$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa File: 5afc74d5-bd90-3262-99c1-264ee819ce2a.roa (raw, json) Hash identifier: zMk9lJaNseES5mcSnB8pp1EemEZnkSxdDDvzU8pr5jA= Subject key identifier: 88:9C:A5:5A:81:9E:6A:2F:07:B8:D7:61:51:C0:EE:62:84:53:41:F9 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B0B76BBF82B9E1B6784564E80 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13332 IP address blocks: 198.89.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bb:f8:2b:9e:1b:67:84:56:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a56423cc-d73b-456f-b801-fb790891f3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:34:66:9c:31:1f:de:38:fc:70:f5:6f:ad: 25:d4:9a:81:f4:22:d0:f7:5f:9e:18:3b:48:b0:f8: d8:28:53:2d:fb:44:ab:6e:00:89:c5:d2:e6:cb:39: 9f:bb:bc:ba:46:ca:02:f1:fc:c5:8d:4a:1a:69:04: 72:32:9a:85:59:09:de:10:9f:ca:e0:2d:34:a8:2d: cf:2f:48:45:f7:2b:fa:fb:fc:39:f2:e9:d6:01:62: 80:37:9a:be:cb:7f:07:69:b9:93:3d:e4:2b:63:ff: 58:57:6b:b3:f0:88:0b:9a:db:30:86:eb:4e:fc:93: d7:3d:ab:1c:a3:5b:70:e2:54:de:ee:2b:be:19:27: 7e:0f:cd:5e:27:a4:0c:dc:a0:7b:70:05:e6:12:e5: d9:f6:fc:28:b6:fb:e7:9e:67:03:1b:77:89:f1:6c: 8e:ce:09:9c:0a:ab:0d:3e:dc:72:48:47:3b:a0:51: 11:77:95:8b:b1:96:95:ec:76:16:14:cc:74:81:9e: 73:dd:17:69:e2:2c:f5:29:c0:8c:f6:f6:6c:0c:f3: 20:b2:5c:14:94:27:29:f9:e6:30:1e:c4:ee:80:07: 11:9a:a4:47:8c:b9:05:13:34:93:da:ef:ed:3a:5f: 09:50:98:00:82:f1:7a:35:ca:d2:be:c2:c6:74:ff: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:A5:5A:81:9E:6A:2F:07:B8:D7:61:51:C0:EE:62:84:53:41:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f3:45:eb:6d:df:2b:40:5c:4f:f9:7e:1e:58:a7:b9:03:04: a4:99:97:77:78:4f:6b:a9:33:8e:33:c1:8b:54:a9:27:3f:ad: 55:6c:a2:57:fd:f3:a5:f4:64:7f:31:c5:e1:a3:3e:79:ff:f6: 01:45:1c:46:80:a6:18:0e:bf:64:b9:76:ff:c2:a8:5d:e2:26: 02:88:5a:3b:ff:bb:42:b9:51:10:56:77:7d:dd:cb:5b:c6:8c: b2:48:51:c4:a5:8c:7d:8d:14:45:b4:3e:ff:d2:bc:29:1c:bb: 15:58:65:83:61:a9:3f:d3:0d:14:96:c3:38:2a:8c:a0:26:63: e1:5b:d1:3d:f0:79:4b:94:8b:e7:68:61:da:26:e1:1d:7e:6a: c2:25:cd:d5:0a:0b:6f:b7:fc:d4:10:8f:7f:26:22:74:a7:a8: d0:de:81:c0:f6:e2:22:6e:90:81:97:de:88:30:fc:f4:af:76: 1d:3a:fc:46:9d:fe:69:c8:84:d6:88:03:bc:89:66:98:43:48: 34:3a:3f:f6:ac:07:7b:94:ef:db:6f:74:a4:f2:3a:d4:d9:12: 1e:1d:62:a0:7b:8c:f8:4f:86:5e:58:95:ac:1c:5d:ab:6e:dc: 4c:ca:17:05:6a:c5:b2:68:26:79:14:65:8f:2a:f2:99:d0:1b: 22:54:ea:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrv4K54bZ4RWToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTU2NDIzY2MtZDczYi00NTZmLWI4MDEtZmI3OTA4OTFmM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30s0ZpwxH944/HD1b60l1JqB9CLQ91+eGDtI sPjYKFMt+0SrbgCJxdLmyzmfu7y6RsoC8fzFjUoaaQRyMpqFWQneEJ/K4C00qC3P L0hF9yv6+/w58unWAWKAN5q+y38HabmTPeQrY/9YV2uz8IgLmtswhutO/JPXPasc o1tw4lTe7iu+GSd+D81eJ6QM3KB7cAXmEuXZ9vwotvvnnmcDG3eJ8WyOzgmcCqsN PtxySEc7oFERd5WLsZaV7HYWFMx0gZ5z3Rdp4iz1KcCM9vZsDPMgslwUlCcp+eYw HsTugAcRmqRHjLkFEzST2u/tOl8JUJgAgvF6NcrSvsLGdP/bCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIicpVqBnmovB7jXYVHA7mKEU0H5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWFmYzc0ZDUtYmQ5MC0z MjYyLTk5YzEtMjY0ZWU4MTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxll4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXzRett3ytAXE/5fh5Yp7kDBKSZl3d4T2upM44zwYtUqSc/rVVsolf9 86X0ZH8xxeGjPnn/9gFFHEaAphgOv2S5dv/CqF3iJgKIWjv/u0K5URBWd33dy1vG jLJIUcSljH2NFEW0Pv/SvCkcuxVYZYNhqT/TDRSWwzgqjKAmY+Fb0T3weUuUi+do Ydom4R1+asIlzdUKC2+3/NQQj38mInSnqNDegcD24iJukIGX3ogw/PSvdh06/Ead /mnIhNaIA7yJZphDSDQ6P/asB3uU79tvdKTyOtTZEh4dYqB7jPhPhl5YlawcXatu 3EzKFwVqxbJoJnkUZY8q8pnQGyJU6ik= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:06 2025 by rpki-client