$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa File: 4a8f44c2-2408-33dc-84a6-dcc034360053.roa (raw, json) Hash identifier: 8jtJl2VQ4PYpGUFuzpahC0pI1YHzpyC48+bUPS4dL9w= Subject key identifier: E7:07:88:A9:13:74:B3:20:60:78:F4:C4:A3:A2:7E:DB:62:99:DC:EE Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584B328C41E6AFE689A309B27020 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 12119 IP address blocks: 209.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:41:e6:af:e6:89:a3:09:b2:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b88e65c6-4973-4663-ad62-8417304414d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:9c:f6:eb:e0:cb:59:08:6e:1e:73:3c:c9: de:35:9d:5e:9f:30:ac:2b:61:1e:59:d0:f4:10:79: ec:87:af:db:a2:3b:88:af:3b:38:bb:bd:4c:14:b3: ed:2b:a7:50:42:df:7d:88:86:86:10:2e:8c:09:d9: 20:84:d0:22:3c:fc:de:5e:58:29:5e:6b:c7:15:8d: 70:a0:54:a1:b7:4a:4b:db:6f:52:f5:9f:80:64:e6: c0:d0:d3:87:5e:b6:47:ce:f5:39:0f:68:7b:80:a2: b9:df:a0:08:f8:1f:a4:76:fd:7a:4c:ae:3c:29:78: d0:2f:94:52:de:93:d8:80:94:b4:83:a0:5d:36:1b: 93:df:fe:8e:a9:aa:7b:c4:9d:17:1f:1c:4f:67:eb: 60:9a:ad:47:73:96:fe:e1:15:fc:8b:84:1f:49:63: 26:df:b8:03:e6:52:08:e4:c4:b6:8b:d7:4a:1d:4b: 83:27:a8:60:78:77:0a:75:65:9f:eb:76:e9:b7:d6: 4a:1c:ac:bd:fc:28:7b:b9:d2:ef:c9:df:8d:16:5f: 8b:59:c9:3f:ad:7f:d4:19:05:fa:58:45:0e:0a:1f: da:c1:75:4d:16:a0:d8:d0:af:33:f5:4e:e0:03:6a: dd:ce:da:b6:ff:ff:a0:53:cc:bb:48:21:1a:6c:38: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:07:88:A9:13:74:B3:20:60:78:F4:C4:A3:A2:7E:DB:62:99:DC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 209.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0b:8c:34:a8:f0:ce:eb:7e:21:b2:97:84:1d:bc:43:7d:22: ef:0e:a6:10:94:a9:db:b6:8b:c6:fc:56:3b:f0:71:ce:89:ab: e5:5f:32:2f:14:5c:5c:ce:56:de:5d:c2:04:49:d2:e5:eb:3b: 41:3f:1a:0a:ac:d5:4e:1a:1d:0a:55:a7:57:a8:1b:2b:c8:ab: cd:94:8a:1b:44:c6:d8:90:69:f8:33:b3:1e:eb:2b:4e:66:a6: ba:26:8b:52:aa:7c:02:6a:ca:df:c0:7d:df:58:28:64:7d:ff: 85:1e:6b:27:c4:48:92:40:17:25:a9:af:52:9f:bf:16:91:9f: d2:6e:44:65:c4:ee:a4:bf:ca:ad:75:4d:41:b7:7d:3b:9f:ee: d1:0a:1d:5f:97:1a:00:f1:20:44:fa:01:a8:ce:18:54:1a:54: bd:be:be:e7:c7:a0:d8:d3:24:67:76:26:82:22:f3:8e:a2:55: 6e:f5:8a:ec:c1:8c:73:9f:9e:98:12:2a:a0:fe:b1:22:5c:64: f1:cb:fe:b7:82:36:30:57:14:ee:b7:3b:37:0b:a4:1f:76:c9: 92:0f:e2:13:35:72:04:b8:07:cc:bb:0d:7b:bf:b6:f6:62:ec: f8:d9:65:99:d5:ae:97:75:14:ab:36:f6:98:28:4a:5b:9c:12: 2c:a6:62:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEHmr+aJowmycCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk Yjg4ZTY1YzYtNDk3My00NjYzLWFkNjItODQxNzMwNDQxNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gmc9uvgy1kIbh5zPMneNZ1enzCsK2EeWdD0 EHnsh6/bojuIrzs4u71MFLPtK6dQQt99iIaGEC6MCdkghNAiPPzeXlgpXmvHFY1w oFSht0pL229S9Z+AZObA0NOHXrZHzvU5D2h7gKK536AI+B+kdv16TK48KXjQL5RS 3pPYgJS0g6BdNhuT3/6Oqap7xJ0XHxxPZ+tgmq1Hc5b+4RX8i4QfSWMm37gD5lII 5MS2i9dKHUuDJ6hgeHcKdWWf63bpt9ZKHKy9/Ch7udLvyd+NFl+LWck/rX/UGQX6 WEUOCh/awXVNFqDY0K8z9U7gA2rdztq2//+gU8y7SCEabDjUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcHiKkTdLMgYHj0xKOifttimdzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNGE4ZjQ0YzItMjQwOC0z M2RjLTg0YTYtZGNjMDM0MzYwMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4LjDSo8M7rfiGyl4QdvEN9Iu8OphCUqdu2i8b8Vjvwcc6Jq+VfMi8U XFzOVt5dwgRJ0uXrO0E/Ggqs1U4aHQpVp1eoGyvIq82UihtExtiQafgzsx7rK05m promi1KqfAJqyt/Afd9YKGR9/4UeayfESJJAFyWpr1KfvxaRn9JuRGXE7qS/yq11 TUG3fTuf7tEKHV+XGgDxIET6AajOGFQaVL2+vufHoNjTJGd2JoIi846iVW71iuzB jHOfnpgSKqD+sSJcZPHL/reCNjBXFO63OzcLpB92yZIP4hM1cgS4B8y7DXu/tvZi 7PjZZZnVrpd1FKs29pgoSlucEiymYv0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:33:48 2025 by rpki-client