$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa File: ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa (raw, json) Hash identifier: DtFKFiTZ1TZnn0mruexsSipHAzP24QooT5p/i9vua54= Subject key identifier: E1:85:65:B0:06:F8:2C:04:97:52:5A:AC:10:D4:53:B8:01:6B:30:75 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F4328584B1C36CB792BCA4FB961C81D50 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14860 IP address blocks: 198.36.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cb:79:2b:ca:4f:b9:61:c8:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=541816f3-e192-4e04-b16c-0e31b63767ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:16:45:f9:e5:67:bf:11:c2:90:6f:8d:cc: ec:3f:b3:d9:89:e9:3d:d0:91:76:95:68:d0:b2:82: 59:dd:c7:ed:2f:7b:9d:00:62:ca:43:ed:31:af:af: c4:09:ae:58:1a:a9:da:36:df:53:68:4d:47:7c:62: 57:25:aa:b7:aa:e9:86:6c:ef:95:fb:35:63:3b:06: fc:57:70:8d:4e:ed:7a:4c:e3:95:f5:3d:78:0c:72: 92:9a:46:ba:5d:b6:60:d0:19:cd:ca:ba:bd:ad:48: 34:e8:51:14:fd:a9:49:8d:95:f6:e5:0e:b4:ef:76: d3:bd:5a:a0:61:f9:f5:ea:01:00:67:df:23:e7:16: f7:e4:1e:a9:2b:01:f5:ae:d6:14:ff:bc:74:53:95: 47:d3:21:f5:8c:52:7b:e3:0a:76:23:b9:5b:ca:cf: e1:59:02:e7:9a:8e:10:1d:0a:69:a5:6d:f0:9e:19: 61:db:22:ec:1a:4a:b6:83:52:6d:43:b2:2a:87:90: 03:df:09:01:6b:93:a9:5e:26:c9:d3:18:7d:e1:77: d4:78:af:ad:f2:9e:0c:d5:24:05:a7:a8:b2:6b:d0: a4:b0:a7:a5:1d:14:af:3b:61:c6:e8:b2:9b:4c:a1: 81:51:5f:22:43:dd:82:1f:ee:b8:da:25:fc:13:73: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:65:B0:06:F8:2C:04:97:52:5A:AC:10:D4:53:B8:01:6B:30:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 198.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e1:58:a7:7b:7c:fa:fd:e4:11:d1:a4:82:16:0d:7e:af:3e: e0:de:6d:b9:3f:29:d6:96:8c:81:d6:e6:b2:c8:89:43:7d:14: f2:7a:6c:b5:8e:bb:77:0c:d1:9c:ca:07:2f:3a:35:e1:f7:31: 36:1f:65:c3:8e:2f:c4:7a:0a:01:79:a7:e9:f3:a5:52:3c:e2: aa:98:7c:5b:40:0b:68:ba:37:98:42:f1:a5:6d:63:43:96:d2: fd:ff:f6:b4:63:e0:69:e3:db:21:01:ec:4a:e8:14:dc:a4:39: 00:80:28:a4:3a:5e:2d:93:4d:2e:19:01:f6:83:f3:dd:5b:e2: d1:1d:7e:77:03:2e:5d:70:99:db:97:43:f9:0f:62:3b:c1:3a: 64:1a:9c:8a:12:fb:77:a8:8c:be:3e:62:23:f0:8d:14:b9:9c: cd:4d:bb:45:d7:b5:b4:be:1f:61:f2:01:11:06:39:c2:1b:11: b5:eb:a2:00:e2:e3:0b:07:c1:98:55:f0:a6:d2:37:b3:50:95: 3e:01:7b:9d:62:44:ee:51:ef:20:0c:4d:16:55:08:fe:60:d5: d8:2d:e7:49:3c:ac:86:03:d0:e6:1c:4a:34:bb:15:78:d4:a4: 96:02:d2:ab:54:78:6b:49:fd:c4:22:b5:04:df:d2:bc:ea:88: f2:85:46:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNst5K8pPuWHIHVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTQxODE2ZjMtZTE5Mi00ZTA0LWIxNmMtMGUzMWI2Mzc2N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeUWRfnlZ78RwpBvjczsP7PZiek90JF2lWjQ soJZ3cftL3udAGLKQ+0xr6/ECa5YGqnaNt9TaE1HfGJXJaq3qumGbO+V+zVjOwb8 V3CNTu16TOOV9T14DHKSmka6XbZg0BnNyrq9rUg06FEU/alJjZX25Q6073bTvVqg Yfn16gEAZ98j5xb35B6pKwH1rtYU/7x0U5VH0yH1jFJ74wp2I7lbys/hWQLnmo4Q HQpppW3wnhlh2yLsGkq2g1JtQ7Iqh5AD3wkBa5OpXibJ0xh94XfUeK+t8p4M1SQF p6iya9CksKelHRSvO2HG6LKbTKGBUV8iQ92CH+642iX8E3NS7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGFZbAG+CwEl1JarBDUU7gBazB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvY2U4OWYzNGQtMzg1MC0z Y2YzLWI2ZjAtYjNjMDc1ZTE4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfhWKd7fPr95BHRpIIWDX6vPuDebbk/KdaWjIHW5rLIiUN9FPJ6bLWO u3cM0ZzKBy86NeH3MTYfZcOOL8R6CgF5p+nzpVI84qqYfFtAC2i6N5hC8aVtY0OW 0v3/9rRj4Gnj2yEB7EroFNykOQCAKKQ6Xi2TTS4ZAfaD891b4tEdfncDLl1wmduX Q/kPYjvBOmQanIoS+3eojL4+YiPwjRS5nM1Nu0XXtbS+H2HyAREGOcIbEbXrogDi 4wsHwZhV8KbSN7NQlT4Be51iRO5R7yAMTRZVCP5g1dgt50k8rIYD0OYcSjS7FXjU pJYC0qtUeGtJ/cQitQTf0rzqiPKFRi8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:20 2025 by rpki-client