$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa File: 3b96878c-4905-3a39-bcab-5b6197b462d3.roa (raw, json) Hash identifier: Tvc3JbZjpxvz41M6Gc6LO50NwXqoEICYu07OKqRrvSU= Subject key identifier: 9A:87:12:FF:3C:D5:A9:7E:34:07:7E:4A:B3:AE:9C:56:AF:55:19:EC Certificate issuer: /CN=8bd56a04-2ad4-4f34-b979-58f0a9509691 Certificate serial: 010D0C9F4328584B3DBA29FFB16D4F3F2881C8C0 Authority key identifier: A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 29762 IP address blocks: 198.89.15.0/24 maxlen: 24 198.232.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:29:ff:b1:6d:4f:3f:28:81:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd56a04-2ad4-4f34-b979-58f0a9509691 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=60cc0c48-32f0-4056-8a10-7d40bdc114c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:c7:50:0f:68:42:9b:a0:86:f6:05:53:0e: 50:b4:b4:ac:c2:e3:38:1d:fd:85:54:a6:7a:c8:ea: 04:be:ba:4e:1d:fb:30:16:81:ad:b9:86:f8:52:b7: 3e:c7:52:d2:2c:ea:60:be:7d:90:29:5f:e2:9c:29: 7b:20:54:9c:18:87:ff:a5:88:b0:3b:8d:c5:75:57: 66:d5:64:49:f0:8a:58:20:d9:d1:9e:6b:74:df:fc: 0b:a0:2c:8e:6f:42:96:e1:0e:e3:cb:a3:80:da:51: fa:d2:55:21:4d:b4:59:b6:20:6c:e2:97:12:c8:73: e2:ac:06:5e:a8:b0:04:21:05:ee:a9:2b:25:06:7d: fc:7a:45:83:83:5f:9a:73:00:52:22:e7:3f:c4:73: 56:b4:68:1a:26:ad:fd:ad:c3:34:01:79:27:a1:f2: 6b:c4:ef:5b:bb:f1:85:cb:34:92:48:a9:a6:75:37: 62:46:d3:88:ce:69:bf:9f:16:96:61:12:c1:fd:64: be:7e:d4:5d:f8:9a:c6:11:63:75:4c:ed:4e:77:a5: e0:2d:3e:a0:48:41:67:86:00:70:e1:72:1c:f6:33: 91:43:92:47:69:f7:39:ab:ed:62:b3:c7:78:1d:8a: 99:08:03:31:bb:cd:c3:89:a2:10:e4:27:9d:7a:cd: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:87:12:FF:3C:D5:A9:7E:34:07:7E:4A:B3:AE:9C:56:AF:55:19:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl X509v3 Authority Key Identifier: keyid:A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer sbgp-ipAddrBlock: critical IPv4: 198.89.15.0/24 198.232.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4e:53:f4:12:b7:c3:80:d3:c3:59:ef:96:3d:da:06:4a:45: c8:46:4e:dd:5b:08:20:8f:09:0f:e8:43:94:29:79:83:04:5b: 8d:1f:35:de:c7:ae:be:a4:02:4d:55:a8:8e:20:2f:fc:86:ec: 40:f5:49:39:13:53:ee:ba:2b:58:67:36:bb:ba:70:33:0f:19: eb:11:67:6a:48:40:c7:94:f1:7e:9d:61:95:c4:11:a7:75:b8: cd:2b:90:68:83:bf:02:22:63:88:e7:b7:d6:b2:51:81:a5:40: 3a:0b:33:7e:78:75:4a:ac:18:b6:37:ad:40:eb:03:16:46:af: 48:ab:18:ef:fc:75:f3:05:19:48:f4:12:a8:96:c5:78:8b:15: 9b:36:70:5d:da:1a:a7:36:9a:00:a6:d9:75:a7:20:0e:bd:4d: f7:93:d9:c7:8b:bd:79:db:21:ce:23:db:96:42:b2:77:06:50: 17:22:a5:33:ef:9d:a7:45:ce:27:62:02:74:de:4f:12:fb:2b: 44:05:cc:64:88:5b:6e:7d:4a:0a:eb:25:2c:b4:fc:54:fe:c9: 85:4b:1f:32:b9:c0:6e:97:72:17:74:79:fd:81:3d:86:6b:62: ad:47:5e:af:b0:4e:77:59:c6:e4:89:a9:c7:dc:2a:5f:6f:28: fe:8a:f2:cf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs9uin/sW1PPyiByMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNTZhMDQtMmFkNC00ZjM0LWI5NzktNThmMGE5NTA5 NjkxMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjBjYzBjNDgtMzJmMC00MDU2LThhMTAtN2Q0MGJkYzExNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D/HUA9oQpughvYFUw5QtLSswuM4Hf2FVKZ6 yOoEvrpOHfswFoGtuYb4Urc+x1LSLOpgvn2QKV/inCl7IFScGIf/pYiwO43FdVdm 1WRJ8IpYINnRnmt03/wLoCyOb0KW4Q7jy6OA2lH60lUhTbRZtiBs4pcSyHPirAZe qLAEIQXuqSslBn38ekWDg1+acwBSIuc/xHNWtGgaJq39rcM0AXknofJrxO9bu/GF yzSSSKmmdTdiRtOIzmm/nxaWYRLB/WS+ftRd+JrGEWN1TO1Od6XgLT6gSEFnhgBw 4XIc9jORQ5JHafc5q+1is8d4HYqZCAMxu83DiaIQ5Cedes1jzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJqHEv881al+NAd+SrOunFavVRnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmQ1 NmEwNC0yYWQ0LTRmMzQtYjk3OS01OGYwYTk1MDk2OTEvM2I5Njg3OGMtNDkwNS0z YTM5LWJjYWItNWI2MTk3YjQ2MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJkNTZhMDQtMmFkNC00ZjM0LWI5 NzktNThmMGE5NTA5NjkxLzhiZDU2YTA0LTJhZDQtNGYzNC1iOTc5LTU4ZjBhOTUw OTY5MS5jcmwwHwYDVR0jBBgwFoAUpckae/uN9jthHzCCZAxReqO2lhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmQ1NmEwNC0yYWQ0LTRmMzQtYjk3OS01OGYw YTk1MDk2OTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxlkPAwQA xujcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF9OU/QSt8OA08NZ75Y92gZKRchGTt1bCCCPCQ/oQ5QpeYME W40fNd7Hrr6kAk1VqI4gL/yG7ED1STkTU+66K1hnNru6cDMPGesRZ2pIQMeU8X6d YZXEEad1uM0rkGiDvwIiY4jnt9ayUYGlQDoLM354dUqsGLY3rUDrAxZGr0irGO/8 dfMFGUj0EqiWxXiLFZs2cF3aGqc2mgCm2XWnIA69TfeT2ceLvXnbIc4j25ZCsncG UBcipTPvnadFzidiAnTeTxL7K0QFzGSIW259SgrrJSy0/FT+yYVLHzK5wG6Xchd0 ef2BPYZrYq1HXq+wTndZxuSJqcfcKl9vKP6K8s8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:28 2025 by rpki-client