$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa File: 337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json) Hash identifier: NbHcX90fXG3o/nbejjqTEVgUol0dSMca61Zvkm5VLLE= Subject key identifier: C0:B1:E5:92:15:E9:28:83:07:D6:37:CC:86:27:AC:C0:10:AB:B5:94 Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Certificate serial: 010D0C9F4328584AFC1BF30D292C4B7DF5F98280 Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 198949 IP address blocks: 162.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f3:0d:29:2c:4b:7d:f5:f9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6a054a85-0a45-4926-b070-93ba7df5e002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:07:4a:5e:e9:b5:48:c0:77:93:59:f6:14: 8a:5a:da:9f:5e:40:00:10:5f:55:7b:68:ec:f6:9c: cc:b1:59:45:1d:6c:67:77:87:22:7a:c3:dc:fa:de: cf:fd:d1:eb:5e:99:08:0f:83:79:a5:d3:23:c4:9b: 70:f9:d2:d5:b5:1f:1a:75:1f:8a:53:5a:10:4d:b0: 77:6c:2c:cb:cf:75:ef:16:01:b7:8a:36:46:bd:a0: 03:dd:f6:e7:e3:3e:52:40:20:f4:bb:cb:68:90:cb: 8e:67:45:dc:a6:05:25:0b:71:a1:86:85:b5:05:ca: ab:81:77:ae:c2:1f:d6:eb:17:a8:dc:e5:f0:7e:aa: 32:17:7d:f0:88:0a:90:d5:a6:78:6c:6f:8d:1c:4f: f0:e0:9e:ba:34:f3:93:37:09:ff:53:b8:50:1a:e8: ae:12:f2:67:29:30:94:ec:df:74:a0:8a:65:e0:37: f2:3a:2f:c5:95:85:15:ae:de:13:53:fa:ea:31:9a: bb:fa:d4:0d:d4:7c:c7:08:f1:25:3e:62:d2:9f:d6: c2:c5:d5:85:7c:a1:2d:e9:07:e9:a0:4a:c0:c4:90: b3:a6:b9:41:52:ba:ec:52:0f:6c:57:cc:d4:d2:96: 5b:49:ee:e3:dd:b5:65:da:fc:80:03:39:12:63:1b: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B1:E5:92:15:E9:28:83:07:D6:37:CC:86:27:AC:C0:10:AB:B5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl X509v3 Authority Key Identifier: keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer sbgp-ipAddrBlock: critical IPv4: 162.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f3:78:16:2c:65:8c:f9:1f:37:e1:ae:6c:f0:1b:f5:eb:b6: 25:9d:05:40:b8:af:a4:9d:79:7f:4f:38:53:3f:df:5f:b3:2e: 67:d9:0b:05:cf:9d:5c:e8:84:66:f4:52:68:10:a1:92:74:20: cf:2d:21:77:ee:34:ad:be:c9:d3:64:1b:fd:5d:ec:34:41:5a: 91:1b:c1:fa:c1:ad:76:08:89:24:2b:74:bf:fe:d0:b9:7c:7f: c4:3a:97:8b:22:cf:d3:68:09:9f:95:b8:0d:31:b2:96:8c:49: 76:e5:94:2c:3d:2a:1e:d8:fa:8e:32:a8:35:0c:19:9d:5a:07: 0c:f3:18:9e:2a:9f:c3:2c:1b:3e:5e:82:b1:b7:a6:cf:2c:86: fd:34:b2:44:b4:1b:a6:da:bb:c4:e7:33:40:8e:77:3d:b7:5d: 1e:99:a9:2a:92:49:bc:9d:20:0d:c2:35:f4:75:1a:3c:71:7b: 29:0d:fb:fe:f6:10:09:ff:66:cb:d6:e3:c9:64:36:6b:cb:a1: 4f:1e:94:87:35:58:5c:2a:6f:30:ad:61:04:d5:2a:8b:f4:07: 34:32:3a:c3:fe:65:97:e6:d9:2a:c1:a6:38:91:67:62:0d:f9: 6e:f2:7a:11:5a:e2:65:1a:11:32:72:7a:5e:89:e6:a4:b1:77: c6:d1:31:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr8G/MNKSxLffX5goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky ZjIwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmEwNTRhODUtMGE0NS00OTI2LWIwNzAtOTNiYTdkZjVlMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4HSl7ptUjAd5NZ9hSKWtqfXkAAEF9Ve2js 9pzMsVlFHWxnd4ciesPc+t7P/dHrXpkID4N5pdMjxJtw+dLVtR8adR+KU1oQTbB3 bCzLz3XvFgG3ijZGvaAD3fbn4z5SQCD0u8tokMuOZ0XcpgUlC3GhhoW1BcqrgXeu wh/W6xeo3OXwfqoyF33wiAqQ1aZ4bG+NHE/w4J66NPOTNwn/U7hQGuiuEvJnKTCU 7N90oIpl4DfyOi/FlYUVrt4TU/rqMZq7+tQN1HzHCPElPmLSn9bCxdWFfKEt6Qfp oErAxJCzprlBUrrsUg9sV8zU0pZbSe7j3bVl2vyAAzkSYxuX2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMCx5ZIV6SiDB9Y3zIYnrMAQq7WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvMzM3ZjYzNDktZWI5Ni0z ZDg1LThkODgtNGQ3ODUzOWYxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5 MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3 MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAM/N4FixljPkfN+GubPAb9eu2JZ0FQLivpJ15f084Uz/fX7MuZ9kLBc+d XOiEZvRSaBChknQgzy0hd+40rb7J02Qb/V3sNEFakRvB+sGtdgiJJCt0v/7QuXx/ xDqXiyLP02gJn5W4DTGyloxJduWULD0qHtj6jjKoNQwZnVoHDPMYniqfwywbPl6C sbemzyyG/TSyRLQbptq7xOczQI53PbddHpmpKpJJvJ0gDcI19HUaPHF7KQ37/vYQ Cf9my9bjyWQ2a8uhTx6UhzVYXCpvMK1hBNUqi/QHNDI6w/5ll+bZKsGmOJFnYg35 bvJ6EVriZRoRMnJ6XonmpLF3xtExMA== -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:54 2025 by rpki-client