$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa File: a5813508-28da-316e-9e85-47818567b716.roa (raw, json) Hash identifier: 9hjZHpz0uyFpJlTJ2/eV4NjSqLZInME78iBao+gcreY= Subject key identifier: 20:1A:48:9E:85:BC:E0:78:54:E3:9E:49:A0:8E:86:25:DB:D2:DE:ED Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78F9FFF9A9ED427DA5D80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 198.207.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:9f:ff:9a:9e:d4:27:da:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5bf50da2-a94b-45ff-ad87-ae3f468abff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:e9:21:1b:c7:2f:ae:e1:3a:17:22:b1:30: 69:89:4e:98:00:41:80:f1:10:05:7e:63:29:09:cc: 04:a2:40:6c:c6:53:90:df:7d:56:2b:77:88:5f:0d: 2c:03:d6:35:23:c0:41:4b:50:a4:28:66:dc:bc:01: f4:c0:1d:a8:22:d4:8c:15:ed:e0:27:ac:b7:14:88: c0:39:2e:e2:03:be:55:ea:12:d4:06:e3:e1:61:aa: 56:dc:e6:ad:dd:46:81:0d:76:47:e3:17:99:79:f1: 9c:89:8d:8d:36:85:49:cf:f3:34:70:58:9c:10:58: a2:a3:c9:56:9e:e9:da:20:75:09:98:ff:b0:e9:6d: 67:ec:50:f4:53:1b:3c:3c:8c:a1:ca:e8:63:5c:4b: c2:20:0e:56:5f:fd:9f:1c:c4:97:ad:f4:17:68:2b: bd:77:9a:e5:8c:d5:7b:30:fe:06:38:cd:cd:e6:76: d6:bc:cd:e1:f0:70:68:a0:2e:23:59:72:9b:87:dc: fb:11:2a:93:f7:1c:5d:48:94:28:fe:3f:dc:86:d7: a9:dd:a9:90:ca:53:cd:f0:46:0f:51:e5:94:73:d3: de:e8:d4:f2:5f:38:91:26:98:f5:d0:7d:46:92:87: ec:be:e5:8c:e2:11:aa:eb:8f:4b:47:e4:1b:a4:bb: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1A:48:9E:85:BC:E0:78:54:E3:9E:49:A0:8E:86:25:DB:D2:DE:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 198.207.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9d:58:1e:e8:e1:41:db:c7:6e:7d:97:1f:a1:82:f2:56:39: 5d:84:64:d5:a1:a3:99:df:c4:a3:31:bd:34:f0:42:ba:05:ac: ca:a0:57:16:10:c9:29:bb:71:b9:31:69:d6:ff:d0:9b:6b:d2: 88:4d:71:90:92:cb:3a:27:7e:4c:5e:62:6f:93:b7:a5:5a:8a: 1a:38:e3:e9:95:1c:e8:cd:93:7e:70:69:d0:5b:e6:93:21:83: 01:0a:31:d2:b3:e7:20:39:c2:c7:94:4c:d2:2e:60:b5:43:1c: 0d:ab:c2:c0:5d:92:64:2d:60:24:a3:1b:93:66:c7:5b:99:1d: 60:d6:b8:ec:82:49:d5:d2:29:42:ef:e9:c5:28:c2:7e:6e:5f: 65:59:70:14:d1:4f:dd:92:d1:2e:04:ee:30:52:fa:a0:df:2c: 7c:fa:c3:82:f3:64:27:d2:31:4b:60:aa:d8:88:92:23:c4:84: cf:e3:fc:11:80:e0:ea:cc:1d:ed:fd:51:9d:07:c3:9c:41:31: 7f:f4:67:26:6e:71:a4:3e:74:9c:e0:2e:00:b7:6d:65:8d:ff: ed:c7:a3:da:f1:49:b4:48:1d:8a:9f:f8:c6:e3:d7:ab:35:55: 3b:0a:0c:fe:d1:bf:9b:6c:b6:0f:d9:fd:d9:9e:a0:eb:61:15: ed:88:4b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4+f/5qe1CfaXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWJmNTBkYTItYTk0Yi00NWZmLWFkODctYWUzZjQ2OGFiZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVHpIRvHL67hOhcisTBpiU6YAEGA8RAFfmMp CcwEokBsxlOQ331WK3eIXw0sA9Y1I8BBS1CkKGbcvAH0wB2oItSMFe3gJ6y3FIjA OS7iA75V6hLUBuPhYapW3Oat3UaBDXZH4xeZefGciY2NNoVJz/M0cFicEFiio8lW nunaIHUJmP+w6W1n7FD0Uxs8PIyhyuhjXEvCIA5WX/2fHMSXrfQXaCu9d5rljNV7 MP4GOM3N5nbWvM3h8HBooC4jWXKbh9z7ESqT9xxdSJQo/j/chtep3amQylPN8EYP UeWUc9Pe6NTyXziRJpj10H1GkofsvuWM4hGq649LR+QbpLsXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAaSJ6FvOB4VOOeSaCOhiXb0t7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYTU4MTM1MDgtMjhkYS0z MTZlLTllODUtNDc4MTg1NjdiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAudWB7o4UHbx259lx+hgvJWOV2EZNWho5nfxKMxvTTwQroFrMqgVxYQ ySm7cbkxadb/0Jtr0ohNcZCSyzonfkxeYm+Tt6Vaiho44+mVHOjNk35wadBb5pMh gwEKMdKz5yA5wseUTNIuYLVDHA2rwsBdkmQtYCSjG5Nmx1uZHWDWuOyCSdXSKULv 6cUown5uX2VZcBTRT92S0S4E7jBS+qDfLHz6w4LzZCfSMUtgqtiIkiPEhM/j/BGA 4OrMHe39UZ0Hw5xBMX/0ZyZucaQ+dJzgLgC3bWWN/+3Ho9rxSbRIHYqf+Mbj16s1 VTsKDP7Rv5tstg/Z/dmeoOthFe2IS90= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:37 2025 by rpki-client