$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa File: 20b12159-fae1-324b-856e-4ffaaa0299f4.roa (raw, json) Hash identifier: Fj29mJ4JWlGLOjeA3RFy+WMr65k9y4/nTGUYY/DZBzE= Subject key identifier: 3F:7E:B4:7E:56:FA:9F:35:0A:59:A8:9C:69:D7:38:80:5F:14:DC:69 Certificate issuer: /CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Certificate serial: 010D0C9F4328584BAEC7B9D3FA5745F3B97819C0 Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16796 IP address blocks: 198.163.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b9:d3:fa:57:45:f3:b9:78:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1607c79f-bdc0-483b-90e2-12bb3b1ac69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:5e:31:4b:37:6b:a4:70:b1:f6:08:1f:a6: b4:90:31:6c:9e:08:7e:37:0b:01:e4:e4:9b:0c:63: 0f:56:7b:02:79:a3:cb:a3:73:51:19:86:0c:a0:da: 03:26:8e:1d:7f:68:12:14:3f:eb:40:26:5f:3a:62: 91:14:01:31:b7:9e:88:4f:3e:bf:41:71:d7:c1:4b: 6a:2d:b7:73:dd:6d:d4:6b:bf:65:2f:35:35:fb:bc: 71:e2:f7:5b:de:06:3b:cc:8f:b7:8c:93:4e:a8:b7: 9d:99:b4:94:8a:c1:cf:98:52:c7:b4:96:dc:9b:24: c0:1c:91:4f:c5:3b:2f:0d:0d:be:f9:55:a7:5b:4a: 4e:fb:0e:08:39:80:23:85:be:eb:6d:22:97:ad:78: 22:aa:7a:38:58:da:73:bc:74:f3:be:6b:2b:29:91: dc:19:93:ce:ba:9c:43:85:e9:fe:b3:14:47:f7:21: 86:5b:85:2a:cb:6e:45:00:1d:ac:62:ba:d4:84:d3: 6a:ca:6f:b2:7c:ea:29:ca:8d:32:68:c9:9e:f2:b8: 26:ad:9a:13:bb:af:2b:67:87:9e:c9:6b:ac:60:79: ae:ba:79:9a:67:57:fd:22:51:3d:e1:b5:07:72:7c: bc:3c:70:28:b0:a0:f0:c2:a5:e0:a2:93:f0:11:08: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:B4:7E:56:FA:9F:35:0A:59:A8:9C:69:D7:38:80:5F:14:DC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl X509v3 Authority Key Identifier: keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer sbgp-ipAddrBlock: critical IPv4: 198.163.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:48:37:75:83:ce:a8:a0:6e:41:5a:c6:04:85:29:89:1b:57: fd:de:70:fe:d9:eb:b8:62:1d:7d:38:e7:a1:90:9d:78:f5:88: b1:a8:d4:45:61:8b:1a:b0:00:c2:a7:a6:c7:37:c2:b9:68:9a: 6f:81:35:eb:a7:2d:c0:29:10:61:73:1f:2a:c4:47:4e:8f:1d: 0a:6b:a6:9c:80:99:b9:45:d6:ef:0c:4d:f7:a4:d8:92:45:e9: 05:7e:81:48:db:16:5d:d1:ba:98:9f:d1:00:40:ab:4d:15:ef: 00:df:ca:a7:72:46:f8:8c:c0:0c:b2:87:6e:78:b0:fb:39:30: 0b:14:c3:36:cd:f1:5a:da:ff:fd:55:6e:1a:f1:10:d9:16:d6: e2:48:b9:78:13:0a:e2:35:ee:39:42:55:69:5b:89:45:6c:35: de:47:5f:8d:4d:4f:25:77:6f:e9:0c:47:75:16:d0:ec:b2:31: e5:b1:09:38:4d:2b:8d:31:5c:6e:9b:5e:d4:41:24:b8:16:95: 0c:91:19:b1:e8:44:cd:f2:1b:f2:64:d3:51:f8:a0:7b:17:bc: 00:d8:f2:59:cd:67:3d:80:b1:9f:2e:d1:e8:4d:90:d5:69:e1: 77:b3:c9:ed:c1:33:14:5c:48:33:18:c3:62:93:10:b9:74:49: 6e:1a:37:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7nT+ldF87l4GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJhOWIxOTgtZDIzZC00ZjQxLTgzOTctY2M0NjdiMzk4 YmMzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MTYwN2M3OWYtYmRjMC00ODNiLTkwZTItMTJiYjNiMWFjNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBeMUs3a6RwsfYIH6a0kDFsngh+NwsB5OSb DGMPVnsCeaPLo3NRGYYMoNoDJo4df2gSFD/rQCZfOmKRFAExt56ITz6/QXHXwUtq Lbdz3W3Ua79lLzU1+7xx4vdb3gY7zI+3jJNOqLedmbSUisHPmFLHtJbcmyTAHJFP xTsvDQ2++VWnW0pO+w4IOYAjhb7rbSKXrXgiqno4WNpzvHTzvmsrKZHcGZPOupxD hen+sxRH9yGGW4Uqy25FAB2sYrrUhNNqym+yfOopyo0yaMme8rgmrZoTu68rZ4ee yWusYHmuunmaZ1f9IlE94bUHcny8PHAosKDwwqXgopPwEQizvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9+tH5W+p81ClmonGnXOIBfFNxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5 YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2N2IzOThiYzMvMjBiMTIxNTktZmFlMS0z MjRiLTg1NmUtNGZmYWFhMDI5OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTJhOWIxOTgtZDIzZC00ZjQxLTgz OTctY2M0NjdiMzk4YmMzLzEyYTliMTk4LWQyM2QtNGY0MS04Mzk3LWNjNDY3YjM5 OGJjMy5jcmwwHwYDVR0jBBgwFoAUcoQNQ2lvKkNnIu1rRiCjgpxFRzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2 N2IzOThiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBIN3WDzqigbkFaxgSFKYkbV/3ecP7Z67hiHX0456GQnXj1iLGo1EVh ixqwAMKnpsc3wrlomm+BNeunLcApEGFzHyrER06PHQprppyAmblF1u8MTfek2JJF 6QV+gUjbFl3Rupif0QBAq00V7wDfyqdyRviMwAyyh254sPs5MAsUwzbN8Vra//1V bhrxENkW1uJIuXgTCuI17jlCVWlbiUVsNd5HX41NTyV3b+kMR3UW0OyyMeWxCThN K40xXG6bXtRBJLgWlQyRGbHoRM3yG/Jk01H4oHsXvADY8lnNZz2AsZ8u0ehNkNVp 4Xezye3BMxRcSDMYw2KTELl0SW4aN2E= -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:34 2025 by rpki-client