$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa File: a1c9b439-9250-3c4f-856b-0e37ad939229.roa (raw, json) Hash identifier: uRw9n3q4i36gFDCL6eP/oVajWX0yDZsK5HHLIniOlo4= Subject key identifier: 64:7A:62:96:98:A4:CF:AF:9F:1C:C4:80:30:0C:2F:67:9F:B8:48:1A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B461707760D61C9F18CF03900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 398465 IP address blocks: 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:07:76:0d:61:c9:f1:8c:f0:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=0958e55f-120e-4753-83fc-2de69bad9416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:47:a4:f7:f1:f0:24:9a:9d:2e:3a:21:d1: 55:bc:7f:09:18:a8:ff:52:6b:ce:47:82:0b:c5:eb: 05:54:2d:6d:bd:aa:c3:ca:10:5a:94:f1:40:47:d0: 7b:06:9b:d4:cc:ba:30:5c:e1:50:95:5e:3b:94:c0: 9b:46:b7:b4:d3:c7:36:b7:c5:87:0a:2f:22:13:0f: d2:70:ca:bc:df:ab:c8:02:ea:92:9e:27:31:86:27: 48:dc:96:f4:4b:d1:23:a6:c4:77:62:dc:b8:4e:8b: 8a:77:cd:71:48:58:63:56:11:1f:bc:48:95:7c:38: e3:4f:32:d9:aa:fe:0c:1c:c1:3c:13:b8:f7:b8:b6: 5c:0c:40:f4:83:96:33:30:c4:a1:5c:65:1b:80:45: 39:85:be:f1:f8:0b:44:ee:57:4f:86:69:8d:dd:cb: 03:97:55:c6:22:e9:ab:02:dd:08:2c:65:ed:1c:8a: 49:69:6d:6e:64:ff:01:15:61:3a:fb:1d:e7:88:3d: 29:1f:2b:1e:1c:47:69:4b:08:bb:89:c7:5d:af:97: 6e:de:c4:2a:bb:e6:1c:82:c5:17:4c:ba:d8:60:db: da:3b:a8:37:fa:89:e7:a7:96:3e:cd:38:e1:1b:4a: 4f:b9:ea:43:9d:cd:3c:8e:41:fc:40:4f:01:a2:06: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:62:96:98:A4:CF:AF:9F:1C:C4:80:30:0C:2F:67:9F:B8:48:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a7:ca:11:0e:bf:54:5f:48:a1:8d:6e:41:3d:7d:59:44:1c: 46:d9:f9:95:08:0f:ba:c5:78:e1:83:37:2a:f4:3f:22:d6:0f: f7:72:ac:f2:9d:5b:ea:6d:21:52:8d:c5:92:47:99:ae:22:a4: 0b:92:91:52:49:35:e4:47:dc:65:e4:89:82:4a:97:5d:12:3a: 92:b6:ff:6f:a0:96:f6:08:e7:2f:5d:84:05:a9:4f:a7:18:d2: e1:d0:5b:86:90:0b:e1:26:8a:9a:0b:56:11:f1:f0:df:e7:79: 2b:bb:07:7f:e8:ab:0c:7e:1a:15:05:7c:b6:b6:f4:ed:c1:a5: 02:64:20:23:8f:9c:58:16:5f:14:40:d3:1e:f8:56:77:ce:8e: c0:b6:c0:38:f5:55:c2:b9:a1:7c:52:30:37:0b:58:fd:88:80: 9a:f8:73:a2:c0:71:0a:54:23:6f:44:24:75:34:ae:8b:e0:bc: 91:ac:ce:35:95:89:9a:95:26:90:1d:3d:91:03:43:72:05:3e: 6f:30:fa:8b:5c:a4:43:90:e3:78:ec:96:d1:b0:eb:49:34:31: b0:c8:29:52:7a:39:4a:00:b8:80:96:85:c9:40:9d:1f:8c:1c: 2b:78:e2:d8:55:de:c3:68:f5:99:06:f4:6f:9b:5c:2a:0c:65: fd:94:e7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwd2DWHJ8YzwOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MDk1OGU1NWYtMTIwZS00NzUzLTgzZmMtMmRlNjliYWQ5NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmNHpPfx8CSanS46IdFVvH8JGKj/UmvOR4IL xesFVC1tvarDyhBalPFAR9B7BpvUzLowXOFQlV47lMCbRre008c2t8WHCi8iEw/S cMq836vIAuqSnicxhidI3Jb0S9EjpsR3Yty4TouKd81xSFhjVhEfvEiVfDjjTzLZ qv4MHME8E7j3uLZcDED0g5YzMMShXGUbgEU5hb7x+AtE7ldPhmmN3csDl1XGIumr At0ILGXtHIpJaW1uZP8BFWE6+x3niD0pHyseHEdpSwi7icddr5du3sQqu+YcgsUX TLrYYNvaO6g3+onnp5Y+zTjhG0pPuepDnc08jkH8QE8BogZ0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR6YpaYpM+vnxzEgDAML2efuEgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTFjOWI0MzktOTI1MC0z YzRmLTg1NmItMGUzN2FkOTM5MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwMzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAunyhEOv1RfSKGNbkE9fVlEHEbZ+ZUID7rFeOGDNyr0PyLWD/dyrPKd W+ptIVKNxZJHma4ipAuSkVJJNeRH3GXkiYJKl10SOpK2/2+glvYI5y9dhAWpT6cY 0uHQW4aQC+EmipoLVhHx8N/neSu7B3/oqwx+GhUFfLa29O3BpQJkICOPnFgWXxRA 0x74VnfOjsC2wDj1VcK5oXxSMDcLWP2IgJr4c6LAcQpUI29EJHU0rovgvJGszjWV iZqVJpAdPZEDQ3IFPm8w+otcpEOQ43jsltGw60k0MbDIKVJ6OUoAuICWhclAnR+M HCt44thV3sNo9ZkG9G+bXCoMZf2U53s= -----END CERTIFICATE-----Generated at Thu Oct 9 03:37:28 2025 by rpki-client