$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa File: c3caef46-c1ac-38a7-aaec-de2a302e391c.roa (raw, json) Hash identifier: n+Kcixlw7ieAuKYnylnDRkAW+ibvli26vr4yQ8WsBro= Subject key identifier: A3:98:65:35:83:9E:D5:F9:6E:4F:C5:0A:71:37:11:BE:0A:71:EF:33 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584B540C69F0D1F6735DDD796200 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 192.131.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:69:f0:d1:f6:73:5d:dd:79:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2f798d12-2dce-453b-93ca-c6e7e95cbd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:3d:3c:a8:ef:5c:5c:69:4b:03:fe:c6:ea: 7c:3c:5c:a7:d7:3f:fa:1e:7e:9f:72:38:60:be:23: 00:03:2c:72:39:9b:d5:86:88:02:25:da:69:a8:44: 5c:f0:ef:fb:f3:b8:d6:dd:5d:12:04:73:94:c9:55: 0a:f6:07:c6:4a:64:fb:c9:fb:68:0c:e5:91:91:05: 9c:31:fe:f4:dd:90:62:a6:a8:ea:41:fd:aa:2e:08: 16:cc:18:72:42:88:b0:08:07:d7:0f:66:9c:df:1b: 36:34:a7:c1:16:b6:60:05:98:da:c3:03:b8:60:46: d9:89:35:a3:98:3c:9e:09:02:63:5e:0f:b0:7b:5c: d7:d4:a2:97:97:69:96:21:69:f9:1b:a6:5f:6c:a3: 6b:10:3d:62:2a:20:f0:d2:6c:e6:05:2e:cd:45:a8: 2a:5b:1b:3c:ea:ea:e5:08:3e:26:6c:58:38:3d:6a: 69:b9:62:17:77:42:f0:f2:a9:9d:4e:f7:e2:fc:b2: de:7c:62:d7:53:74:7c:81:15:30:c4:16:02:da:3a: 8b:1a:48:11:33:82:68:3e:9b:6c:21:d1:f2:e8:c2: ff:b7:59:19:f7:40:35:f0:6a:17:12:b0:07:2e:00: 94:8b:9d:16:f1:ba:45:c8:d3:98:8c:6b:17:26:7f: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:98:65:35:83:9E:D5:F9:6E:4F:C5:0A:71:37:11:BE:0A:71:EF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/c3caef46-c1ac-38a7-aaec-de2a302e391c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 192.131.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c3:3a:58:ae:d8:28:33:82:cd:ce:2c:6f:a8:16:38:23:8c: 7f:c5:48:7f:67:ac:4c:dd:e8:7b:a2:3e:ea:63:ed:45:0f:4c: 08:d3:90:03:b9:17:2c:e1:ce:a7:15:58:37:aa:dc:70:67:27: e4:de:79:5a:e1:d3:8b:3a:a2:11:3b:d8:32:5b:64:7a:2b:c6: 9f:e4:00:e8:05:d5:b6:99:67:3f:d0:b6:54:79:2c:4a:8d:c8: 19:3d:5b:ba:59:58:f6:3b:21:66:ee:e7:3c:16:6a:4d:fc:50: 9d:e2:ad:19:9a:c4:fc:d0:df:bb:17:6c:f0:4c:4e:e9:f4:2f: 48:80:e9:b4:74:2f:29:e2:71:71:36:13:aa:44:1d:23:fb:17: ec:83:46:cc:45:5d:4c:be:42:f6:46:92:c7:3c:76:75:4c:7c: 24:c3:ca:1b:1d:73:ee:eb:8d:ab:6b:ea:2a:44:56:f4:af:6a: 8e:d0:81:09:86:d4:27:93:67:5b:f0:31:e9:11:53:3d:cb:d3: 33:29:79:a0:39:22:c4:04:d6:95:cf:0a:67:21:35:7e:8a:33: 9e:33:23:53:2a:57:94:6b:1a:51:75:ea:d4:43:0f:3a:23:54: 01:e8:17:9a:22:40:1b:af:eb:a4:11:9f:92:2c:e3:2a:d9:a0: 35:fa:29:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGnw0fZzXd15YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmY3OThkMTItMmRjZS00NTNiLTkzY2EtYzZlN2U5NWNiZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1M9PKjvXFxpSwP+xup8PFyn1z/6Hn6fcjhg viMAAyxyOZvVhogCJdppqERc8O/787jW3V0SBHOUyVUK9gfGSmT7yftoDOWRkQWc Mf703ZBipqjqQf2qLggWzBhyQoiwCAfXD2ac3xs2NKfBFrZgBZjawwO4YEbZiTWj mDyeCQJjXg+we1zX1KKXl2mWIWn5G6ZfbKNrED1iKiDw0mzmBS7NRagqWxs86url CD4mbFg4PWppuWIXd0Lw8qmdTvfi/LLefGLXU3R8gRUwxBYC2jqLGkgRM4JoPpts IdHy6ML/t1kZ90A18GoXErAHLgCUi50W8bpFyNOYjGsXJn8WqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOYZTWDntX5bk/FCnE3Eb4Kce8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYzNjYWVmNDYtYzFhYy0z OGE3LWFhZWMtZGUyYTMwMmUzOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALDOliu2Cgzgs3OLG+oFjgjjH/FSH9nrEzd6HuiPupj7UUPTAjTkAO5 FyzhzqcVWDeq3HBnJ+TeeVrh04s6ohE72DJbZHorxp/kAOgF1baZZz/QtlR5LEqN yBk9W7pZWPY7IWbu5zwWak38UJ3irRmaxPzQ37sXbPBMTun0L0iA6bR0LynicXE2 E6pEHSP7F+yDRsxFXUy+QvZGksc8dnVMfCTDyhsdc+7rjatr6ipEVvSvao7QgQmG 1CeTZ1vwMekRUz3L0zMpeaA5IsQE1pXPCmchNX6KM54zI1MqV5RrGlF16tRDDzoj VAHoF5oiQBuv66QRn5Is4yrZoDX6Kf0= -----END CERTIFICATE-----Generated at Fri Oct 10 21:10:54 2025 by rpki-client