$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa File: 376c0303-935e-39a5-b2d1-709f592f1626.roa (raw, json) Hash identifier: e3Z+pbQsAxafwJf2TbEbcy26tUT68mvycukJy5elP1Y= Subject key identifier: FF:D8:02:C0:DD:78:B3:E5:F9:0E:52:B6:A6:8E:80:42:8E:C9:D2:87 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584B4FDC72BF4DB95D11C4B6D310 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 192.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:72:bf:4d:b9:5d:11:c4:b6:d3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=ae414265-42a0-4922-8b14-9ac4d58c4b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:c5:85:cb:fc:48:61:18:bc:1a:ac:2c:d7: f4:63:2d:35:58:3b:1e:4d:30:30:9d:5e:5a:41:f7: b6:1f:b0:aa:6f:69:5f:ba:54:7b:33:19:b9:f3:87: 54:7e:d0:52:9d:fc:16:ef:54:63:ea:cb:dd:41:23: 3a:5d:56:b5:fe:86:e7:fa:84:be:9d:44:1e:ee:4b: 4d:fc:ac:1d:48:13:32:1f:cb:26:9e:d8:ab:1a:30: b7:f7:d1:4b:56:78:da:47:7f:a0:b9:03:6f:2f:df: 6a:98:e4:9f:8e:7e:2a:5b:ff:3a:74:57:cd:aa:fe: 25:b7:23:4f:52:14:77:3a:6f:56:b7:7e:fa:e0:37: 05:7b:91:85:80:6f:20:99:bd:d9:f2:a3:af:44:dc: 9b:55:11:af:34:e9:e6:7b:1c:d7:2c:d5:d7:a0:09: 87:e2:44:73:ab:be:27:64:5c:d0:72:a8:5a:9a:9f: b5:df:47:2d:bc:d0:be:b4:a8:91:8f:dc:dc:2c:3e: 70:bd:e3:5a:a8:08:a8:73:59:5f:4f:d1:c0:90:d0: a9:e9:ea:5c:0f:ba:ca:e2:9f:01:57:5a:d8:50:c6: f1:23:86:cd:fe:ea:a1:f1:d4:8e:7c:a8:55:8b:3a: 54:4e:25:40:82:6c:b0:f1:75:0c:01:29:9a:50:3e: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:02:C0:DD:78:B3:E5:F9:0E:52:B6:A6:8E:80:42:8E:C9:D2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/376c0303-935e-39a5-b2d1-709f592f1626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 192.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:87:c3:43:ee:d7:f6:2e:9c:ee:ca:88:38:bd:4d:bf:e0:22: 51:70:c3:be:6d:0f:29:0b:b5:9c:4f:12:90:28:55:8c:c3:8b: 6a:18:cb:54:82:06:f7:4f:a4:f8:73:8c:f8:c0:c3:14:6b:01: 81:84:47:de:4e:e6:1b:5a:98:18:20:78:0e:5b:de:7a:4f:88: 02:f5:38:a7:46:6b:32:ad:0a:02:0f:65:4c:9d:23:de:f7:72: b7:64:81:4e:79:6d:21:c6:c5:18:3f:4c:c7:e0:08:58:fc:3c: ac:5e:61:fa:51:97:c3:6b:9d:7d:7d:27:c6:9b:72:88:6c:ef: cc:95:a0:71:5a:80:9b:65:ad:53:6e:72:88:21:ba:af:4d:f9: 67:f0:49:c5:6a:ce:2e:b7:1e:5e:bf:ee:1c:96:e1:6d:97:22: 31:e0:ff:83:1d:d2:a2:70:f2:ca:f8:84:fc:fe:fd:e1:1d:73: 4b:0c:f1:70:3d:3f:c8:6b:39:99:5b:2c:e9:93:fb:66:88:a2: 8d:c4:64:c5:24:2a:00:16:fa:06:cd:38:85:00:c7:e0:69:12: ba:ae:08:ba:75:26:22:7e:1b:94:ff:ea:42:bd:fd:6a:8c:78: c8:63:e6:0b:17:f0:93:cd:77:58:3f:42:f5:12:ee:d5:e7:be: 0e:d3:03:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HK/TbldEcS20xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWU0MTQyNjUtNDJhMC00OTIyLThiMTQtOWFjNGQ1OGM0YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7Fhcv8SGEYvBqsLNf0Yy01WDseTTAwnV5a Qfe2H7Cqb2lfulR7Mxm584dUftBSnfwW71Rj6svdQSM6XVa1/obn+oS+nUQe7ktN /KwdSBMyH8smntirGjC399FLVnjaR3+guQNvL99qmOSfjn4qW/86dFfNqv4ltyNP UhR3Om9Wt3764DcFe5GFgG8gmb3Z8qOvRNybVRGvNOnmexzXLNXXoAmH4kRzq74n ZFzQcqhamp+130ctvNC+tKiRj9zcLD5wveNaqAioc1lfT9HAkNCp6epcD7rK4p8B V1rYUMbxI4bN/uqh8dSOfKhVizpUTiVAgmyw8XUMASmaUD4kQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/YAsDdeLPl+Q5StqaOgEKOydKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMzc2YzAzMDMtOTM1ZS0z OWE1LWIyZDEtNzA5ZjU5MmYxNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+Hw0Pu1/YunO7KiDi9Tb/gIlFww75tDykLtZxPEpAoVYzDi2oYy1SC BvdPpPhzjPjAwxRrAYGER95O5htamBggeA5b3npPiAL1OKdGazKtCgIPZUydI973 crdkgU55bSHGxRg/TMfgCFj8PKxeYfpRl8NrnX19J8abcohs78yVoHFagJtlrVNu coghuq9N+WfwScVqzi63Hl6/7hyW4W2XIjHg/4Md0qJw8sr4hPz+/eEdc0sM8XA9 P8hrOZlbLOmT+2aIoo3EZMUkKgAW+gbNOIUAx+BpErquCLp1JiJ+G5T/6kK9/WqM eMhj5gsX8JPNd1g/QvUS7tXnvg7TAwI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:13 2025 by rpki-client