$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa File: 67327c68-e5d6-3627-85b7-1a55250b5551.roa (raw, json) Hash identifier: Z6ipGX42X8eq1m7cyahZAOABjDtmluMcr/gYwJbYNG8= Subject key identifier: BC:BE:60:76:2B:E6:04:E2:23:0D:19:73:15:BF:D1:5F:BC:51:81:D1 Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b Certificate serial: 010D0C9F4328584B1806E31EC713A44BB6171400 Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 397050 IP address blocks: 168.149.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e3:1e:c7:13:a4:4b:b6:17:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=d352cf34-b563-41d9-92b9-ac77c71b45cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:05:b6:4d:04:9e:12:b2:61:b8:42:37:95: d0:7f:fb:d5:b2:05:0d:0a:07:2f:c2:02:b6:c4:93: dc:4f:2a:43:5d:fc:a5:b6:b8:16:e0:db:4d:0c:8c: c0:e7:08:b0:0f:45:78:f2:e3:b1:7a:95:3b:72:47: 16:64:9d:5f:ef:d9:4a:6a:37:d3:e9:be:33:85:c5: ae:23:4d:04:7d:55:8d:7b:58:1a:eb:fb:c0:dd:6f: 63:39:2d:fc:77:7e:f4:e9:e4:56:b3:62:5d:0b:1a: a2:68:3d:c4:a1:4d:93:36:32:64:08:d5:f4:68:79: 85:18:cc:32:16:9b:10:17:d3:b4:f6:80:11:31:6e: 21:31:70:8e:e3:81:b8:5b:e6:20:70:5c:fc:46:f7: e0:5b:12:33:9d:f1:0e:5c:3e:41:19:bb:bd:a6:4d: 04:04:21:7d:c9:0c:77:d4:90:97:8b:61:e8:4f:83: fc:61:ec:48:4e:c4:b7:d7:42:d4:c5:92:08:67:85: db:c3:b5:c9:22:cb:a7:2f:6b:9b:58:f6:fb:da:20: 06:33:07:f4:8a:f4:06:50:5e:8c:3a:63:68:ed:15: 74:04:09:22:2e:e6:b1:c8:2e:27:fb:5d:b7:ee:6b: 40:1a:39:e0:e0:34:3b:0f:54:82:35:03:aa:cc:4d: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:60:76:2B:E6:04:E2:23:0D:19:73:15:BF:D1:5F:BC:51:81:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl X509v3 Authority Key Identifier: keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer sbgp-ipAddrBlock: critical IPv4: 168.149.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:38:19:57:72:fc:03:54:44:2a:b6:3c:da:5b:be:bb:2c:5c: 9d:66:f4:e5:f9:1a:86:54:2f:f9:33:f2:c2:21:28:bb:d5:7f: 01:e3:3c:3d:96:f5:f6:fc:79:90:c8:72:f2:81:f0:76:44:bb: d6:53:99:9e:dd:91:58:20:b5:2f:70:1d:6d:62:75:41:58:0d: de:19:a7:0c:b6:ed:f8:6c:00:31:2b:d3:d9:8e:57:78:a0:54: 9c:d0:14:ee:9b:d6:12:ba:b7:b6:ac:4f:66:c0:8f:de:1f:bb: e2:08:3f:2e:71:80:a1:79:c5:ab:eb:f2:c6:72:e6:88:b6:42: b1:8c:a7:df:31:00:ea:5b:54:10:b4:53:34:23:e5:e3:18:33: 64:3c:92:82:15:6c:66:6f:20:11:48:93:5e:2f:05:57:ea:45: 6e:48:38:da:f9:30:ef:dd:0e:ad:c6:72:f1:f9:9e:4e:ab:6e: a6:88:0a:f1:35:24:df:0d:75:b2:35:d7:bc:71:ff:57:4a:57: 47:8e:6e:44:a8:c4:00:8e:fc:9a:ff:30:52:c4:35:98:3d:f1: 7f:f2:ab:fa:38:55:6b:f3:b1:cd:ac:27:ee:6e:f9:10:6f:c6: b7:13:9b:2a:48:b9:a6:8d:0b:b0:72:5e:a8:17:98:3c:5e:9b: 7e:fe:d9:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuMexxOkS7YXFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyZGE4NzAtYmUwNi00NzFlLTg5YjYtZjUwNjNlYjcz NTBiMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDM1MmNmMzQtYjU2My00MWQ5LTkyYjktYWM3N2M3MWI0NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnMFtk0EnhKyYbhCN5XQf/vVsgUNCgcvwgK2 xJPcTypDXfyltrgW4NtNDIzA5wiwD0V48uOxepU7ckcWZJ1f79lKajfT6b4zhcWu I00EfVWNe1ga6/vA3W9jOS38d3706eRWs2JdCxqiaD3EoU2TNjJkCNX0aHmFGMwy FpsQF9O09oARMW4hMXCO44G4W+YgcFz8RvfgWxIznfEOXD5BGbu9pk0EBCF9yQx3 1JCXi2HoT4P8YexITsS310LUxZIIZ4Xbw7XJIsunL2ubWPb72iAGMwf0ivQGUF6M OmNo7RV0BAkiLuaxyC4n+1237mtAGjng4DQ7D1SCNQOqzE3sXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy+YHYr5gTiIw0ZcxW/0V+8UYHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOTJk YTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2ViNzM1MGIvNjczMjdjNjgtZTVkNi0z NjI3LTg1YjctMWE1NTI1MGI1NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTkyZGE4NzAtYmUwNi00NzFlLTg5 YjYtZjUwNjNlYjczNTBiL2E5MmRhODcwLWJlMDYtNDcxZS04OWI2LWY1MDYzZWI3 MzUwYi5jcmwwHwYDVR0jBBgwFoAUp3QuSRW5cC/ot2BQ7Xqk3RSjdKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2 M2ViNzM1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqJXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo4GVdy/ANURCq2PNpbvrssXJ1m9OX5GoZUL/kz8sIhKLvVfwHjPD2W 9fb8eZDIcvKB8HZEu9ZTmZ7dkVggtS9wHW1idUFYDd4Zpwy27fhsADEr09mOV3ig VJzQFO6b1hK6t7asT2bAj94fu+IIPy5xgKF5xavr8sZy5oi2QrGMp98xAOpbVBC0 UzQj5eMYM2Q8koIVbGZvIBFIk14vBVfqRW5IONr5MO/dDq3GcvH5nk6rbqaICvE1 JN8NdbI117xx/1dKV0eObkSoxACO/Jr/MFLENZg98X/yq/o4VWvzsc2sJ+5u+RBv xrcTmypIuaaNC7ByXqgXmDxem37+2TI= -----END CERTIFICATE-----Generated at Sat Oct 11 15:14:15 2025 by rpki-client