$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa File: a1a53dd1-a9de-3718-8769-e5bb370676e2.roa (raw, json) Hash identifier: Da/nqZOLRv3IuKSH+5XJULitRNZmu7bKR+mzru2lcEQ= Subject key identifier: 2C:F4:EE:67:66:07:8F:D5:98:A5:25:B9:BF:59:29:8B:F7:FC:C0:79 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584B21CC2558B44A274690BDAC40 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 10430 IP address blocks: 192.206.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:25:58:b4:4a:27:46:90:bd:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=b20b3c08-6767-4a25-bb3f-6c7c3964796e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:04:52:88:79:6b:d4:6b:ec:4b:e8:e7:04: 9e:a3:d5:47:15:42:17:e9:d2:89:e9:79:2a:aa:d1: f7:6b:34:ef:ab:45:37:e7:1a:0a:64:50:e3:9e:8f: de:7a:ba:dd:1f:2b:7a:b8:55:10:bc:1f:9d:d0:45: 3e:8d:73:19:3d:91:d2:3b:4c:8d:ff:a0:76:15:12: 18:0d:ad:79:8f:4e:16:ec:53:d2:39:54:48:7b:38: b5:ae:e5:e5:f2:90:60:04:41:9c:5d:97:9d:63:17: b0:88:7e:0e:e5:06:a0:04:a5:4e:42:86:33:22:22: 1f:27:42:bc:34:a8:0e:d9:ae:c4:8c:47:69:45:0c: fc:e4:58:ad:b4:aa:d1:2e:4b:c9:7e:00:19:db:f2: 65:ff:f2:4c:02:f9:f6:94:74:5a:32:e2:bc:58:10: ab:13:10:b2:3a:9b:18:59:f1:5d:db:98:63:a7:42: 2e:ea:58:e6:89:8c:2f:70:d5:2a:d2:e1:1a:95:11: 33:0b:e5:fc:3e:6d:fc:10:50:80:c2:be:6d:f6:fd: d8:fa:0f:93:88:b3:81:5e:b6:0d:12:12:f3:57:3a: 51:85:b0:8f:bb:5d:75:33:00:c0:75:58:6d:3f:a4: 55:a7:7c:f8:a3:fc:27:b8:78:1d:06:3f:18:56:87: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:EE:67:66:07:8F:D5:98:A5:25:B9:BF:59:29:8B:F7:FC:C0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 192.206.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f9:76:5b:22:86:c8:41:43:05:60:9e:4c:9f:e6:79:37:ef: fa:6b:34:f8:bf:88:bb:41:47:72:6e:a3:3b:5f:5d:69:60:17: f1:19:a8:86:5a:18:70:34:cf:c4:42:1d:a0:34:28:85:89:20: ee:a5:c9:f9:45:30:3f:58:45:d6:98:13:28:ae:a4:ae:f5:02: 8c:0f:56:98:f0:8c:d8:32:08:1c:af:a1:e3:f2:31:06:88:bb: b6:6a:19:44:bc:e3:b5:9e:80:28:2e:22:52:49:cb:7a:bf:d6: 5b:58:e5:cd:ed:33:a0:40:c6:21:9e:65:ff:f0:bd:98:67:46: cd:b0:26:bf:a5:77:a4:8f:d6:13:6f:49:40:c7:6c:5d:03:40: 51:11:2d:72:57:01:87:37:d4:9a:41:35:62:3e:4d:67:98:8c: d4:5c:dc:94:42:e9:23:2d:3f:f9:fb:1e:4e:37:41:45:7a:66: 72:d1:94:30:28:30:6d:38:e2:4e:95:d5:3b:fa:30:a8:3f:27: bf:64:07:80:3a:2b:b4:bc:09:fe:2b:3d:58:00:41:6c:d2:97: a3:99:05:53:52:00:02:d7:69:97:51:b8:37:5e:92:17:e0:cc: f8:45:79:ad:51:66:3d:e4:3d:5f:b9:d1:51:7a:d8:38:c8:12: 4f:23:e6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCVYtEonRpC9rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YjIwYjNjMDgtNjc2Ny00YTI1LWJiM2YtNmM3YzM5NjQ3OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK8EUoh5a9Rr7Evo5wSeo9VHFUIX6dKJ6Xkq qtH3azTvq0U35xoKZFDjno/eerrdHyt6uFUQvB+d0EU+jXMZPZHSO0yN/6B2FRIY Da15j04W7FPSOVRIezi1ruXl8pBgBEGcXZedYxewiH4O5QagBKVOQoYzIiIfJ0K8 NKgO2a7EjEdpRQz85FittKrRLkvJfgAZ2/Jl//JMAvn2lHRaMuK8WBCrExCyOpsY WfFd25hjp0Iu6ljmiYwvcNUq0uEalREzC+X8Pm38EFCAwr5t9v3Y+g+TiLOBXrYN EhLzVzpRhbCPu111MwDAdVhtP6RVp3z4o/wnuHgdBj8YVofe/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz07mdmB4/VmKUlub9ZKYv3/MB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvYTFhNTNkZDEtYTlkZS0z NzE4LTg3NjktZTViYjM3MDY3NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM7JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb5dlsihshBQwVgnkyf5nk37/prNPi/iLtBR3JuoztfXWlgF/EZqIZa GHA0z8RCHaA0KIWJIO6lyflFMD9YRdaYEyiupK71AowPVpjwjNgyCByvoePyMQaI u7ZqGUS847WegCguIlJJy3q/1ltY5c3tM6BAxiGeZf/wvZhnRs2wJr+ld6SP1hNv SUDHbF0DQFERLXJXAYc31JpBNWI+TWeYjNRc3JRC6SMtP/n7Hk43QUV6ZnLRlDAo MG044k6V1Tv6MKg/J79kB4A6K7S8Cf4rPVgAQWzSl6OZBVNSAALXaZdRuDdekhfg zPhFea1RZj3kPV+50VF62DjIEk8j5go= -----END CERTIFICATE-----Generated at Thu Oct 9 09:00:02 2025 by rpki-client