$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json) Hash identifier: 85oWqFU1Fs/LpdbVXs3TnsJ02fWahPXalR1R5OZQWSY= Subject key identifier: 47:D8:6F:AA:BB:DF:ED:46:61:ED:DB:99:B8:76:4B:14:4A:AC:E1:21 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584AE4611E510C66CD8C9BCC4300 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 2572 IP address blocks: 198.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1e:51:0c:66:cd:8c:9b:cc:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=a72b065f-a8b6-4470-9daa-a3e2d3fbbcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:52:62:5e:3b:34:74:1f:5d:a3:27:30:22: 1e:98:1c:87:74:1b:bf:46:7c:7f:28:fd:ba:5a:8f: 47:20:e7:46:d7:16:c1:73:d1:a7:cc:1a:46:8f:21: 0f:5c:24:d8:7e:f9:09:c5:c6:6e:8e:90:f5:03:61: d9:30:47:e9:f0:9a:98:dd:c7:c3:ed:60:60:59:6c: 22:e9:61:5b:f1:c1:0f:c1:77:82:b2:b7:86:a2:6b: ba:a6:d4:a2:d4:5e:2d:0d:93:47:93:73:4f:cd:40: 83:ee:ea:3b:f7:48:04:8a:41:b1:38:5b:7b:ce:32: 9f:c9:6e:07:c4:c7:67:42:66:56:d7:3d:f2:60:8a: 92:c8:f7:04:65:dc:24:ae:d4:f3:9d:e4:98:90:e9: ac:05:65:0d:68:83:8e:46:10:ec:b5:1c:21:01:98: 27:a2:da:37:bd:62:b4:d7:52:60:6f:ed:07:c5:73: bd:45:12:f6:3e:df:8c:fe:ae:60:c2:32:de:ed:1b: 8f:7f:77:08:d3:17:a0:9c:81:ab:a6:ff:89:6b:52: 48:c3:df:a9:6c:4d:23:4f:61:3a:19:e0:10:99:33: 80:38:24:03:e3:06:81:18:66:75:50:9d:df:24:cb: aa:23:56:1d:75:bc:6f:ca:e9:66:f7:a9:5f:83:c9: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:6F:AA:BB:DF:ED:46:61:ED:DB:99:B8:76:4B:14:4A:AC:E1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 198.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:95:f9:f6:73:7c:65:00:ba:10:8e:ac:02:a1:1d:8c:ea:19: 06:a1:07:d7:cf:42:c4:6d:5a:91:1b:54:7b:dc:20:02:b2:69: c5:63:51:84:9e:ca:94:68:56:53:24:5e:ef:77:c7:8c:bf:f6: 65:e2:8d:f9:30:d2:e6:4f:b3:96:41:2c:b2:c0:ab:af:bd:3a: 3f:62:c2:2c:29:28:48:e7:17:4d:30:ee:29:81:a9:b8:81:2a: c3:cc:94:7b:8e:e6:ca:6e:3f:56:9a:39:c4:45:8e:ba:d2:2a: e1:8e:78:2d:ed:c8:5a:8b:6a:e4:63:45:dc:3b:64:f2:05:11: bb:48:5d:ec:85:5c:94:a7:23:1f:ea:fd:8a:00:0d:67:20:b0: cb:65:18:2a:46:e1:3a:48:0c:00:cc:04:96:69:6d:94:7c:07: 36:c7:5a:21:cc:d7:12:be:7b:be:c1:c2:c8:bf:b2:ba:01:fc: b2:05:9f:85:4b:e8:b9:7a:b2:4e:06:a7:9c:d8:d1:ca:3f:1b: 6a:52:c8:18:28:3c:95:d9:1c:40:6c:1f:63:d1:3b:db:f3:ea: bf:29:de:1c:f7:80:3a:92:3e:07:9a:78:cf:82:76:63:fd:a1: da:68:b6:28:08:88:eb:98:75:f1:ae:03:06:40:c3:f9:1d:e8: 97:de:3b:f2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErkYR5RDGbNjJvMQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YTcyYjA2NWYtYThiNi00NDcwLTlkYWEtYTNlMmQzZmJiY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDhSYl47NHQfXaMnMCIemByHdBu/Rnx/KP26 Wo9HIOdG1xbBc9GnzBpGjyEPXCTYfvkJxcZujpD1A2HZMEfp8JqY3cfD7WBgWWwi 6WFb8cEPwXeCsreGomu6ptSi1F4tDZNHk3NPzUCD7uo790gEikGxOFt7zjKfyW4H xMdnQmZW1z3yYIqSyPcEZdwkrtTzneSYkOmsBWUNaIOORhDstRwhAZgnoto3vWK0 11Jgb+0HxXO9RRL2Pt+M/q5gwjLe7RuPf3cI0xegnIGrpv+Ja1JIw9+pbE0jT2E6 GeAQmTOAOCQD4waBGGZ1UJ3fJMuqI1Yddbxvyulm96lfg8kM4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEfYb6q73+1GYe3bmbh2SxRKrOEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhpX59nN8ZQC6EI6sAqEdjOoZBqEH189CxG1akRtUe9wgArJpxWNRhJ7K lGhWUyRe73fHjL/2ZeKN+TDS5k+zlkEsssCrr706P2LCLCkoSOcXTTDuKYGpuIEq w8yUe47mym4/Vpo5xEWOutIq4Y54Le3IWotq5GNF3Dtk8gURu0hd7IVclKcjH+r9 igANZyCwy2UYKkbhOkgMAMwElmltlHwHNsdaIczXEr57vsHCyL+yugH8sgWfhUvo uXqyTgannNjRyj8balLIGCg8ldkcQGwfY9E72/PqvyneHPeAOpI+B5p4z4J2Y/2h 2mi2KAiI65h18a4DBkDD+R3ol9478g== -----END CERTIFICATE-----Generated at Wed Nov 5 22:35:53 2025 by rpki-client