$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json) Hash identifier: U+ql6Hkzl1EO0bTncygUhUFDm8b+jELUFGb46YWL2XA= Subject key identifier: BF:61:F1:1F:59:57:C2:08:34:9B:4E:C0:12:D0:1E:F7:56:A5:18:39 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584B3F1C559903FD3EE719A97000 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 46970 IP address blocks: 192.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:55:99:03:fd:3e:e7:19:a9:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=14d2be7e-6445-47d4-be23-f7adf5594646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:9b:45:f6:d8:70:b6:93:79:a0:5f:b1:87: 09:ee:9d:33:89:7c:b2:19:ad:ea:bc:ed:c5:24:d9: 42:2a:e3:fc:78:36:61:f5:c2:c9:ae:07:3f:36:cf: 9f:5e:e5:be:c6:59:34:4b:b2:b0:39:e3:93:bb:f6: 40:33:9c:79:94:05:93:0f:fa:cf:58:75:5c:7f:03: 70:16:6b:5e:89:40:8d:55:05:eb:64:b7:e6:71:e6: 27:c5:39:62:78:78:37:53:4a:ae:f6:b1:62:07:90: 3e:7a:5c:bf:a2:38:30:93:67:59:4a:b8:a9:7e:c8: 7d:9c:28:6f:38:8e:24:7e:0a:03:bd:a8:4c:f3:6d: da:9d:43:65:35:af:9f:e8:d2:52:8d:9d:3c:08:9b: 26:6b:49:37:af:b3:17:10:54:72:68:f6:2e:7e:da: 93:8c:0d:fd:ce:be:3b:4a:b6:53:ec:e2:6f:d5:e1: 44:71:8a:e5:cb:da:0f:ce:23:42:27:9a:ec:4c:b2: 49:aa:ab:49:df:ad:4f:40:2f:29:56:66:6f:de:56: ef:60:82:d5:01:80:7c:d8:b1:b0:1a:de:54:5d:1e: ef:46:19:5c:fa:ab:63:54:0c:d5:20:ad:41:66:24: 62:e3:d2:49:da:20:cb:f9:01:6b:c7:f9:75:87:42: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:61:F1:1F:59:57:C2:08:34:9B:4E:C0:12:D0:1E:F7:56:A5:18:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:36:08:26:bd:e1:26:46:b6:28:60:b6:86:85:fc:6b:bb: 2d:48:bf:06:b7:ea:93:53:7c:4f:83:07:83:50:1f:18:21:8d: f4:6e:50:f4:fe:30:d3:dc:98:ec:73:bd:ac:c9:a6:15:9f:92: 08:a8:d8:aa:4f:24:3c:7a:4f:80:84:00:c5:86:69:75:e1:a8: ce:d4:9a:aa:bc:22:dc:29:8f:42:19:5e:66:bb:84:8d:0d:36: 29:dc:5e:d7:68:2a:7f:0f:e7:c3:fa:de:27:79:c9:2e:04:61: ab:89:ff:39:ee:9f:41:ca:98:8d:75:89:e2:ed:84:58:f6:25: 5c:d1:1c:c1:29:26:6d:42:b1:6f:d2:19:d8:b9:e6:02:58:a3: a9:f1:5f:be:eb:09:41:e0:29:10:a8:a2:29:6b:62:62:b8:4c: 05:96:ed:66:d4:6f:f2:69:44:c6:46:06:6a:ab:5a:6b:ce:99: 14:eb:53:e4:50:86:47:de:cf:fe:2c:bc:15:4f:d7:b5:7e:e5: 90:01:5c:cf:d8:d6:f8:2d:16:b5:43:40:a6:00:5f:f3:07:7b: a9:a3:90:12:7c:af:c4:14:15:67:28:87:6b:53:b7:de:b2:4e: 15:ab:82:34:e6:0f:1f:61:49:5d:ba:f3:81:c8:c5:9b:45:10: 3f:ef:8c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFWZA/0+5xmpcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MTRkMmJlN2UtNjQ0NS00N2Q0LWJlMjMtZjdhZGY1NTk0NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKbRfbYcLaTeaBfsYcJ7p0ziXyyGa3qvO3F JNlCKuP8eDZh9cLJrgc/Ns+fXuW+xlk0S7KwOeOTu/ZAM5x5lAWTD/rPWHVcfwNw FmteiUCNVQXrZLfmceYnxTlieHg3U0qu9rFiB5A+ely/ojgwk2dZSripfsh9nChv OI4kfgoDvahM823anUNlNa+f6NJSjZ08CJsma0k3r7MXEFRyaPYuftqTjA39zr47 SrZT7OJv1eFEcYrly9oPziNCJ5rsTLJJqqtJ361PQC8pVmZv3lbvYILVAYB82LGw Gt5UXR7vRhlc+qtjVAzVIK1BZiRi49JJ2iDL+QFrx/l1h0J1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9h8R9ZV8IINJtOwBLQHvdWpRg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvOWQ4YjRhMzktZDkwNy0z NzA0LWJjOTgtMzYyNDhkODg3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfVNggmveEmRrYoYLaGhfxruy1Ivwa36pNTfE+DB4NQHxghjfRuUPT+ MNPcmOxzvazJphWfkgio2KpPJDx6T4CEAMWGaXXhqM7Umqq8Itwpj0IZXma7hI0N NincXtdoKn8P58P63id5yS4EYauJ/znun0HKmI11ieLthFj2JVzRHMEpJm1CsW/S Gdi55gJYo6nxX77rCUHgKRCooilrYmK4TAWW7WbUb/JpRMZGBmqrWmvOmRTrU+RQ hkfez/4svBVP17V+5ZABXM/Y1vgtFrVDQKYAX/MHe6mjkBJ8r8QUFWcoh2tTt96y ThWrgjTmDx9hSV2684HIxZtFED/vjG0= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:09 2025 by rpki-client