$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa File: ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa (raw, json) Hash identifier: 8P16CFlGMbAI9z3A6P9Fdjf/1LLGu3RFUAE8+SaBPzY= Subject key identifier: 8E:B5:18:8D:8C:07:D0:D1:68:6E:76:91:34:F4:81:97:C1:55:5E:31 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584B13D6C734312E8BBA4F802580 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 3300 IP address blocks: 192.237.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c7:34:31:2e:8b:ba:4f:80:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=1ef2ea58-0ca5-4096-97b4-71908f9f796d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:73:e5:89:4e:67:9a:14:52:06:e6:36:cb: b0:16:64:eb:25:ea:dd:7f:74:bb:51:68:6a:84:04: bf:64:d4:a6:66:6f:96:3c:b0:75:05:3f:55:cf:fa: 20:28:b0:1c:d8:2e:ae:ce:83:f4:e0:f8:e7:6b:a6: 70:00:31:04:36:b4:fa:1a:4d:20:c3:8b:65:02:3c: 5e:22:30:51:63:37:c7:80:ab:77:4b:c2:13:a3:0b: 51:ab:22:92:38:7a:e7:e1:a4:b6:07:16:fd:91:ef: 55:82:8c:eb:00:4e:c8:fa:0e:41:ce:55:ef:ce:ad: 7f:0f:44:f0:76:f9:1a:4a:21:7f:45:d6:8f:75:ee: 90:49:e5:70:9b:f9:20:21:cd:a0:f5:15:8b:dd:1d: e0:d2:49:2d:4c:68:f3:b6:f5:91:80:0f:77:74:15: 26:c4:26:c7:36:c0:21:40:ce:30:dd:b4:15:97:54: d1:f7:e6:d0:8f:3d:ca:5b:8f:de:30:f3:c7:37:59: 59:d8:49:02:97:1b:22:7f:e4:d2:a5:a1:05:ae:48: 66:9c:6c:b2:ff:8a:c0:27:0f:73:21:30:47:3d:52: 9f:9f:ad:c9:01:bf:83:d2:0b:0d:4f:d1:1e:9d:2e: dc:38:e9:c4:c7:01:14:19:57:3c:b9:46:31:94:75: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:18:8D:8C:07:D0:D1:68:6E:76:91:34:F4:81:97:C1:55:5E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ef5afedf-4b06-3810-a8cd-f32cceec68bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.237.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a6:69:1e:52:b6:31:76:56:d7:06:1a:6f:8e:35:29:9c:bd: c8:fc:cb:d1:e5:2a:64:c2:7b:4e:7d:3a:48:fd:a3:45:fe:ad: 65:12:95:89:77:f9:25:5e:ec:e0:f7:d5:9e:be:33:ce:d1:d8: 66:ea:c8:c5:19:93:30:64:33:e0:ae:f2:21:8e:81:b8:2f:51: 66:4d:37:75:7c:86:4b:3f:cc:4b:64:06:af:aa:14:af:34:04: be:1f:1c:2a:77:86:f0:99:a8:9b:a7:05:c0:19:d4:17:6a:0c: cc:e7:1b:3e:f6:da:a2:ef:22:56:6a:5d:37:d6:a5:1d:61:9f: 10:90:b3:e1:0e:67:62:4b:48:e3:d6:22:55:0e:2a:3a:15:c2: a7:04:ad:a3:02:09:94:5e:9c:b3:57:b3:ce:ce:36:e4:d2:9d: 0c:eb:8d:6c:9e:1c:5c:5c:84:a1:c9:9c:cb:53:09:11:7f:3f: 6e:a9:36:6c:a8:09:dd:40:b1:f5:b7:99:c3:fb:8e:8a:e3:e0: 3e:bb:b1:fb:87:5b:12:5c:dc:bd:45:55:b3:5c:69:81:7d:b7: 19:c0:48:6d:43:fb:4a:8b:3c:76:e2:db:7a:91:b2:39:2b:9b: 32:24:2f:e4:9c:f9:57:cd:f5:37:2c:08:b9:68:85:bc:80:c8: 5b:74:c5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sc0MS6Luk+AJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MWVmMmVhNTgtMGNhNS00MDk2LTk3YjQtNzE5MDhmOWY3OTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Nz5YlOZ5oUUgbmNsuwFmTrJerdf3S7UWhq hAS/ZNSmZm+WPLB1BT9Vz/ogKLAc2C6uzoP04Pjna6ZwADEENrT6Gk0gw4tlAjxe IjBRYzfHgKt3S8ITowtRqyKSOHrn4aS2Bxb9ke9VgozrAE7I+g5BzlXvzq1/D0Tw dvkaSiF/RdaPde6QSeVwm/kgIc2g9RWL3R3g0kktTGjztvWRgA93dBUmxCbHNsAh QM4w3bQVl1TR9+bQjz3KW4/eMPPHN1lZ2EkClxsif+TSpaEFrkhmnGyy/4rAJw9z ITBHPVKfn63JAb+D0gsNT9EenS7cOOnExwEUGVc8uUYxlHUQ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI61GI2MB9DRaG52kTT0gZfBVV4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZWY1YWZlZGYtNGIwNi0z ODEwLWE4Y2QtZjMyY2NlZWM2OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwO1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGmaR5StjF2VtcGGm+ONSmcvcj8y9HlKmTCe059Okj9o0X+rWUSlYl3 +SVe7OD31Z6+M87R2GbqyMUZkzBkM+Cu8iGOgbgvUWZNN3V8hks/zEtkBq+qFK80 BL4fHCp3hvCZqJunBcAZ1BdqDMznGz722qLvIlZqXTfWpR1hnxCQs+EOZ2JLSOPW IlUOKjoVwqcEraMCCZRenLNXs87ONuTSnQzrjWyeHFxchKHJnMtTCRF/P26pNmyo Cd1AsfW3mcP7jorj4D67sfuHWxJc3L1FVbNcaYF9txnASG1D+0qLPHbi23qRsjkr mzIkL+Sc+VfN9TcsCLlohbyAyFt0xcM= -----END CERTIFICATE-----Generated at Wed Sep 10 17:36:38 2025 by rpki-client