$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa File: c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa (raw, json) Hash identifier: B+aH14WWwHSZKflPq2+bL79sC+VzDmDjAniLWVV1z3E= Subject key identifier: D0:4C:23:78:0C:CA:44:95:32:A8:53:D3:53:9A:B2:09:06:23:6B:E9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7B66282EF45BC5F878080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 20454 IP address blocks: 198.24.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b6:62:82:ef:45:bc:5f:87:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=bb36e142-8306-4ca6-8115-e17f5792c1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:57:73:cf:41:3c:5e:3a:25:ac:e0:ae:8d: 43:d0:3e:fb:a2:2a:ff:fc:bd:1b:7a:93:08:eb:d5: 34:2f:85:f4:39:b0:07:87:ed:fd:e6:54:36:a8:2e: 35:e8:6d:11:cc:ac:33:9a:5b:fb:f2:52:8e:a5:32: ef:23:53:6f:56:2e:c4:d2:e7:47:b6:44:68:c8:44: 87:e6:c5:1f:f7:0d:58:2d:62:3f:ef:34:b2:2e:d4: 95:21:fd:d2:f2:de:62:23:b3:cb:1c:ec:98:71:d5: 09:cf:62:2e:28:d6:c5:52:2c:2b:6a:53:02:4a:36: 22:5e:a0:a3:88:3c:2e:72:74:74:9b:82:1e:7a:d3: a3:9c:f9:7c:bc:32:0f:50:09:33:d1:b6:bc:89:6f: db:4f:ab:d4:6a:d8:49:85:8a:a4:5a:63:bb:e0:a9: 60:d7:96:31:03:db:f8:70:06:c6:cd:4a:74:64:99: f6:bd:84:a1:6e:a7:ce:3e:b9:94:4e:41:ce:6b:2d: e0:b9:9e:22:d2:5d:68:0d:ac:3b:92:5d:db:8e:87: f5:c4:c0:b6:06:8a:77:5f:ab:46:2c:91:9b:67:66: ab:5b:53:ed:50:4a:da:ff:9c:0c:99:bb:20:73:92: 04:9b:bd:dc:59:38:76:3e:79:ec:78:a5:4c:63:fb: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4C:23:78:0C:CA:44:95:32:A8:53:D3:53:9A:B2:09:06:23:6B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 198.24.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:22:a2:46:a8:af:31:37:52:0d:29:50:f8:2c:f2:f7:ec:c8: 37:41:34:39:1f:9c:fe:9d:02:f6:30:46:ec:5b:38:7d:d3:d5: b9:a2:da:c7:ba:b0:fc:a6:89:fd:a3:7d:5c:08:c4:68:93:c2: d3:e6:93:6e:ef:6e:4c:60:3a:2b:81:b5:31:6e:64:8f:dd:6f: f8:22:ee:ca:21:2e:e7:e9:1f:c2:5d:92:d5:3d:79:fe:87:2d: f7:d0:b9:86:5d:81:f4:7d:44:8d:72:1a:b0:68:69:08:48:87: dc:a2:46:33:c2:97:94:b4:e0:8e:a3:a2:89:a2:f4:b4:66:c4: 92:e9:6c:3b:8a:c0:36:27:52:e1:2f:1e:81:54:87:7e:17:45: 4f:8f:d1:91:55:fa:f0:be:9b:4d:5c:b4:93:38:41:90:c7:66: 2f:de:3c:95:00:75:df:b3:e0:59:a7:9b:42:e1:1a:cd:eb:44: 01:2f:5b:5d:a3:55:b3:5b:96:b6:dd:5d:66:64:82:0a:1a:75: a6:ee:f5:4b:fc:28:e1:dc:94:9a:07:7e:38:2a:10:93:fd:47: 53:a4:f8:40:67:1c:74:8f:48:14:b4:b2:5e:54:68:53:cf:9b: 3a:2e:3c:a8:83:c8:8f:e8:d9:89:8e:f0:80:d1:9f:08:d1:0d: d8:6e:b8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7Zigu9FvF+HgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YmIzNmUxNDItODMwNi00Y2E2LTgxMTUtZTE3ZjU3OTJjMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1VXc89BPF46Jazgro1D0D77oir//L0bepMI 69U0L4X0ObAHh+395lQ2qC416G0RzKwzmlv78lKOpTLvI1NvVi7E0udHtkRoyESH 5sUf9w1YLWI/7zSyLtSVIf3S8t5iI7PLHOyYcdUJz2IuKNbFUiwralMCSjYiXqCj iDwucnR0m4IeetOjnPl8vDIPUAkz0ba8iW/bT6vUathJhYqkWmO74Klg15YxA9v4 cAbGzUp0ZJn2vYShbqfOPrmUTkHOay3guZ4i0l1oDaw7kl3bjof1xMC2Bop3X6tG LJGbZ2arW1PtUEra/5wMmbsgc5IEm73cWTh2PnnseKVMY/vRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBMI3gMykSVMqhT01OasgkGI2vpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzI4MmJiZGQtODI2Yy0z NzgzLWI2MGUtN2EyZWY3ODBhYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxhiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkiokaorzE3Ug0pUPgs8vfsyDdBNDkfnP6dAvYwRuxbOH3T1bmi2se6 sPymif2jfVwIxGiTwtPmk27vbkxgOiuBtTFuZI/db/gi7sohLufpH8JdktU9ef6H LffQuYZdgfR9RI1yGrBoaQhIh9yiRjPCl5S04I6joomi9LRmxJLpbDuKwDYnUuEv HoFUh34XRU+P0ZFV+vC+m01ctJM4QZDHZi/ePJUAdd+z4Fmnm0LhGs3rRAEvW12j VbNblrbdXWZkggoadabu9Uv8KOHclJoHfjgqEJP9R1Ok+EBnHHSPSBS0sl5UaFPP mzouPKiDyI/o2YmO8IDRnwjRDdhuuAw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:16 2025 by rpki-client