$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa File: 90af776b-daa9-38f0-a471-4f3184e7b9db.roa (raw, json) Hash identifier: SJqa4Ut5o+dL52R3TIT3gkF0eMtW6j8IfuGqwl51gOA= Subject key identifier: A3:5F:B0:7B:36:96:7F:D1:32:1B:27:E4:02:C8:A1:B2:76:2C:7A:AC Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Certificate serial: 010D0C9F4328584B3556E3CE6614CC15929DE800 Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 395117 IP address blocks: 47.19.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e3:ce:66:14:cc:15:92:9d:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9d0d9ae3-2187-44a7-8d5e-bf4bbb650fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:5d:5e:85:31:d1:0d:ae:0e:cc:cf:4b:bb: 79:68:15:0f:7e:26:04:e4:b0:48:6d:8d:33:51:bb: 91:40:84:b4:b0:9f:45:3f:fb:e9:ff:13:a9:7a:14: 5f:5e:f8:b6:b1:8b:fb:00:4d:87:30:c3:7a:c1:9f: ae:2d:82:89:65:41:88:ca:0d:db:f5:d0:84:26:f0: be:c9:82:f3:a8:11:fa:ef:ed:76:65:fc:e9:40:46: 0f:14:5d:60:32:b7:c7:a0:63:cc:57:c2:e1:a9:71: 79:fd:b0:43:ec:8b:7a:df:ff:57:da:4d:27:76:37: 80:db:32:f6:48:23:2c:01:af:42:0f:3f:c5:24:26: 63:31:eb:14:f0:ed:e6:8e:2a:48:5c:9e:3c:c5:aa: 13:78:c3:87:f0:3a:fc:dd:20:60:6e:67:b4:00:9f: 98:1d:ce:c1:57:20:eb:e2:4e:07:aa:93:46:1e:13: e8:ae:34:e7:bb:6f:23:98:11:29:b5:de:b4:12:98: 20:52:da:75:d3:c8:ca:c5:1a:98:88:6a:c8:15:b6: 7e:c5:3c:54:af:86:a9:05:90:25:18:96:6f:b8:4c: 13:b1:33:89:37:a2:33:0b:0e:fa:0d:b2:7a:37:36: ab:37:78:e8:7c:e3:7f:c8:cf:55:3d:57:ff:37:e5: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:B0:7B:36:96:7F:D1:32:1B:27:E4:02:C8:A1:B2:76:2C:7A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl X509v3 Authority Key Identifier: keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer sbgp-ipAddrBlock: critical IPv4: 47.19.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1c:07:2a:f2:24:ff:67:f0:59:0c:5c:9e:ac:bd:1c:a4:76: d1:05:05:fa:61:d3:df:a4:b1:5a:75:59:ea:fd:24:6b:9c:56: 20:14:0e:b8:5a:c5:be:b3:6e:b2:31:50:23:14:07:d1:f0:96: e9:31:7a:04:ef:11:64:7f:64:54:b8:50:76:4a:9b:0a:3d:f5: f1:a4:d3:84:93:66:56:0f:ab:82:ee:02:f2:bc:cc:9b:65:15: c2:61:e1:81:f9:6a:90:98:0c:88:f0:d6:12:71:7b:e0:01:66: 23:4d:c5:8f:91:8a:9c:70:b0:35:05:81:c9:3c:4e:cf:0f:1d: 41:3d:d2:35:5c:08:a6:80:31:63:9f:ea:f9:86:20:5c:25:f1: 5b:be:b8:4f:c1:36:71:5e:03:b6:17:07:52:95:b0:59:2d:8e: 95:0b:7b:c2:4c:67:57:b5:c6:21:e7:ff:b5:df:3f:dc:f9:3b: 43:09:2a:be:78:65:c9:cb:4d:9b:b5:97:d6:52:de:b2:40:5c: 7a:cf:4f:87:67:ed:03:60:ef:80:34:a3:ce:1b:35:39:73:ff: 1b:b4:31:ed:fb:c7:10:30:fa:d5:d5:63:12:3b:5b:5e:86:67: 33:dc:6d:2e:be:ca:f7:3c:31:e3:e3:67:9b:46:fc:92:3e:49: 17:7d:e9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuPOZhTMFZKd6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi N2JhMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OWQwZDlhZTMtMjE4Ny00NGE3LThkNWUtYmY0YmJiNjUwZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjptdXoUx0Q2uDszPS7t5aBUPfiYE5LBIbY0z UbuRQIS0sJ9FP/vp/xOpehRfXvi2sYv7AE2HMMN6wZ+uLYKJZUGIyg3b9dCEJvC+ yYLzqBH67+12ZfzpQEYPFF1gMrfHoGPMV8LhqXF5/bBD7It63/9X2k0ndjeA2zL2 SCMsAa9CDz/FJCZjMesU8O3mjipIXJ48xaoTeMOH8Dr83SBgbme0AJ+YHc7BVyDr 4k4HqpNGHhPorjTnu28jmBEptd60EpggUtp108jKxRqYiGrIFbZ+xTxUr4apBZAl GJZvuEwTsTOJN6IzCw76DbJ6NzarN3jofON/yM9VPVf/N+XK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNfsHs2ln/RMhsn5ALIobJ2LHqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2 YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvOTBhZjc3NmItZGFhOS0z OGYwLWE0NzEtNGYzMTg0ZTdiOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1 NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4 YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwcByryJP9n8FkMXJ6svRykdtEFBfph09+ksVp1Wer9JGucViAUDrha xb6zbrIxUCMUB9HwlukxegTvEWR/ZFS4UHZKmwo99fGk04STZlYPq4LuAvK8zJtl FcJh4YH5apCYDIjw1hJxe+ABZiNNxY+RipxwsDUFgck8Ts8PHUE90jVcCKaAMWOf 6vmGIFwl8Vu+uE/BNnFeA7YXB1KVsFktjpULe8JMZ1e1xiHn/7XfP9z5O0MJKr54 ZcnLTZu1l9ZS3rJAXHrPT4dn7QNg74A0o84bNTlz/xu0Me37xxAw+tXVYxI7W16G ZzPcbS6+yvc8MePjZ5tG/JI+SRd96cA= -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:09 2025 by rpki-client