$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e5623178-95df-3b42-8658-aa4ca2f27da3.roa File: e5623178-95df-3b42-8658-aa4ca2f27da3.roa (raw, json) Hash identifier: URoiaGXurbWEVTFjieEIqqvKQl3yOW6Y5WHmL31AARY= Subject key identifier: 32:54:99:38:D2:5F:5A:F2:1C:EE:13:FA:26:C3:9A:09:A4:2C:18:FE Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B42E5F269408DD19D5C278240 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e5623178-95df-3b42-8658-aa4ca2f27da3.roa Signing time: Sat 20 Sep 2025 21:34:22 +0000 ROA not before: Sat 20 Sep 2025 21:34:22 +0000 ROA not after: Fri 19 Dec 2025 22:34:22 +0000 asID: 46696 IP address blocks: 192.31.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:42:e5:f2:69:40:8d:d1:9d:5c:27:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 20 21:34:22 2025 GMT Not After : Dec 19 22:34:22 2025 GMT Subject: CN=e84aa318-e00e-4fde-ac5e-e193495df00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:22:b5:2b:80:78:27:e4:72:9d:bf:b2:92: 26:51:b7:ff:ff:1d:13:34:b3:24:55:a7:85:53:53: 41:cd:26:0d:d8:a6:b8:39:ad:ab:03:db:e5:40:9f: de:b2:33:76:11:61:04:97:a9:a3:fe:bb:04:b4:ef: 53:e0:bb:0e:de:ac:f7:94:52:89:c5:33:5b:63:2f: 41:6a:6a:ce:f8:7e:a9:ae:80:59:07:f1:48:9b:d8: ab:cd:fd:07:87:68:d8:c6:94:fc:74:bb:95:88:48: cf:21:6d:38:de:85:09:11:88:27:2f:89:f2:fb:f0: 8a:50:92:a1:10:39:00:0f:61:8d:bf:04:83:60:22: 27:70:e6:b6:cf:3f:23:ff:65:74:05:8e:95:e4:15: 58:98:76:d6:55:05:20:e8:be:56:52:49:60:f8:48: dd:96:b3:ca:5d:2c:04:c0:09:e9:ef:6d:55:fa:e2: 28:55:1f:ca:cd:e4:b8:1a:62:06:b2:56:c3:d4:2f: fe:1f:e2:48:e5:59:16:1e:2a:d2:50:a5:43:d2:27: df:6b:e2:12:d5:1b:96:30:7c:9e:db:e4:cf:4d:82: 30:1a:a1:05:7c:00:64:b0:78:90:32:26:a4:41:fa: 56:b8:8e:47:dd:83:10:c9:4e:fc:39:c4:64:66:a7: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:99:38:D2:5F:5A:F2:1C:EE:13:FA:26:C3:9A:09:A4:2C:18:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/e5623178-95df-3b42-8658-aa4ca2f27da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:77:24:46:b3:b0:72:80:32:e0:58:6f:76:91:25:4f:5f:f6: a4:5d:50:43:21:37:44:48:dd:b8:43:b6:26:95:78:c2:1a:6f: 25:c7:7b:a1:81:ef:5f:de:5b:aa:28:76:26:a5:a1:71:1b:2b: ff:18:94:06:e6:f7:a6:c0:be:ed:54:fc:ea:cb:18:3f:aa:43: 19:6d:8f:45:2d:c3:2a:2a:ff:a1:00:5d:bf:b8:0a:d5:84:87: a6:8a:11:21:7f:9f:f4:82:d1:c9:2a:d2:b2:f5:15:98:e5:0c: 31:4c:c7:01:3c:8f:6b:2c:6b:45:72:c3:87:61:f5:48:93:ed: 2e:24:5e:1d:64:f5:ff:c2:6d:98:b9:28:91:47:07:ee:19:88: c8:8a:d8:7e:73:62:c8:d0:64:2d:91:90:21:a8:88:3c:4e:5b: 0c:86:ff:5c:cd:00:03:af:1c:af:97:98:22:f1:51:87:61:5c: 47:73:94:29:b1:cc:c4:21:cc:e2:db:2f:b5:50:95:06:20:b5: a7:f8:88:dd:cc:e0:b8:fa:9b:6c:b0:d1:2f:5c:c0:0c:7e:37: 34:7f:69:05:5a:e7:a1:a6:d8:0b:e8:7c:f1:bf:51:9e:f6:a1: 12:1c:ac:50:03:b6:19:b0:2d:58:4a:6b:47:fd:0e:3d:48:68: ab:23:15:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtC5fJpQI3RnVwngkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyMDIxMzQyMloXDTI1MTIxOTIyMzQyMlowLzEtMCsGA1UEAxMk ZTg0YWEzMTgtZTAwZS00ZmRlLWFjNWUtZTE5MzQ5NWRmMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoakitSuAeCfkcp2/spImUbf//x0TNLMkVaeF U1NBzSYN2Ka4Oa2rA9vlQJ/esjN2EWEEl6mj/rsEtO9T4LsO3qz3lFKJxTNbYy9B amrO+H6proBZB/FIm9irzf0Hh2jYxpT8dLuViEjPIW043oUJEYgnL4ny+/CKUJKh EDkAD2GNvwSDYCIncOa2zz8j/2V0BY6V5BVYmHbWVQUg6L5WUklg+EjdlrPKXSwE wAnp721V+uIoVR/KzeS4GmIGslbD1C/+H+JI5VkWHirSUKVD0iffa+IS1RuWMHye 2+TPTYIwGqEFfABksHiQMiakQfpWuI5H3YMQyU78OcRkZqeJZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJUmTjSX1ryHO4T+ibDmgmkLBj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZTU2MjMxNzgtOTVkZi0z YjQyLTg2NTgtYWE0Y2EyZjI3ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh3JEazsHKAMuBYb3aRJU9f9qRdUEMhN0RI3bhDtiaVeMIabyXHe6GB 71/eW6oodialoXEbK/8YlAbm96bAvu1U/OrLGD+qQxltj0Utwyoq/6EAXb+4CtWE h6aKESF/n/SC0ckq0rL1FZjlDDFMxwE8j2ssa0Vyw4dh9UiT7S4kXh1k9f/CbZi5 KJFHB+4ZiMiK2H5zYsjQZC2RkCGoiDxOWwyG/1zNAAOvHK+XmCLxUYdhXEdzlCmx zMQhzOLbL7VQlQYgtaf4iN3M4Lj6m2yw0S9cwAx+NzR/aQVa56Gm2AvofPG/UZ72 oRIcrFADthmwLVhKa0f9Dj1IaKsjFas= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:31 2025 by rpki-client