$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa File: b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json) Hash identifier: tGQnSLCSbfZeknG/IhaoltATN6sXQsMQaleuJtFQZFc= Subject key identifier: 84:1B:01:41:05:C8:67:98:8A:02:2D:81:F6:8C:A4:A8:A3:06:3E:80 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584BABFD0EB0352AAA2741F9E700 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 394177 IP address blocks: 158.62.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0e:b0:35:2a:aa:27:41:f9:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=cd2370dd-d71e-4a70-9d8c-93e0c87d7b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:48:15:bb:ac:dd:ad:a2:4f:9a:f2:4e:60: d1:4b:d1:aa:16:fb:e9:ec:d7:eb:34:5c:18:c2:73: 4c:a4:db:f9:05:ef:77:f9:59:6a:31:03:8b:70:b8: c3:6d:ae:0f:66:1b:d3:7c:ff:c0:af:73:25:86:84: 07:f1:50:c2:a7:84:d2:03:89:e2:d5:8d:1b:7c:2a: 46:9b:f0:d5:b5:fb:ec:a2:9d:47:30:e5:08:05:81: 03:55:1d:56:cc:12:74:a3:85:33:aa:5b:74:11:f0: c0:99:72:7a:66:aa:f2:1d:cc:b2:c2:0e:a5:1d:f4: 0d:66:b8:14:33:0c:a6:62:45:96:9d:74:72:a7:ed: e0:25:23:ad:60:8e:13:85:db:5f:5d:ca:e9:7e:3c: 8a:4a:09:9f:bb:f2:6e:28:92:58:90:0b:fa:3d:e1: 80:6f:85:f2:8b:60:45:7d:36:5a:c5:e3:46:7a:b1: 3b:c4:5f:73:12:89:ab:85:37:bb:71:0b:59:40:17: dc:1d:d6:b4:76:25:5c:a3:a5:ab:7d:3c:9d:a9:98: 5f:dd:51:91:fc:69:cf:4c:36:22:c3:ae:44:89:ba: f4:bc:d5:70:b6:4a:27:c8:ca:cb:f1:fa:2a:22:78: b8:f4:54:82:b3:8f:c1:36:27:2f:07:8d:1a:1b:e6: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1B:01:41:05:C8:67:98:8A:02:2D:81:F6:8C:A4:A8:A3:06:3E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2c:57:1a:c2:31:0c:1f:03:55:7e:09:9a:14:ae:e0:ea:fa: b1:6c:7b:53:f9:c3:6f:f8:44:10:62:a7:98:d3:d8:53:00:71: 92:92:07:34:5a:cf:82:9e:c8:ec:71:2c:12:c1:a7:40:ff:58: 33:8b:e0:dc:86:8d:71:90:88:ba:f8:74:83:66:6f:1a:14:e3: a6:2d:bd:8f:91:e2:4d:51:f0:e2:f1:4f:1c:50:79:1c:61:b4: b2:10:05:a4:1c:d3:de:a5:25:f5:0b:bc:ad:42:63:65:fc:82: ad:e9:99:8f:02:43:66:d1:c3:90:27:d6:25:3d:b9:10:1e:3f: 99:24:30:b7:99:cc:8c:e8:48:97:ea:e9:7b:dc:38:7d:8b:e3: 7b:30:e0:bf:e5:81:6b:0a:dd:ad:18:48:0d:ae:e2:dc:cc:6f: 92:9b:7c:44:48:ac:a5:c4:e9:87:ea:55:13:f5:e6:ee:68:17: a3:c1:e1:42:e3:02:4b:16:9e:72:20:b9:f1:95:7b:54:78:d1: e0:bd:aa:2b:b8:86:76:2f:e9:02:37:56:75:a1:24:1d:87:7e: 53:06:4c:61:b8:ae:ee:89:27:cb:1b:0f:49:3f:28:9a:8c:15: 8e:57:a2:90:48:05:0a:70:e5:3b:df:dc:b4:c2:a4:b8:5d:c9: 5f:84:3a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Q6wNSqqJ0H55wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2QyMzcwZGQtZDcxZS00YTcwLTlkOGMtOTNlMGM4N2Q3YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFIFbus3a2iT5ryTmDRS9GqFvvp7NfrNFwY wnNMpNv5Be93+VlqMQOLcLjDba4PZhvTfP/Ar3MlhoQH8VDCp4TSA4ni1Y0bfCpG m/DVtfvsop1HMOUIBYEDVR1WzBJ0o4Uzqlt0EfDAmXJ6ZqryHcyywg6lHfQNZrgU MwymYkWWnXRyp+3gJSOtYI4ThdtfXcrpfjyKSgmfu/JuKJJYkAv6PeGAb4Xyi2BF fTZaxeNGerE7xF9zEomrhTe7cQtZQBfcHda0diVco6WrfTydqZhf3VGR/GnPTDYi w65Eibr0vNVwtkonyMrL8foqIni49FSCs4/BNicvB40aG+ajWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQbAUEFyGeYigItgfaMpKijBj6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjM4OGM0MTUtN2Q3ZS0z ZWVkLThlZWYtNDRhNGQzNThjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEsVxrCMQwfA1V+CZoUruDq+rFse1P5w2/4RBBip5jT2FMAcZKSBzRa z4KeyOxxLBLBp0D/WDOL4NyGjXGQiLr4dINmbxoU46YtvY+R4k1R8OLxTxxQeRxh tLIQBaQc096lJfULvK1CY2X8gq3pmY8CQ2bRw5An1iU9uRAeP5kkMLeZzIzoSJfq 6XvcOH2L43sw4L/lgWsK3a0YSA2u4tzMb5KbfERIrKXE6YfqVRP15u5oF6PB4ULj AksWnnIgufGVe1R40eC9qiu4hnYv6QI3VnWhJB2HflMGTGG4ru6JJ8sbD0k/KJqM FY5XopBIBQpw5Tvf3LTCpLhdyV+EOtg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:18 2025 by rpki-client