$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41b83b64-61c2-3d54-b1f8-556bc6f23d01.roa File: 41b83b64-61c2-3d54-b1f8-556bc6f23d01.roa (raw, json) Hash identifier: aSGCGmkDK6bKMq6pNF1Kr6Cur/bi2oPfSVQ96Y5BR2M= Subject key identifier: 24:09:94:F8:D3:4D:E1:F7:B0:B0:4B:16:F1:DA:99:91:66:1D:07:25 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16C2D5B29A73ECE8A4780 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41b83b64-61c2-3d54-b1f8-556bc6f23d01.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 198.85.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6c:2d:5b:29:a7:3e:ce:8a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=7c1b0008-582c-4a26-97ad-b82dd9d44e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:7f:59:00:fa:c7:c7:ab:a7:71:0b:ad:df: 34:55:53:b3:07:26:0d:a2:49:76:21:2d:02:c0:75: 40:c7:64:46:9c:95:05:be:8a:d7:46:56:83:37:36: b1:4d:cf:11:11:42:1e:14:a6:44:72:03:7b:2e:15: ba:a3:05:aa:a2:f4:2c:9b:c5:7a:24:c8:9c:d9:f1: f1:9f:6f:63:e3:6a:02:c7:9e:93:f5:c8:60:8d:96: 89:b0:fc:ee:0f:87:50:5c:62:df:0a:73:ad:02:06: 5c:b3:e6:a8:09:f4:4e:c2:66:28:de:09:13:ce:4f: bb:ae:81:b6:a7:33:fe:03:67:45:9b:a4:70:85:8a: 10:d4:92:ed:ae:1e:7b:ab:1a:d1:d9:96:d7:8f:18: db:1a:99:ac:14:43:10:79:d1:6f:b7:80:fe:a8:4a: fd:4c:fc:bb:2b:35:7d:c8:63:ee:5a:e0:cf:ad:1f: 87:ea:2d:f9:bc:62:35:97:f3:e1:b3:a6:43:8b:9f: 95:56:4d:4c:e8:04:56:f0:1a:49:af:b7:a1:10:c2: 31:68:29:d2:ed:30:05:4f:36:11:90:85:4a:dd:fd: 26:b4:c3:c1:86:e7:e4:9a:01:47:67:92:89:a0:1a: 44:bb:80:83:a6:63:00:0f:2c:a8:52:5c:2c:3b:9e: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:09:94:F8:D3:4D:E1:F7:B0:B0:4B:16:F1:DA:99:91:66:1D:07:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41b83b64-61c2-3d54-b1f8-556bc6f23d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e6:97:f8:ef:25:c4:b6:75:67:dc:3d:b5:4f:96:bd:e5:82: ea:b8:b3:b3:a7:8a:88:12:16:1c:fa:d7:95:a0:7a:fc:04:3e: c5:9d:46:8f:9e:b5:cd:60:94:ef:ea:0c:bc:f3:a5:40:0a:d9: 85:fe:43:3c:b5:f0:fe:bb:d7:52:48:93:3f:2a:76:8b:1b:f9: aa:4d:ad:7e:30:b3:2b:a0:63:3f:35:ef:b7:bd:3f:03:a1:94: 75:27:30:ab:bb:73:46:97:a2:bc:aa:6b:e2:12:e4:cf:78:6d: 7e:88:da:49:a5:33:f3:86:f8:7b:ad:7b:b0:0c:99:73:a1:d5: 64:a1:c3:58:f7:49:9c:bc:03:08:ce:3f:b4:04:6d:cf:9b:71: f5:da:d7:3b:af:34:c4:5b:81:d7:94:c3:23:a3:e0:f4:45:32: b9:50:3b:77:5b:5b:3a:6b:5b:68:8b:db:29:67:57:ce:12:8a: 5b:09:be:e6:75:cd:e9:7a:d9:38:01:88:d9:1e:b7:51:1d:98: e2:c7:da:df:07:cc:6b:87:ba:27:bf:5f:7d:ca:4c:fd:2f:3e: 2b:61:10:7c:2e:d6:79:42:b9:8b:a9:8c:ec:b8:53:b0:0c:cc: 72:57:66:f9:1b:25:83:07:a4:60:c9:f5:cb:ed:6d:ff:a1:69: 59:1e:a7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWwtWymnPs6KR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2MxYjAwMDgtNTgyYy00YTI2LTk3YWQtYjgyZGQ5ZDQ0ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuh/WQD6x8erp3ELrd80VVOzByYNokl2IS0C wHVAx2RGnJUFvorXRlaDNzaxTc8REUIeFKZEcgN7LhW6owWqovQsm8V6JMic2fHx n29j42oCx56T9chgjZaJsPzuD4dQXGLfCnOtAgZcs+aoCfROwmYo3gkTzk+7roG2 pzP+A2dFm6RwhYoQ1JLtrh57qxrR2ZbXjxjbGpmsFEMQedFvt4D+qEr9TPy7KzV9 yGPuWuDPrR+H6i35vGI1l/Phs6ZDi5+VVk1M6ARW8BpJr7ehEMIxaCnS7TAFTzYR kIVK3f0mtMPBhufkmgFHZ5KJoBpEu4CDpmMADyyoUlwsO55orQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQJlPjTTeH3sLBLFvHamZFmHQclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDFiODNiNjQtNjFjMi0z ZDU0LWIxZjgtNTU2YmM2ZjIzZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbml/jvJcS2dWfcPbVPlr3lguq4s7OniogSFhz615WgevwEPsWdRo+e tc1glO/qDLzzpUAK2YX+Qzy18P6711JIkz8qdosb+apNrX4wsyugYz8177e9PwOh lHUnMKu7c0aXoryqa+IS5M94bX6I2kmlM/OG+Hute7AMmXOh1WShw1j3SZy8AwjO P7QEbc+bcfXa1zuvNMRbgdeUwyOj4PRFMrlQO3dbWzprW2iL2ylnV84SilsJvuZ1 zel62TgBiNket1EdmOLH2t8HzGuHuie/X33KTP0vPithEHwu1nlCuYupjOy4U7AM zHJXZvkbJYMHpGDJ9cvtbf+haVkep8A= -----END CERTIFICATE-----Generated at Tue Sep 9 07:57:22 2025 by rpki-client