$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa File: 932701dc-5170-37c8-b804-8055128c2742.roa (raw, json) Hash identifier: JWXi2ROlaIxBtc+TnXESEN3ZyIi4TZHxGyAZvYmrbvQ= Subject key identifier: A1:2E:9C:11:82:B4:C6:94:8F:55:8D:72:E4:A2:7C:65:FB:69:E7:D0 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584BD1CB109428FDCA771B1350E0 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 36692 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:10:94:28:fd:ca:77:1b:13:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=0652d414-3be9-4512-b99d-d2d3dee219b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dd:70:6b:cf:cc:63:35:74:b2:ce:7d:01:46: 7c:6f:7e:e9:9c:34:e7:74:4a:2f:16:6a:42:10:f3: 88:24:3b:7b:a9:61:34:c6:9a:0b:2d:c5:38:4e:84: 4e:64:37:8e:85:70:4a:5a:e1:d9:34:e4:d5:01:b2: c7:b8:35:07:88:71:45:40:c5:cb:1a:b0:81:c9:93: bc:03:e0:7d:97:60:cd:c3:48:39:4e:73:4f:1b:fa: 51:fc:3f:b5:fd:93:d1:25:47:4e:cb:45:ea:1e:0d: 40:99:b5:31:04:97:e6:54:7a:7e:08:4e:7e:12:00: 79:99:97:db:5e:85:dc:be:3b:57:7c:1b:bd:3f:fd: da:d0:e6:ca:b7:a4:7c:a2:02:42:e1:bd:90:46:2d: c7:58:aa:44:59:95:0f:ce:1e:e5:ce:3c:c2:24:a7: 8d:86:1b:dd:d1:82:84:d7:44:9c:bd:bb:ef:99:3d: c9:b9:b7:89:34:22:75:7c:06:21:a6:2c:32:1e:d7: dd:b1:ca:73:37:50:b7:a2:9a:f6:8d:bc:56:74:47: 7b:63:8f:33:fa:ff:a9:57:96:e8:95:01:70:eb:52: 14:df:fd:d1:a3:d5:7f:ef:01:4e:7b:a1:c4:87:6b: 0b:11:f1:67:ba:a8:a9:da:6a:f4:ff:75:80:0d:2a: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2E:9C:11:82:B4:C6:94:8F:55:8D:72:E4:A2:7C:65:FB:69:E7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:01:2c:6f:17:fa:81:b1:05:af:ca:48:9f:70:83:88:87:1b: 11:e4:0d:8e:72:c5:61:61:2f:1f:a5:8a:5e:9b:8e:ad:68:7a: 33:b6:f5:04:fc:3f:0b:dc:23:c4:10:bd:f4:b3:f3:cb:fc:8f: 18:ed:44:2b:58:53:e3:cb:13:bd:29:6c:21:70:e1:b9:61:25: 04:c8:a3:b8:8d:3f:0c:80:51:bc:7d:cb:69:54:c6:1f:07:7c: 55:c7:73:7b:d4:85:e1:d9:7f:57:71:10:00:08:52:0b:84:d2: b8:e6:90:d6:f8:87:8d:4b:db:64:63:bc:38:ff:32:e1:c3:5a: a2:27:7b:1b:7f:f9:83:56:ce:09:32:71:00:fb:9c:5d:86:11: b6:10:61:81:02:eb:3f:f6:40:fe:3f:7a:39:f0:c9:69:73:25: 7e:3a:09:cf:1f:e1:c7:b9:a9:8a:41:55:33:62:65:6c:50:c8: 01:59:d8:d2:83:e9:26:7a:7a:5b:1c:bb:cc:d1:9a:1d:f7:de: 7f:8a:b4:44:b0:83:97:31:1f:34:aa:53:a9:cf:e8:dd:28:7f: ac:02:85:fe:29:f4:33:c2:7a:02:05:4f:5a:70:28:99:8b:37: 05:df:f8:e2:fd:09:2b:0f:36:c9:80:fa:5d:d0:2e:ed:b0:5c: a7:c3:f9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyxCUKP3KdxsTUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MDY1MmQ0MTQtM2JlOS00NTEyLWI5OWQtZDJkM2RlZTIxOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d1wa8/MYzV0ss59AUZ8b37pnDTndEovFmpC EPOIJDt7qWE0xpoLLcU4ToROZDeOhXBKWuHZNOTVAbLHuDUHiHFFQMXLGrCByZO8 A+B9l2DNw0g5TnNPG/pR/D+1/ZPRJUdOy0XqHg1AmbUxBJfmVHp+CE5+EgB5mZfb XoXcvjtXfBu9P/3a0ObKt6R8ogJC4b2QRi3HWKpEWZUPzh7lzjzCJKeNhhvd0YKE 10ScvbvvmT3JubeJNCJ1fAYhpiwyHtfdscpzN1C3opr2jbxWdEd7Y48z+v+pV5bo lQFw61IU3/3Ro9V/7wFOe6HEh2sLEfFnuqip2mr0/3WADSqt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEunBGCtMaUj1WNcuSifGX7aefQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTMyNzAxZGMtNTE3MC0z N2M4LWI4MDQtODA1NTEyOGMyNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwBLG8X+oGxBa/KSJ9wg4iHGxHkDY5yxWFhLx+lil6bjq1oejO29QT8 PwvcI8QQvfSz88v8jxjtRCtYU+PLE70pbCFw4blhJQTIo7iNPwyAUbx9y2lUxh8H fFXHc3vUheHZf1dxEAAIUguE0rjmkNb4h41L22RjvDj/MuHDWqInext/+YNWzgky cQD7nF2GEbYQYYEC6z/2QP4/ejnwyWlzJX46Cc8f4ce5qYpBVTNiZWxQyAFZ2NKD 6SZ6elscu8zRmh333n+KtESwg5cxHzSqU6nP6N0of6wChf4p9DPCegIFT1pwKJmL NwXf+OL9CSsPNsmA+l3QLu2wXKfD+dM= -----END CERTIFICATE-----Generated at Tue Nov 11 19:53:13 2025 by rpki-client