg1IAWKVHuSIrtQNzefNHVvTkG 1iSqyv7lprpbgXOSCcqVgq6SVF59dqo= -----END CERTIFICATE-----Generated at Sat Sep 20 07:15:15 2025 by rpki-client