$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa File: 238fbfe8-3613-3672-8018-1e50c39bc5d3.roa (raw, json) Hash identifier: lBntMqiL5c46l+QE/3U0s09+AoUlyAZllsSIwYEsjOE= Subject key identifier: D8:97:91:A1:74:AD:75:CB:FC:38:97:7D:F7:CA:0D:30:A9:78:FA:B2 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B7DECAD814BE09F68D2B0D280 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 398156 IP address blocks: 198.48.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ad:81:4b:e0:9f:68:d2:b0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=3a2905df-f44f-4bc3-98f7-f13cb546b9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:6c:a1:80:fd:93:eb:e5:ad:d3:6d:96:2d: a2:b8:69:bf:c8:56:50:d7:cc:b7:25:59:7a:7f:ae: 48:43:85:72:5b:a7:92:03:da:9a:2d:fd:55:50:be: aa:49:8e:70:ec:db:7c:e4:19:80:c5:25:8c:ae:29: 42:14:eb:3c:8c:b4:72:31:99:8d:22:0a:c4:03:54: c8:47:f7:94:cd:de:ff:ee:76:92:87:fb:31:83:14: b1:94:41:8f:1f:c2:b0:76:10:86:ea:14:7e:e1:21: d1:53:64:3b:c9:9c:36:f7:2a:89:dc:54:11:13:19: 2f:7d:d5:54:97:6c:30:c6:8d:a6:8c:8e:cf:02:03: 00:23:0a:e5:6a:84:01:8c:6b:d7:06:b2:31:50:42: 97:f0:98:62:5f:e7:26:3d:5d:71:7b:99:c6:68:96: af:9d:e0:bc:a4:2d:03:74:2e:5f:f7:6f:1f:da:18: 06:45:9d:2d:f8:c1:b4:09:50:5b:32:5c:6a:6b:a1: 52:29:5e:0c:9c:28:98:10:9f:91:f5:9b:65:b5:f5: 92:a3:cc:07:a9:af:29:63:e6:00:52:65:8e:04:dc: 4e:ce:fa:bb:5f:ca:e0:1e:5f:0f:c1:a3:fc:20:11: f4:9c:81:57:86:4b:3c:90:99:0b:2f:4a:ec:cb:9e: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:91:A1:74:AD:75:CB:FC:38:97:7D:F7:CA:0D:30:A9:78:FA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/238fbfe8-3613-3672-8018-1e50c39bc5d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 198.48.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ee:14:b0:6f:06:75:0e:ae:68:4b:8e:86:89:78:0d:a9:4b: 5e:d2:06:d8:d1:67:4e:55:49:c2:3a:c5:f2:43:68:2e:bc:41: 50:6b:4a:c9:a2:e2:b4:c0:f3:95:ce:9d:db:59:1f:0f:82:81: 95:2a:19:27:79:d9:b7:d2:e4:cf:36:c3:fb:5e:ad:5b:2c:d1: 26:fa:f7:22:72:a5:eb:18:ce:b0:d3:34:f7:5a:1e:2b:e6:75: f8:5e:a7:ec:18:38:c6:b3:6e:0d:f7:5f:d4:a3:5c:f6:fc:0b: 82:e5:f3:fb:68:16:13:95:ff:5c:2a:86:c9:88:56:a5:7d:c9: 93:12:1a:9a:69:f4:ae:5c:ce:37:3c:6e:bf:d3:2f:6b:99:71: e3:51:76:45:dd:cb:dd:28:e9:6e:66:5d:b1:71:15:44:2b:13: a6:47:d7:b9:bf:25:1b:30:32:a3:fe:41:4c:0c:93:68:50:a7: 8d:47:49:91:72:8b:ea:3b:03:42:cc:5c:51:72:95:9f:3e:63: 29:2f:43:90:0e:e8:0a:f1:67:34:3a:6b:20:4d:b5:01:95:33: d2:f6:4a:4b:34:99:18:a5:bf:e6:17:b7:17:f3:23:d1:70:b7: dc:4d:9a:75:24:b0:e6:84:0d:7d:ac:1c:4c:2a:9c:df:42:4a: e3:c3:90:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K2BS+CfaNKw0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk M2EyOTA1ZGYtZjQ0Zi00YmMzLTk4ZjctZjEzY2I1NDZiOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa1soYD9k+vlrdNtli2iuGm/yFZQ18y3JVl6 f65IQ4VyW6eSA9qaLf1VUL6qSY5w7Nt85BmAxSWMrilCFOs8jLRyMZmNIgrEA1TI R/eUzd7/7naSh/sxgxSxlEGPH8KwdhCG6hR+4SHRU2Q7yZw29yqJ3FQRExkvfdVU l2wwxo2mjI7PAgMAIwrlaoQBjGvXBrIxUEKX8JhiX+cmPV1xe5nGaJavneC8pC0D dC5f928f2hgGRZ0t+MG0CVBbMlxqa6FSKV4MnCiYEJ+R9ZtltfWSo8wHqa8pY+YA UmWOBNxOzvq7X8rgHl8PwaP8IBH0nIFXhks8kJkLL0rsy55efwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiXkaF0rXXL/DiXfffKDTCpePqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMjM4ZmJmZTgtMzYxMy0z NjcyLTgwMTgtMWU1MGMzOWJjNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfuFLBvBnUOrmhLjoaJeA2pS17SBtjRZ05VScI6xfJDaC68QVBrSsmi 4rTA85XOndtZHw+CgZUqGSd52bfS5M82w/terVss0Sb69yJypesYzrDTNPdaHivm dfhep+wYOMazbg33X9SjXPb8C4Ll8/toFhOV/1wqhsmIVqV9yZMSGppp9K5czjc8 br/TL2uZceNRdkXdy90o6W5mXbFxFUQrE6ZH17m/JRswMqP+QUwMk2hQp41HSZFy i+o7A0LMXFFylZ8+YykvQ5AO6ArxZzQ6ayBNtQGVM9L2Sks0mRilv+YXtxfzI9Fw t9xNmnUksOaEDX2sHEwqnN9CSuPDkCI= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:35 2025 by rpki-client