$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa File: 3a43fc79-e84c-3622-94a8-309df3d0397d.roa (raw, json) Hash identifier: WrrYAISh2p0CSbLgDJiTQFaW6/tUn0gU42lDNiN5+KM= Subject key identifier: 85:5A:97:8D:AB:06:28:9D:A3:33:BC:C6:73:8A:6B:95:11:E0:31:D3 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B569A94EDA6081522C75A01E0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa Signing time: Sat 27 Sep 2025 22:58:41 +0000 ROA not before: Sat 27 Sep 2025 22:58:41 +0000 ROA not after: Fri 26 Dec 2025 23:58:41 +0000 asID: 397325 IP address blocks: 192.31.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:9a:94:ed:a6:08:15:22:c7:5a:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:58:41 2025 GMT Not After : Dec 26 23:58:41 2025 GMT Subject: CN=978e93c0-f5a0-4869-b35d-e5be00db5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:f3:0c:fc:12:79:f8:8a:37:d0:df:78:a9: 67:46:8e:8a:a0:da:d3:b7:96:b8:96:3c:c2:ff:2c: b4:5f:47:5c:2b:eb:ac:f7:83:8f:cd:c2:0b:d6:0e: 0f:e2:34:e6:07:42:41:41:3a:ac:be:5d:7b:e5:71: 54:12:b5:15:d0:44:f5:52:0f:95:9e:53:2d:70:7f: 09:9d:1c:c8:52:e7:cf:84:4f:e7:e6:4a:14:04:c7: 97:40:ff:b8:1b:d0:12:0e:1e:34:31:eb:4d:5e:21: 6a:61:17:97:a2:60:32:ec:3c:6c:23:51:93:2f:91: 69:67:a5:63:78:46:46:65:b2:41:50:6a:74:49:0a: c1:d2:7e:97:b2:93:c1:31:ea:1f:63:ea:37:ab:ce: 74:b0:a9:8e:fd:6c:4e:76:8d:67:de:48:04:04:c0: 69:cc:6b:6a:21:1f:1e:d9:fb:30:09:5e:e3:13:74: ff:19:aa:b8:ae:a1:a1:46:7d:48:5e:a6:2a:b6:a0: 36:dd:1c:8f:2a:59:92:a0:3c:0c:9b:97:7c:54:60: 55:48:54:e5:3f:b6:e9:bf:1f:de:c0:5f:72:c5:e0: 66:6b:66:06:5b:e9:b6:5e:b9:91:79:e3:ef:ea:37: ef:9e:b5:77:4e:2e:b5:28:bc:fe:9d:cf:f6:43:07: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:97:8D:AB:06:28:9D:A3:33:BC:C6:73:8A:6B:95:11:E0:31:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:61:65:d4:98:9d:c3:d7:ea:79:1f:20:0b:03:4b:ed:ca:1b: 5e:ca:75:a3:05:bf:23:95:58:13:47:2c:ca:1f:a4:57:af:76: 32:dc:d6:c6:d0:6e:2f:33:55:a5:c9:73:84:a4:06:4d:40:ff: 3e:73:be:0e:65:db:1b:35:e9:94:db:59:44:bf:67:46:ef:5e: 48:1f:70:f1:76:09:c1:13:6a:47:36:ad:97:bb:af:72:e1:13: 6c:c9:42:5e:a8:13:4b:36:93:ae:77:2e:9f:db:bf:60:99:92: cd:f2:b4:b8:e9:a5:5a:0e:63:ac:7c:cd:25:fd:e0:5e:0e:ff: 05:b1:65:f6:65:d7:d0:9f:69:21:db:e0:e3:a5:db:11:91:a3: 95:d8:1a:c1:d2:02:84:e0:fe:bf:c8:cc:e7:49:9e:a7:db:f3: c6:a9:aa:34:64:d8:77:29:e6:02:ac:db:48:41:01:5e:7d:dd: ab:04:40:79:89:3f:fd:f4:bd:32:08:58:93:c3:46:55:65:23: b5:78:6d:50:47:fb:19:1d:85:31:94:b5:ff:d3:e3:2b:cc:cf: 31:ce:68:c5:99:7b:ec:1b:5c:b4:63:bd:88:3d:2f:c7:62:67: 44:32:8b:8d:4d:9b:1f:23:ae:77:bc:8f:59:34:2a:d4:36:97: 86:34:51:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWmpTtpggVIsdaAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNTg0MVoXDTI1MTIyNjIzNTg0MVowLzEtMCsGA1UEAxMk OTc4ZTkzYzAtZjVhMC00ODY5LWIzNWQtZTViZTAwZGI1NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvPzDPwSefiKN9DfeKlnRo6KoNrTt5a4ljzC /yy0X0dcK+us94OPzcIL1g4P4jTmB0JBQTqsvl175XFUErUV0ET1Ug+VnlMtcH8J nRzIUufPhE/n5koUBMeXQP+4G9ASDh40MetNXiFqYReXomAy7DxsI1GTL5FpZ6Vj eEZGZbJBUGp0SQrB0n6XspPBMeofY+o3q850sKmO/WxOdo1n3kgEBMBpzGtqIR8e 2fswCV7jE3T/Gaq4rqGhRn1IXqYqtqA23RyPKlmSoDwMm5d8VGBVSFTlP7bpvx/e wF9yxeBma2YGW+m2XrmReePv6jfvnrV3Ti61KLz+nc/2QwefXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVal42rBiidozO8xnOKa5UR4DHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvM2E0M2ZjNzktZTg0Yy0z NjIyLTk0YTgtMzA5ZGYzZDAzOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVhZdSYncPX6nkfIAsDS+3KG17KdaMFvyOVWBNHLMofpFevdjLc1sbQ bi8zVaXJc4SkBk1A/z5zvg5l2xs16ZTbWUS/Z0bvXkgfcPF2CcETakc2rZe7r3Lh E2zJQl6oE0s2k653Lp/bv2CZks3ytLjppVoOY6x8zSX94F4O/wWxZfZl19CfaSHb 4OOl2xGRo5XYGsHSAoTg/r/IzOdJnqfb88apqjRk2Hcp5gKs20hBAV593asEQHmJ P/30vTIIWJPDRlVlI7V4bVBH+xkdhTGUtf/T4yvMzzHOaMWZe+wbXLRjvYg9L8di Z0Qyi41Nmx8jrne8j1k0KtQ2l4Y0UYI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:06 2025 by rpki-client