$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa File: bd9188e8-ffee-390e-87df-a36c96325cad.roa (raw, json) Hash identifier: a1cdS35N21ZsgvtgoqXSvkRQ4mneBU91MTDy2ue5XaA= Subject key identifier: C3:9B:02:86:A0:0B:64:4D:41:D2:FE:5E:68:72:62:53:D0:13:D8:70 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584BBFA59B4C8D1C34AFE219BEA0 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 398872 IP address blocks: 198.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:9b:4c:8d:1c:34:af:e2:19:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=04f3e95c-ecb4-4bd4-917d-c86711caf2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:2f:a0:f5:87:3d:6a:1e:c9:1b:7b:f5:3c: a9:be:71:3c:bc:27:2f:3e:32:8b:e9:f9:7c:06:00: 7d:02:c4:0d:f4:0e:65:0b:0c:7b:26:a5:11:a5:ee: ae:68:bb:7d:60:7d:3d:01:0b:86:b3:94:7f:e0:c5: a6:4a:b9:11:e9:c9:58:b4:ca:79:c5:f2:e6:a6:fa: df:40:d0:ca:bb:54:74:5f:9f:cb:55:5a:fc:91:f4: 0e:47:ee:d0:93:08:66:27:76:ce:85:b0:ee:94:85: d2:3a:d1:cf:40:57:2f:0c:3b:09:3f:e4:af:23:fc: 0e:83:c6:4d:39:7d:68:0f:61:c9:82:81:d0:9a:8d: 7d:50:0d:28:c6:c4:18:8f:84:98:05:49:d9:4d:98: 3f:76:cf:69:4b:8b:12:c2:05:6c:08:49:31:b0:5d: 96:1d:e9:09:1d:09:4d:c8:cd:c5:f2:1a:83:0c:7c: 20:2a:9f:c0:73:44:b8:6c:63:c4:08:d8:7a:77:2b: f4:61:7a:fc:26:14:60:25:ab:05:1b:d3:25:ae:f0: 6f:9d:66:e3:51:9c:b7:09:60:b8:af:a0:b9:3f:43: b8:5c:b8:35:de:07:9b:22:9e:3a:cb:f5:28:c0:11: 3e:66:45:9f:ac:78:fa:bb:bb:6b:cd:a0:b9:3e:fc: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:02:86:A0:0B:64:4D:41:D2:FE:5E:68:72:62:53:D0:13:D8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 198.134.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:87:90:f5:0c:ee:98:7e:28:b0:55:8a:b2:43:bd:04:a3:11: f1:b9:ee:a3:a1:3a:dc:ea:7b:37:0f:77:9b:46:f3:7e:66:e0: d9:40:0c:51:a0:9d:76:54:ff:5c:1f:69:2a:8f:0f:3c:b3:99: 5d:f9:b8:e5:61:a2:eb:f5:5c:ad:47:08:70:e1:c9:c5:21:f3: 34:1f:15:36:d4:33:55:ed:83:52:20:99:c4:62:ea:75:f0:40: de:44:8f:b0:43:40:54:13:0d:81:d5:be:a1:db:6c:5c:ad:99: f3:28:c3:06:a7:e7:81:45:4d:ed:49:3c:49:a1:4e:b7:16:37: 9e:58:a9:6d:39:10:d8:62:9c:73:a7:f5:5b:24:2e:ec:22:a5: e3:6a:2f:ff:84:53:51:04:6d:46:fd:ed:5d:b4:a9:56:28:a7: 19:10:2a:64:16:0b:7e:c3:31:86:67:3a:66:0d:a7:b1:38:79: 69:af:ac:a9:04:5b:75:a3:18:95:54:64:02:ef:3e:86:76:35: 8d:c4:e2:98:6e:c8:0e:03:e7:78:46:5b:ef:5b:f3:eb:f3:4a: 87:b9:7b:dc:38:f5:2d:b8:0a:81:1a:b4:04:53:18:f7:f8:07: b9:8f:36:49:f5:44:d6:ed:22:71:35:d0:ab:a5:53:64:d0:3d: 13:54:15:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZtMjRw0r+IZvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDRmM2U5NWMtZWNiNC00YmQ0LTkxN2QtYzg2NzExY2FmMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSEvoPWHPWoeyRt79TypvnE8vCcvPjKL6fl8 BgB9AsQN9A5lCwx7JqURpe6uaLt9YH09AQuGs5R/4MWmSrkR6clYtMp5xfLmpvrf QNDKu1R0X5/LVVr8kfQOR+7QkwhmJ3bOhbDulIXSOtHPQFcvDDsJP+SvI/wOg8ZN OX1oD2HJgoHQmo19UA0oxsQYj4SYBUnZTZg/ds9pS4sSwgVsCEkxsF2WHekJHQlN yM3F8hqDDHwgKp/Ac0S4bGPECNh6dyv0YXr8JhRgJasFG9MlrvBvnWbjUZy3CWC4 r6C5P0O4XLg13gebIp46y/UowBE+ZkWfrHj6u7trzaC5Pvx6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMObAoagC2RNQdL+XmhyYlPQE9hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvYmQ5MTg4ZTgtZmZlZS0z OTBlLTg3ZGYtYTM2Yzk2MzI1Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeHkPUM7ph+KLBVirJDvQSjEfG57qOhOtzqezcPd5tG835m4NlADFGg nXZU/1wfaSqPDzyzmV35uOVhouv1XK1HCHDhycUh8zQfFTbUM1Xtg1IgmcRi6nXw QN5Ej7BDQFQTDYHVvqHbbFytmfMowwan54FFTe1JPEmhTrcWN55YqW05ENhinHOn 9VskLuwipeNqL/+EU1EEbUb97V20qVYopxkQKmQWC37DMYZnOmYNp7E4eWmvrKkE W3WjGJVUZALvPoZ2NY3E4phuyA4D53hGW+9b8+vzSoe5e9w49S24CoEatARTGPf4 B7mPNkn1RNbtInE10KulU2TQPRNUFbE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:26 2025 by rpki-client