$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa File: aff81813-3cd1-36c9-97ca-eaec48ce378a.roa (raw, json) Hash identifier: alC5CDK020pH0HRD59a1ENGfql++JO0xss3Fk6KMCqc= Subject key identifier: 64:53:E6:AF:4F:C1:96:EC:66:CB:4F:22:06:05:D6:59:36:33:81:07 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584BD1CB0AEA13B2ECB3DEABC200 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 36692 IP address blocks: 198.41.8.0/22 maxlen: 22 198.41.8.0/23 maxlen: 23 198.41.8.0/24 maxlen: 24 198.41.9.0/24 maxlen: 24 198.41.10.0/23 maxlen: 23 198.41.10.0/24 maxlen: 24 198.41.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:0a:ea:13:b2:ec:b3:de:ab:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=0729b615-8a58-42d6-8a0b-8fb189e87770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:a4:a0:bf:21:42:91:36:c2:a9:38:24:b8: 86:11:63:df:2b:a9:73:9d:10:8d:f8:f2:e2:80:04: 0c:f4:15:a2:00:a8:7d:b4:85:91:1c:80:7d:89:88: e1:6f:ba:a8:31:dc:30:a1:37:05:e9:6d:8c:39:26: f7:09:b6:6a:6b:e3:8a:be:39:44:d3:12:33:08:cb: cf:87:73:d3:8e:b3:31:0d:bc:0f:24:3b:4e:c2:4e: e4:00:87:3d:75:0e:4f:50:4a:fc:09:6a:33:9d:e1: 4d:d6:f9:e5:ac:af:ee:22:21:97:1f:aa:d5:45:9a: e3:e9:24:0c:60:28:97:02:dd:46:a5:48:9c:08:f1: 87:06:db:0b:53:b1:27:69:ab:74:60:de:e9:40:c3: 81:21:0e:6a:79:3c:38:6c:84:a7:e6:a1:da:72:c7: d5:a7:ef:5b:ae:74:20:fb:0d:3f:3a:e9:08:81:2d: 9d:df:85:07:37:52:16:58:75:d9:30:67:c5:69:b3: d4:71:47:6f:07:9e:f7:d1:41:cb:11:25:1d:71:1f: 4c:c7:94:64:3e:34:f0:dc:fa:3c:86:2f:b0:f8:4f: c4:eb:41:1d:4e:37:dd:cd:fa:09:34:e1:66:72:df: 4a:45:0d:42:e1:00:bd:57:ab:0d:95:c4:cc:dd:7d: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:53:E6:AF:4F:C1:96:EC:66:CB:4F:22:06:05:D6:59:36:33:81:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:83:12:87:fd:3e:79:ad:84:be:3a:08:15:50:cc:9d:7d:95: b7:2e:bd:44:c9:c7:25:36:26:79:66:41:c3:1c:a1:e6:af:0d: 40:8f:59:0b:b2:31:95:8f:68:50:85:79:dc:4b:d2:11:62:62: 2a:fa:f3:36:85:57:f1:99:06:e0:b1:8d:4b:21:6c:ab:af:06: f6:98:5b:13:a3:67:ed:5c:19:cf:01:4f:28:04:7a:61:02:fe: 64:dc:f2:c7:a9:53:d8:da:fe:e9:ee:7b:66:5e:fd:74:d1:83: bf:98:6f:e5:44:5c:f3:87:73:6c:86:79:11:b4:8c:6d:11:54: c3:2c:af:19:15:52:d5:39:5e:2e:4b:07:09:cc:aa:e5:c6:97: e4:22:84:fa:28:83:0a:12:80:5c:f3:cd:85:83:ac:16:b3:48: 3d:41:3b:d4:02:d0:b4:da:11:22:58:e0:7b:a7:45:65:87:65: e5:d3:07:d6:e1:7c:80:39:3b:55:92:f2:8e:98:e7:40:6b:b5: 5d:90:b2:e4:fc:5d:97:54:8c:73:30:d3:30:91:5c:e5:36:07: a6:0e:cc:c7:5a:5a:e3:da:ed:c0:35:96:fa:d3:7d:8e:58:c9: 3e:72:6e:88:b6:77:b9:b6:a7:a5:61:23:45:c3:58:b9:0a:dd: 29:98:7a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRywrqE7Lss96rwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MDcyOWI2MTUtOGE1OC00MmQ2LThhMGItOGZiMTg5ZTg3NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOkoL8hQpE2wqk4JLiGEWPfK6lznRCN+PLi gAQM9BWiAKh9tIWRHIB9iYjhb7qoMdwwoTcF6W2MOSb3CbZqa+OKvjlE0xIzCMvP h3PTjrMxDbwPJDtOwk7kAIc9dQ5PUEr8CWozneFN1vnlrK/uIiGXH6rVRZrj6SQM YCiXAt1GpUicCPGHBtsLU7Enaat0YN7pQMOBIQ5qeTw4bISn5qHacsfVp+9brnQg +w0/OukIgS2d34UHN1IWWHXZMGfFabPUcUdvB5730UHLESUdcR9Mx5RkPjTw3Po8 hi+w+E/E60EdTjfdzfoJNOFmct9KRQ1C4QC9V6sNlcTM3X0CdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRT5q9PwZbsZstPIgYF1lk2M4EHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYWZmODE4MTMtM2NkMS0z NmM5LTk3Y2EtZWFlYzQ4Y2UzNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2DEof9PnmthL46CBVQzJ19lbcuvUTJxyU2JnlmQcMcoeavDUCPWQuy MZWPaFCFedxL0hFiYir68zaFV/GZBuCxjUshbKuvBvaYWxOjZ+1cGc8BTygEemEC /mTc8sepU9ja/unue2Ze/XTRg7+Yb+VEXPOHc2yGeRG0jG0RVMMsrxkVUtU5Xi5L BwnMquXGl+QihPoogwoSgFzzzYWDrBazSD1BO9QC0LTaESJY4HunRWWHZeXTB9bh fIA5O1WS8o6Y50BrtV2QsuT8XZdUjHMw0zCRXOU2B6YOzMdaWuPa7cA1lvrTfY5Y yT5yboi2d7m2p6VhI0XDWLkK3SmYeug= -----END CERTIFICATE-----Generated at Tue Nov 11 19:53:01 2025 by rpki-client