$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa File: c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa (raw, json) Hash identifier: pVyCx/d4JEa5N8PFHD4AkdyvcgrJMshdsQj+McBvBh4= Subject key identifier: 72:EB:EB:6B:50:37:99:0B:03:79:94:83:F8:13:C6:26:C8:6A:6E:51 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584BBE4043C4AA4A6F4FF7EA0730 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 11650 IP address blocks: 198.58.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:43:c4:aa:4a:6f:4f:f7:ea:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f3f8fd63-4d8f-462f-a835-9cefd469b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:9b:b9:43:8a:17:e3:57:af:4b:0e:c7:8c: c3:60:95:85:40:62:b3:c4:24:9b:9c:b1:f1:25:39: 64:14:a7:a2:a8:31:07:69:2c:c9:bb:58:3d:93:ea: fa:7e:dc:46:5e:89:11:4a:ed:50:e0:fb:1d:90:bf: d6:27:6d:61:73:8e:56:d8:3d:57:5b:b0:cb:65:81: c4:c5:9a:74:12:a8:dd:9e:5e:ac:f0:cc:58:77:fc: 1b:5b:cc:40:6c:59:78:f6:90:21:28:1b:45:85:db: 45:6b:0d:8e:dd:83:aa:69:93:da:42:dd:a0:bc:6d: 7a:d4:88:d0:1d:26:3b:90:3d:c5:8d:9a:69:32:5f: f2:c8:a6:50:ee:4a:90:5c:25:20:fc:e6:c5:8b:00: b1:45:d0:f0:cf:16:68:da:2a:21:f0:94:3e:5b:ce: 72:91:3a:c2:96:c1:e0:02:7a:1e:fa:fa:eb:9f:88: 1a:f0:ca:16:64:28:5a:85:f3:1b:41:f3:83:b8:4f: 1f:8b:d6:b2:d1:cc:b7:27:50:b9:db:3f:08:f8:e2: cb:b1:e8:05:16:84:12:74:10:62:64:25:96:b5:93: d9:80:87:2f:62:86:12:73:80:64:ca:5e:09:09:4a: 6c:c9:22:60:8a:c7:e4:ca:a3:f6:ac:db:e1:91:b5: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:EB:6B:50:37:99:0B:03:79:94:83:F8:13:C6:26:C8:6A:6E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c03f1257-836c-3ba5-9b5c-a3acd2de2f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 198.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:21:93:37:fc:b4:25:f9:42:ae:7d:f9:95:bf:3d:63:9c:8d: 9e:02:1a:55:50:83:1d:2e:fe:42:1b:57:93:0f:dd:28:e8:b5: a1:6e:3b:49:a7:be:fb:2a:b7:49:ab:79:59:bf:d9:95:ca:2d: 46:ef:d5:c4:b2:a7:22:7c:3a:39:b4:4c:a6:83:99:da:fb:b0: 98:31:7f:ed:9c:b7:18:41:4f:a6:c8:a3:31:f3:35:cf:05:14: 41:85:47:0e:ad:44:cc:8e:f1:75:c0:f7:db:d7:d9:6e:40:12: ac:d1:be:2c:0f:ee:54:2b:c3:41:5c:4a:b3:02:7f:2e:7f:bf: 06:94:5e:24:4b:8b:33:83:2b:59:c5:3d:0b:0c:5d:80:3e:36: 9d:4a:41:04:4a:19:6b:e4:6c:f8:fe:c3:ca:dc:11:03:90:7f: 2d:c2:d4:26:74:ca:5c:ef:c1:93:99:66:7f:73:40:dc:9b:e8: 56:0d:b8:7d:4f:bf:2d:8c:63:e8:9c:54:30:0f:7b:30:9c:b7: cf:0a:9a:13:4b:81:46:c6:91:45:f9:79:1a:ff:09:32:6b:7a: 32:34:21:a9:3b:44:4b:11:7b:97:93:2a:29:1d:b1:7f:86:67: bc:4f:58:a8:85:35:27:fd:dd:f3:c4:d0:a0:92:bb:58:1f:82: d0:07:de:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEPEqkpvT/fqBzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjNmOGZkNjMtNGQ4Zi00NjJmLWE4MzUtOWNlZmQ0NjliMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJabuUOKF+NXr0sOx4zDYJWFQGKzxCSbnLHx JTlkFKeiqDEHaSzJu1g9k+r6ftxGXokRSu1Q4PsdkL/WJ21hc45W2D1XW7DLZYHE xZp0Eqjdnl6s8MxYd/wbW8xAbFl49pAhKBtFhdtFaw2O3YOqaZPaQt2gvG161IjQ HSY7kD3FjZppMl/yyKZQ7kqQXCUg/ObFiwCxRdDwzxZo2ioh8JQ+W85ykTrClsHg Anoe+vrrn4ga8MoWZChahfMbQfODuE8fi9ay0cy3J1C52z8I+OLLsegFFoQSdBBi ZCWWtZPZgIcvYoYSc4Bkyl4JCUpsySJgisfkyqP2rNvhkbWcCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLr62tQN5kLA3mUg/gTxibIam5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYzAzZjEyNTctODM2Yy0z YmE1LTliNWMtYTNhY2QyZGUyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUhkzf8tCX5Qq59+ZW/PWOcjZ4CGlVQgx0u/kIbV5MP3SjotaFuO0mn vvsqt0mreVm/2ZXKLUbv1cSypyJ8Ojm0TKaDmdr7sJgxf+2ctxhBT6bIozHzNc8F FEGFRw6tRMyO8XXA99vX2W5AEqzRviwP7lQrw0FcSrMCfy5/vwaUXiRLizODK1nF PQsMXYA+Np1KQQRKGWvkbPj+w8rcEQOQfy3C1CZ0ylzvwZOZZn9zQNyb6FYNuH1P vy2MY+icVDAPezCct88KmhNLgUbGkUX5eRr/CTJrejI0Iak7REsRe5eTKikdsX+G Z7xPWKiFNSf93fPE0KCSu1gfgtAH3hk= -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:29 2025 by rpki-client