$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/f835a9d1-ef80-350a-a599-847e1bfbfb81.roa File: f835a9d1-ef80-350a-a599-847e1bfbfb81.roa (raw, json) Hash identifier: 0iMRW6Z3XzsvUk3MMNspKaEwDWM/bROAQ3a23tCgRXg= Subject key identifier: 5A:70:65:78:72:0D:04:99:C9:1B:F8:A8:79:3C:E3:1B:01:B9:B0:B7 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5691ED4754F6D00D0212FE40 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/f835a9d1-ef80-350a-a599-847e1bfbfb81.roa Signing time: Sat 27 Sep 2025 22:41:15 +0000 ROA not before: Sat 27 Sep 2025 22:41:15 +0000 ROA not after: Fri 26 Dec 2025 23:41:15 +0000 asID: 397325 IP address blocks: 192.31.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:91:ed:47:54:f6:d0:0d:02:12:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:41:15 2025 GMT Not After : Dec 26 23:41:15 2025 GMT Subject: CN=61c5577e-7651-4d4d-b6f2-d14e3d09dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:35:ad:5e:73:29:d9:69:7f:bb:c1:ad:23: ee:71:a5:12:7e:67:6e:1f:3b:4f:53:3c:55:76:60: 26:41:d8:2a:be:a3:6d:c0:fb:78:b5:90:67:5e:23: 95:f0:5a:f0:87:02:d1:4a:4b:fe:8f:1f:ad:3e:ae: 17:8b:50:7d:d2:e4:d7:e7:bc:1e:07:e7:53:0d:47: cf:51:9f:f6:81:7b:60:66:93:b0:65:cd:c8:1f:89: a9:a0:dc:e8:d9:86:1c:2d:10:9b:0d:13:4b:94:bc: 54:3b:81:b6:41:7c:65:e4:f5:dd:76:af:63:bf:8f: 20:4d:e9:c1:bc:20:26:40:f0:1d:14:79:21:ac:5c: c3:34:22:aa:6f:87:78:76:cc:19:c1:21:9c:70:43: 69:dc:29:9e:0e:09:1a:98:65:f8:61:7e:b1:c6:87: 30:40:8b:a6:85:a6:99:ee:80:b4:d3:86:06:7b:f2: c2:76:81:f8:e9:8e:7e:9f:8c:f2:6a:6f:b0:28:27: 9a:59:90:c8:8d:7a:35:1b:28:da:86:68:ef:3d:1b: 62:0f:ee:b1:a9:10:2e:06:8d:fa:77:0b:96:24:99: be:e2:7e:9f:a1:e1:c7:83:5e:1a:65:e0:78:63:e4: 1a:47:23:6a:ea:d9:19:04:7a:45:3a:8b:0e:8e:c3: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:65:78:72:0D:04:99:C9:1B:F8:A8:79:3C:E3:1B:01:B9:B0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/f835a9d1-ef80-350a-a599-847e1bfbfb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:17:f5:eb:a8:dd:23:7d:20:ca:38:5d:f0:be:a1:37:a3:5e: 82:2e:69:75:60:3b:9f:29:ea:0c:84:9a:5e:a0:f0:52:89:01: 59:ca:91:02:f2:08:2c:96:f1:db:57:70:9e:26:2f:73:4a:68: 8c:92:a3:f9:da:06:46:45:6c:a6:98:8e:53:76:f4:fb:4b:19: eb:61:da:05:69:b2:ce:36:7c:47:26:69:cd:bb:ae:47:ef:0c: b0:f1:b8:88:0f:6c:ac:c8:65:42:e9:ab:b7:1a:d2:de:e7:91: 67:73:bd:1a:27:6f:86:1b:d5:ce:a4:9f:e5:91:23:fc:b3:c2: 8c:07:ad:b5:41:dc:ef:cf:12:8a:9f:12:ba:29:e1:89:c8:41: df:ed:38:20:13:ff:af:e5:35:8c:a8:74:41:59:c7:02:b4:ee: 5a:55:2b:a0:40:e2:58:41:a7:80:84:0b:49:76:ed:11:b3:d6: a3:4a:09:1f:a0:ef:4c:08:4b:87:e8:ea:e0:75:b0:59:57:39: 62:62:46:c1:97:b8:6f:38:67:8c:ad:58:11:b3:41:97:a5:8f: 22:ee:9e:db:7f:54:b8:64:9e:a2:02:bf:99:d0:56:95:f1:70: f3:b9:7b:1d:3d:1b:19:04:c3:36:8c:9c:15:d4:b8:f5:ca:35: fa:29:0d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWke1HVPbQDQIS/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNDExNVoXDTI1MTIyNjIzNDExNVowLzEtMCsGA1UEAxMk NjFjNTU3N2UtNzY1MS00ZDRkLWI2ZjItZDE0ZTNkMDlkZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO01rV5zKdlpf7vBrSPucaUSfmduHztPUzxV dmAmQdgqvqNtwPt4tZBnXiOV8FrwhwLRSkv+jx+tPq4Xi1B90uTX57weB+dTDUfP UZ/2gXtgZpOwZc3IH4mpoNzo2YYcLRCbDRNLlLxUO4G2QXxl5PXddq9jv48gTenB vCAmQPAdFHkhrFzDNCKqb4d4dswZwSGccENp3CmeDgkamGX4YX6xxocwQIumhaaZ 7oC004YGe/LCdoH46Y5+n4zyam+wKCeaWZDIjXo1GyjahmjvPRtiD+6xqRAuBo36 dwuWJJm+4n6foeHHg14aZeB4Y+QaRyNq6tkZBHpFOosOjsPX+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpwZXhyDQSZyRv4qHk84xsBubC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZjgzNWE5ZDEtZWY4MC0z NTBhLWE1OTktODQ3ZTFiZmJmYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkX9euo3SN9IMo4XfC+oTejXoIuaXVgO58p6gyEml6g8FKJAVnKkQLy CCyW8dtXcJ4mL3NKaIySo/naBkZFbKaYjlN29PtLGeth2gVpss42fEcmac27rkfv DLDxuIgPbKzIZULpq7ca0t7nkWdzvRonb4Yb1c6kn+WRI/yzwowHrbVB3O/PEoqf Erop4YnIQd/tOCAT/6/lNYyodEFZxwK07lpVK6BA4lhBp4CEC0l27RGz1qNKCR+g 70wIS4fo6uB1sFlXOWJiRsGXuG84Z4ytWBGzQZeljyLuntt/VLhknqICv5nQVpXx cPO5ex09GxkEwzaMnBXUuPXKNfopDcE= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:57 2025 by rpki-client