$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json) Hash identifier: 1JDXtgF7DMIic+ZN4rtthcNb1qGGQ0M37I1RS9wbaYg= Subject key identifier: 6E:9B:3C:A2:C5:88:64:9F:6C:83:5C:97:0D:F3:09:6D:A6:F9:1F:9F Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584BD1CB10D9098DC73B7EC23880 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 30607 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.12.0/24 maxlen: 24 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:10:d9:09:8d:c7:3b:7e:c2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=72565193-b2a4-47d7-85a9-02d496785ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:d2:cb:b7:0f:c5:c3:e4:fc:85:88:ba:bd: a4:07:ba:85:f3:5a:45:af:57:1e:5b:24:53:70:ed: 57:70:15:43:20:f8:4f:33:3e:dc:50:eb:5f:3e:ab: 10:ab:12:d9:53:32:f9:74:58:ee:45:14:4f:09:33: 9c:3c:89:0e:cb:9e:fc:61:03:ad:17:b5:12:07:35: 48:07:d1:ad:7f:98:dc:c0:1d:9c:80:ba:00:50:1b: c5:39:2c:81:e7:a5:57:ee:2f:32:02:a4:89:32:6a: 0c:63:cd:0f:8e:06:d6:46:9d:56:69:33:0a:c2:a9: 89:10:dc:d2:ed:f6:ef:08:37:7c:9b:4f:3b:22:be: 93:d2:e1:07:3b:f7:3e:1d:a9:4d:03:5f:7b:82:85: 4a:d7:16:07:84:f7:ab:10:8f:1d:a4:41:c9:dc:be: d0:a4:51:ec:02:1e:65:6a:06:f7:03:3b:e0:8e:93: 63:39:21:e0:af:8b:01:77:cb:35:67:a9:76:39:38: b9:22:d3:c1:99:48:2b:cd:17:34:11:01:2e:24:74: ff:50:fe:90:2b:4e:c2:28:98:83:5d:71:75:71:a0: ba:16:67:1d:ed:2e:1a:46:7a:46:77:1b:96:cb:09: 63:68:9f:5b:48:fa:fc:a2:52:35:50:73:ad:8f:9d: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:3C:A2:C5:88:64:9F:6C:83:5C:97:0D:F3:09:6D:A6:F9:1F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b6:76:ce:90:a1:63:22:48:ee:76:35:b4:79:2c:d8:e5:10: a9:76:b5:b9:41:14:9d:ab:53:f5:80:27:80:6e:46:34:1b:5c: 19:0b:67:27:97:ad:6f:17:ed:1f:ff:77:b7:8b:9b:32:29:43: bb:a9:4e:f2:ea:c7:f2:0e:1d:47:d6:33:84:ca:7d:de:c7:99: 3b:19:cf:8d:7a:da:aa:77:82:75:38:31:1f:77:2e:ea:3e:0d: de:52:c6:a4:cd:e3:9b:0c:af:bf:41:51:b6:ec:3d:59:6d:a9: 70:a4:a9:d6:9d:3b:c4:3a:06:0e:fa:61:92:23:2a:fb:7d:ec: 60:d8:e4:d5:5f:b2:bf:35:b3:4e:16:23:87:54:10:03:63:f3: c9:78:c4:8f:4e:60:7f:2b:e4:38:28:99:5c:ee:58:08:5b:4a: 5c:70:67:2d:42:43:29:b8:59:18:23:2a:ee:8d:33:96:8f:22: a4:ca:bf:ec:51:28:ea:d2:4d:c9:96:22:a2:c2:f8:f5:99:fb: 9b:f7:c0:47:38:f4:1b:57:05:f4:05:ae:68:c4:ec:1b:31:b9: d5:d1:e4:89:e2:d9:d1:4b:26:f4:9a:ff:05:60:ac:07:1e:57: 8b:fa:e5:f2:8f:c5:34:bb:cc:cf:a4:50:ef:4c:ef:e2:20:02: 4c:e1:4e:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyxDZCY3HO37COIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NzI1NjUxOTMtYjJhNC00N2Q3LTg1YTktMDJkNDk2Nzg1YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyDSy7cPxcPk/IWIur2kB7qF81pFr1ceWyRT cO1XcBVDIPhPMz7cUOtfPqsQqxLZUzL5dFjuRRRPCTOcPIkOy578YQOtF7USBzVI B9Gtf5jcwB2cgLoAUBvFOSyB56VX7i8yAqSJMmoMY80PjgbWRp1WaTMKwqmJENzS 7fbvCDd8m087Ir6T0uEHO/c+HalNA197goVK1xYHhPerEI8dpEHJ3L7QpFHsAh5l agb3AzvgjpNjOSHgr4sBd8s1Z6l2OTi5ItPBmUgrzRc0EQEuJHT/UP6QK07CKJiD XXF1caC6Fmcd7S4aRnpGdxuWywljaJ9bSPr8olI1UHOtj50XJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6bPKLFiGSfbINclw3zCW2m+R+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZjBhZWU1ZDEtZDQ0Yy0z NTY2LWI3MWYtMDVjYTgyZWZhYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu2ds6QoWMiSO52NbR5LNjlEKl2tblBFJ2rU/WAJ4BuRjQbXBkLZyeX rW8X7R//d7eLmzIpQ7upTvLqx/IOHUfWM4TKfd7HmTsZz4162qp3gnU4MR93Luo+ Dd5SxqTN45sMr79BUbbsPVltqXCkqdadO8Q6Bg76YZIjKvt97GDY5NVfsr81s04W I4dUEANj88l4xI9OYH8r5DgomVzuWAhbSlxwZy1CQym4WRgjKu6NM5aPIqTKv+xR KOrSTcmWIqLC+PWZ+5v3wEc49BtXBfQFrmjE7BsxudXR5Ini2dFLJvSa/wVgrAce V4v65fKPxTS7zM+kUO9M7+IgAkzhThs= -----END CERTIFICATE-----Generated at Tue Nov 11 22:11:24 2025 by rpki-client