$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa File: f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa (raw, json) Hash identifier: 3iKO1t39V4HgBagDOV2riNGCWcusebCEg0kGtaQ/mOY= Subject key identifier: CE:D6:68:D0:B0:A8:EF:9F:F6:72:CB:63:08:82:6B:84:F1:0E:9C:33 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B4081AA954B97186D8C030800 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 21559 IP address blocks: 198.52.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:aa:95:4b:97:18:6d:8c:03:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=d01cc84f-0bbd-47ea-9d9d-f3d0119729cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:30:ff:b3:55:e5:7d:b5:41:18:79:a7:e7: b8:5d:5d:50:01:db:82:ad:75:99:c2:9b:87:76:57: ca:5a:a8:57:2e:3f:c9:0a:63:11:8e:02:de:9f:5a: 75:95:fc:b9:5a:a2:fc:95:9c:38:60:95:94:00:84: ec:73:06:52:86:69:a6:ad:6b:49:b7:94:23:54:0d: b7:7d:3e:e6:36:e1:a4:2e:7e:5f:79:6c:0e:3e:d0: 89:69:94:ce:cf:07:f8:b8:f6:c3:ab:dc:4e:5f:5d: b7:f4:35:4c:5c:07:24:52:c9:e2:07:d0:c5:f6:c6: 4b:1a:c3:32:9b:30:33:f6:4e:ef:65:8f:e0:fb:7c: 66:3d:64:44:cc:f6:8e:f8:82:a0:2d:94:1d:28:8e: 3d:f2:dc:3c:bd:0f:fe:c4:bf:81:66:ad:eb:6e:9a: f7:d7:ca:ee:5b:20:f3:f7:8f:e7:e1:bc:9c:f5:4d: 2c:2b:4b:10:bc:65:22:28:92:be:fe:34:65:5d:74: bb:ef:9a:d8:fa:15:82:0d:be:e1:57:69:46:3c:01: 28:24:fd:cd:cb:50:ae:be:26:38:33:61:45:19:be: a8:8c:ce:a9:c5:35:ea:e5:01:ca:26:05:45:70:10: 65:75:f6:9f:fe:ea:a4:d8:3d:ac:11:a8:ed:26:fe: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D6:68:D0:B0:A8:EF:9F:F6:72:CB:63:08:82:6B:84:F1:0E:9C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 198.52.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ae:13:a5:b5:5d:11:37:be:9d:8b:a8:3e:20:d5:e2:38:86: b2:98:bb:cb:24:37:54:8f:2b:98:42:4a:70:fd:8e:b4:d9:d0: 30:b9:7b:9c:eb:8d:43:92:38:44:5b:68:16:c9:23:5f:60:df: e1:29:d9:14:2d:c4:61:7d:25:5f:b8:ea:0b:1d:e8:a2:2d:8c: bc:a8:33:56:e0:6d:62:fc:40:cc:04:42:c1:73:9c:3a:c8:59: 22:48:5d:06:d2:e7:ac:ec:22:ce:a4:f5:6c:19:10:bc:83:aa: 8d:f8:0e:5a:60:4a:b9:91:4f:56:e9:d9:a5:92:98:97:38:80: 04:13:0c:43:e8:5d:9b:4a:70:c9:d2:2e:8e:3b:a3:0f:9d:2a: 90:ef:38:27:4f:e5:ef:88:03:4f:ce:62:bc:a7:64:27:e2:59: 15:1d:6d:78:4f:ca:b5:11:2b:6c:40:6d:2a:65:3f:94:8a:24: 77:35:c6:9a:bf:24:dd:e8:10:74:6b:b7:d7:0c:2f:64:7d:9e: f6:3f:61:b7:b4:9b:ce:04:0a:f8:02:8e:3f:7b:25:ee:28:30: 2e:4d:96:f3:86:66:60:30:4d:c8:7c:36:8c:51:70:d5:23:43: b2:db:32:f8:26:03:33:53:f1:f8:10:8c:f6:bc:ec:85:c6:82: d1:d9:b7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaqVS5cYbYwDCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZDAxY2M4NGYtMGJiZC00N2VhLTlkOWQtZjNkMDExOTcyOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdkw/7NV5X21QRh5p+e4XV1QAduCrXWZwpuH dlfKWqhXLj/JCmMRjgLen1p1lfy5WqL8lZw4YJWUAITscwZShmmmrWtJt5QjVA23 fT7mNuGkLn5feWwOPtCJaZTOzwf4uPbDq9xOX1239DVMXAckUsniB9DF9sZLGsMy mzAz9k7vZY/g+3xmPWREzPaO+IKgLZQdKI498tw8vQ/+xL+BZq3rbpr318ruWyDz 94/n4byc9U0sK0sQvGUiKJK+/jRlXXS775rY+hWCDb7hV2lGPAEoJP3Ny1CuviY4 M2FFGb6ojM6pxTXq5QHKJgVFcBBldfaf/uqk2D2sEajtJv4eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7WaNCwqO+f9nLLYwiCa4TxDpwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZjJhODhjM2QtZmFkNS0z N2IxLTk1YzgtYzljZDMyYzg2N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWuE6W1XRE3vp2LqD4g1eI4hrKYu8skN1SPK5hCSnD9jrTZ0DC5e5zr jUOSOERbaBbJI19g3+Ep2RQtxGF9JV+46gsd6KItjLyoM1bgbWL8QMwEQsFznDrI WSJIXQbS56zsIs6k9WwZELyDqo34DlpgSrmRT1bp2aWSmJc4gAQTDEPoXZtKcMnS Lo47ow+dKpDvOCdP5e+IA0/OYrynZCfiWRUdbXhPyrURK2xAbSplP5SKJHc1xpq/ JN3oEHRrt9cML2R9nvY/Ybe0m84ECvgCjj97Je4oMC5NlvOGZmAwTch8NoxRcNUj Q7LbMvgmAzNT8fgQjPa87IXGgtHZtx8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:04 2025 by rpki-client