$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa File: 932701dc-5170-37c8-b804-8055128c2742.roa (raw, json) Hash identifier: YMqOcEh6OKXQeSvUvXWsf13NsU4wuyCRkaYg/v57Ld4= Subject key identifier: AF:86:ED:51:4E:24:27:08:96:26:32:35:19:37:9B:59:2C:BE:84:D2 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584AF0F149AE69F75D72DB31EF00 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36692 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:49:ae:69:f7:5d:72:db:31:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e22b0a44-eec4-4cfc-8940-468a9dc2e094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:c3:5e:37:0a:83:d1:fd:ed:de:97:67:70: 46:d3:a6:07:6a:67:ee:d9:90:17:17:7a:d7:c4:71: fb:59:2d:ca:ce:53:b9:df:a4:dd:95:c6:a0:0c:82: f9:23:d4:d8:f5:40:c3:43:f1:79:03:4f:82:cf:f8: b7:47:c3:6f:c2:84:3e:cf:6d:50:0a:5f:5b:16:da: a9:27:f7:68:f7:1d:af:d3:3f:a0:b0:03:6d:aa:b8: 86:93:8c:7b:ad:08:0e:c3:16:9e:95:74:96:7b:69: 1a:a6:b7:08:17:ac:a3:03:d7:ad:c3:ed:9f:26:f1: 59:0b:61:1a:b4:1f:9b:3f:ad:e9:9b:5a:7e:cf:b3: f5:57:79:bb:d4:88:f8:fd:74:65:ab:ed:44:da:d3: 0b:b5:2b:b3:d1:05:67:e5:8b:4f:1a:11:8a:5e:6c: 51:5e:2b:9d:a1:02:d2:ab:a3:83:59:cf:53:08:31: 3d:f0:46:7c:f4:8b:ed:23:08:3d:bb:62:13:30:39: fb:26:e7:fb:7d:0e:ff:08:89:5f:75:6c:be:c2:28: 7d:3d:a6:75:75:42:d8:bb:27:72:c4:a3:fa:f1:f6: 3b:fa:67:a0:25:07:09:c7:22:95:6a:0f:e4:d2:2b: 34:46:b9:7a:72:60:8b:1a:57:19:e7:aa:0b:27:9a: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:86:ED:51:4E:24:27:08:96:26:32:35:19:37:9B:59:2C:BE:84:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:88:52:29:5f:71:1f:44:cc:b9:67:05:56:d6:91:51:67:d2: f3:23:23:06:87:8e:37:5f:25:34:e3:a3:9d:a7:c8:87:bb:5c: 48:43:43:77:c0:7c:cf:45:10:d1:df:11:20:ef:ad:83:2d:08: 2f:d2:3b:16:45:61:d8:49:24:bc:a4:5c:da:15:63:5e:2c:dc: 48:1a:e3:7b:fa:8f:9d:65:c6:f0:aa:72:01:55:60:52:a5:e0: da:e1:5d:41:3a:c5:4b:8c:62:11:b9:66:df:9e:fd:59:d8:2a: 76:7a:87:d0:e3:36:0e:5e:0c:5e:1e:e1:5c:74:d1:8b:2c:b2: 29:10:0d:89:29:aa:62:50:ef:2e:20:86:c4:7f:cc:fe:ef:95: 5a:32:e8:d5:cf:64:8e:26:9d:e5:f9:3f:8a:c3:15:ea:6a:38: c2:31:a3:37:91:31:83:02:a8:03:a3:0a:10:e4:2a:1e:c4:2b: 00:b9:cf:8b:86:e1:b9:c9:e9:4c:0f:ee:9e:b9:36:52:63:98: 41:3a:df:32:43:cb:74:7e:83:14:d0:44:5d:cc:13:e9:d6:4b: ad:1c:89:7d:48:b5:62:ae:20:f7:5a:9a:51:e6:bc:dc:5b:bf: f2:a1:a5:3c:88:28:6a:57:2e:a1:dd:81:13:43:7c:80:f3:ce: 38:e8:66:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Umuafddctsx7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTIyYjBhNDQtZWVjNC00Y2ZjLTg5NDAtNDY4YTlkYzJlMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBLDXjcKg9H97d6XZ3BG06YHamfu2ZAXF3rX xHH7WS3KzlO536TdlcagDIL5I9TY9UDDQ/F5A0+Cz/i3R8NvwoQ+z21QCl9bFtqp J/do9x2v0z+gsANtqriGk4x7rQgOwxaelXSWe2kaprcIF6yjA9etw+2fJvFZC2Ea tB+bP63pm1p+z7P1V3m71Ij4/XRlq+1E2tMLtSuz0QVn5YtPGhGKXmxRXiudoQLS q6ODWc9TCDE98EZ89IvtIwg9u2ITMDn7Juf7fQ7/CIlfdWy+wih9PaZ1dULYuydy xKP68fY7+megJQcJxyKVag/k0is0Rrl6cmCLGlcZ56oLJ5ofewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+G7VFOJCcIliYyNRk3m1ksvoTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTMyNzAxZGMtNTE3MC0z N2M4LWI4MDQtODA1NTEyOGMyNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWIUilfcR9EzLlnBVbWkVFn0vMjIwaHjjdfJTTjo52nyIe7XEhDQ3fA fM9FENHfESDvrYMtCC/SOxZFYdhJJLykXNoVY14s3Ega43v6j51lxvCqcgFVYFKl 4NrhXUE6xUuMYhG5Zt+e/VnYKnZ6h9DjNg5eDF4e4Vx00YsssikQDYkpqmJQ7y4g hsR/zP7vlVoy6NXPZI4mneX5P4rDFepqOMIxozeRMYMCqAOjChDkKh7EKwC5z4uG 4bnJ6UwP7p65NlJjmEE63zJDy3R+gxTQRF3ME+nWS60ciX1ItWKuIPdamlHmvNxb v/KhpTyIKGpXLqHdgRNDfIDzzjjoZv4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:23 2025 by rpki-client