$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/95dee37f-c8b1-3cc8-92f0-edffd159f008.roa File: 95dee37f-c8b1-3cc8-92f0-edffd159f008.roa (raw, json) Hash identifier: I0P6d6PVm+LC824dmApvMZGtcltp4DqDyEMpIEPS4mU= Subject key identifier: B2:9F:11:8F:B1:53:D1:FF:F7:42:FE:2D:30:CB:C0:72:F6:20:1C:14 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B569AF6716EBA0A919F3BE600 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/95dee37f-c8b1-3cc8-92f0-edffd159f008.roa Signing time: Sat 27 Sep 2025 22:59:27 +0000 ROA not before: Sat 27 Sep 2025 22:59:27 +0000 ROA not after: Fri 26 Dec 2025 23:59:27 +0000 asID: 397325 IP address blocks: 192.31.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:9a:f6:71:6e:ba:0a:91:9f:3b:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:59:27 2025 GMT Not After : Dec 26 23:59:27 2025 GMT Subject: CN=982bdf63-ff08-479b-9adb-500c952c47ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:00:19:c4:4f:cf:65:37:4f:d8:55:41:15: 06:ab:29:d0:be:44:bf:f0:51:72:9a:6e:92:e8:c0: 10:5e:f2:88:fb:ba:17:a1:90:44:8e:5a:60:f9:3c: a3:2d:5c:f9:c1:95:e4:f7:bf:51:3b:cf:b6:71:27: 7d:f2:90:0e:7d:fe:04:4e:5d:17:d6:64:05:61:9b: 5b:b9:8b:f2:42:c2:7c:0f:f2:0c:b9:a6:38:22:49: 27:13:e0:32:95:4e:d2:4c:1f:85:9c:23:a4:a0:44: 26:a1:dc:f0:af:20:b9:ec:21:e5:79:61:08:1c:37: 30:5c:01:52:b8:63:41:fc:e0:70:08:4f:da:e1:61: b4:6e:7b:90:27:da:08:62:3f:7b:a2:f2:0e:f7:2c: 23:7a:6c:5c:9e:67:71:8a:8f:0d:7a:e2:17:c8:47: 25:85:a9:cd:65:be:65:59:b8:23:de:1c:c5:69:2d: 8c:a2:6c:88:f7:cb:75:f8:54:bc:68:5d:d2:89:03: ae:c7:a0:cc:fd:08:a5:a2:b4:e0:56:ff:d6:e0:9e: 74:d8:83:eb:04:94:85:76:ff:9e:f2:41:f6:5f:c8: e5:a1:16:da:f1:b1:c1:97:bb:97:af:a6:4a:0f:c1: 20:d0:69:9e:ca:d2:31:1f:b0:89:57:6a:45:5f:ba: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9F:11:8F:B1:53:D1:FF:F7:42:FE:2D:30:CB:C0:72:F6:20:1C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/95dee37f-c8b1-3cc8-92f0-edffd159f008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2c:a1:c6:20:6e:57:5a:82:a2:06:26:09:d9:f1:c1:96:fc: 98:0d:79:a8:06:ca:1a:ea:3b:aa:42:de:fa:0a:e1:24:d1:98: 9c:cb:ff:5a:45:e8:89:00:c5:c0:25:96:2b:f0:00:1c:92:46: ca:ec:23:61:55:97:e0:f3:24:38:36:4a:f8:5d:b1:cb:1b:d1: b9:2c:c3:17:49:cd:80:8a:41:e8:35:ba:e3:81:9e:ad:04:85: 14:ef:4c:a3:fa:a4:81:df:2c:5d:53:a5:2b:17:92:84:99:8b: 0a:99:19:2c:d2:d1:14:4e:20:a9:18:f0:fc:05:a7:16:c9:20: 57:08:d7:df:db:31:89:02:53:d3:22:e7:a0:f0:5a:ea:0e:89: 3c:9c:4c:92:b1:58:33:d3:31:76:7c:77:1f:b3:b8:2a:82:d8: 1d:74:d7:24:fe:34:dc:dc:ba:c3:03:e5:3d:b7:28:37:b8:bb: c3:65:5a:9c:dc:6b:f2:12:56:8d:aa:2c:f2:e3:42:a6:26:e8: c1:3b:f1:20:3d:c2:a1:ab:96:ae:91:4f:c3:fa:9b:f8:b8:18: eb:e4:31:ae:fb:af:23:6c:e4:31:b6:d2:65:ae:34:4e:50:08: 07:97:82:1e:c3:a5:0d:d9:f2:77:c7:7f:a0:9e:f4:00:f5:e8: 11:ec:e1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWmvZxbroKkZ875gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNTkyN1oXDTI1MTIyNjIzNTkyN1owLzEtMCsGA1UEAxMk OTgyYmRmNjMtZmYwOC00NzliLTlhZGItNTAwYzk1MmM0N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI0AGcRPz2U3T9hVQRUGqynQvkS/8FFymm6S 6MAQXvKI+7oXoZBEjlpg+TyjLVz5wZXk979RO8+2cSd98pAOff4ETl0X1mQFYZtb uYvyQsJ8D/IMuaY4IkknE+AylU7STB+FnCOkoEQmodzwryC57CHleWEIHDcwXAFS uGNB/OBwCE/a4WG0bnuQJ9oIYj97ovIO9ywjemxcnmdxio8NeuIXyEclhanNZb5l Wbgj3hzFaS2MomyI98t1+FS8aF3SiQOux6DM/QilorTgVv/W4J502IPrBJSFdv+e 8kH2X8jloRba8bHBl7uXr6ZKD8Eg0GmeytIxH7CJV2pFX7pEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKfEY+xU9H/90L+LTDLwHL2IBwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvOTVkZWUzN2YtYzhiMS0z Y2M4LTkyZjAtZWRmZmQxNTlmMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHssocYgbldagqIGJgnZ8cGW/JgNeagGyhrqO6pC3voK4STRmJzL/1pF 6IkAxcAllivwABySRsrsI2FVl+DzJDg2Svhdscsb0bkswxdJzYCKQeg1uuOBnq0E hRTvTKP6pIHfLF1TpSsXkoSZiwqZGSzS0RROIKkY8PwFpxbJIFcI19/bMYkCU9Mi 56DwWuoOiTycTJKxWDPTMXZ8dx+zuCqC2B101yT+NNzcusMD5T23KDe4u8NlWpzc a/ISVo2qLPLjQqYm6ME78SA9wqGrlq6RT8P6m/i4GOvkMa77ryNs5DG20mWuNE5Q CAeXgh7DpQ3Z8nfHf6Ce9AD16BHs4Xg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:09 2025 by rpki-client