$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa File: ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa (raw, json) Hash identifier: r1mchpdXFiazQir5x9pIpWC+TmvpK+fqsEx7k8Ujobg= Subject key identifier: 66:CC:FE:33:4F:4E:DB:A1:A4:E3:DE:AD:41:67:1D:A8:29:DF:07:90 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584B328C41D190D463F28C4A3B80 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 12119 IP address blocks: 169.197.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:41:d1:90:d4:63:f2:8c:4a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=f93f28e3-570d-41f6-a5ec-96277045ee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:58:6a:aa:1a:85:cc:84:c2:d6:13:f4:5b: 07:97:27:f1:f5:98:c5:03:05:f6:16:87:1f:f8:bc: 44:2a:6d:dc:77:d1:76:27:e1:b0:da:92:b7:54:34: e4:98:61:49:bd:b3:4c:86:56:e5:6a:2a:37:1c:f0: 2a:3a:4b:ff:a9:a5:0f:ce:f5:98:b7:79:e5:a2:19: 4b:83:61:f3:79:b9:d8:32:92:4b:d2:77:dd:36:fe: 59:70:60:74:be:0f:f4:7d:45:88:8a:e7:94:0c:8e: 22:ff:4a:61:8e:f3:f3:17:99:9c:61:c5:e4:5d:e7: 2e:c2:de:60:c9:31:ca:99:e8:42:e1:69:e0:ef:8c: 1d:e0:b6:cb:91:2c:26:8f:37:55:7a:ae:d5:10:3a: df:3d:da:99:e1:40:47:6b:c5:ca:53:30:bd:86:51: 96:0c:56:1b:e1:fe:e3:b4:7d:50:f0:84:3b:40:9d: 9f:d0:b4:5d:d3:fd:fd:e0:34:6a:69:73:8b:39:ca: 17:28:c9:c9:97:6f:42:b1:57:b6:b6:e0:14:ce:a9: 6a:fe:2e:da:73:7c:0f:f3:eb:61:f4:37:fc:79:73: 67:84:b7:92:dc:ea:a0:3e:06:e4:67:36:e8:bc:40: a1:e6:a4:7a:5f:44:e5:9e:1c:bf:1d:bf:80:9e:d1: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:FE:33:4F:4E:DB:A1:A4:E3:DE:AD:41:67:1D:A8:29:DF:07:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 169.197.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:8e:48:77:c6:84:9e:0c:0d:45:15:12:b1:11:2a:a7:03:70: 4a:ee:19:db:f2:b9:16:67:13:41:4c:00:12:3b:9f:38:88:a3: 5b:d7:df:55:dd:15:e2:ac:50:9f:a7:ca:f6:78:00:cc:11:74: a6:44:58:8b:be:6f:b3:46:65:fb:b9:0b:4e:0d:75:4e:3a:4c: a5:33:d3:3f:db:ca:9d:d0:d5:54:80:c9:d9:cf:50:a5:c0:31: 8c:a4:a4:17:92:9d:8d:2b:94:fb:a8:a3:49:7f:a5:8e:76:43: 47:eb:f6:d6:1f:69:56:45:ff:d9:7e:2d:88:8b:e9:e6:e3:19: 1d:5a:ce:12:fd:09:f4:b5:61:0f:ea:a5:ea:46:0f:78:ed:50: ec:fd:c6:11:59:6f:6b:b1:cd:63:82:58:e0:0c:73:27:00:0f: f7:ce:6b:38:52:7f:ae:2f:9f:da:bd:13:e1:0d:86:27:2b:b5: 20:cf:0e:23:2a:ba:13:1b:0b:99:b0:9a:65:af:44:3a:76:97: 30:4a:96:0b:83:3f:d5:6c:29:ab:d1:9c:7d:ef:7d:15:6e:51: 87:55:6a:89:41:39:19:fb:84:41:13:f7:eb:d0:d2:d0:94:08: 03:7c:6d:36:51:87:76:80:d2:01:80:58:55:19:e7:e8:2b:db: a7:46:09:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEHRkNRj8oxKO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjkzZjI4ZTMtNTcwZC00MWY2LWE1ZWMtOTYyNzcwNDVlZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc5YaqoahcyEwtYT9FsHlyfx9ZjFAwX2Focf +LxEKm3cd9F2J+Gw2pK3VDTkmGFJvbNMhlblaio3HPAqOkv/qaUPzvWYt3nlohlL g2HzebnYMpJL0nfdNv5ZcGB0vg/0fUWIiueUDI4i/0phjvPzF5mcYcXkXecuwt5g yTHKmehC4Wng74wd4LbLkSwmjzdVeq7VEDrfPdqZ4UBHa8XKUzC9hlGWDFYb4f7j tH1Q8IQ7QJ2f0LRd0/394DRqaXOLOcoXKMnJl29CsVe2tuAUzqlq/i7ac3wP8+th 9Df8eXNnhLeS3OqgPgbkZzbovECh5qR6X0Tlnhy/Hb+AntHxNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbM/jNPTtuhpOPerUFnHagp3weQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvYWQ1YzljM2UtNThiZC0z MzQ4LWI3ZDQtYzE5ZmNiZDA5ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmOSHfGhJ4MDUUVErERKqcDcEruGdvyuRZnE0FMABI7nziIo1vX31Xd FeKsUJ+nyvZ4AMwRdKZEWIu+b7NGZfu5C04NdU46TKUz0z/byp3Q1VSAydnPUKXA MYykpBeSnY0rlPuoo0l/pY52Q0fr9tYfaVZF/9l+LYiL6ebjGR1azhL9CfS1YQ/q pepGD3jtUOz9xhFZb2uxzWOCWOAMcycAD/fOazhSf64vn9q9E+ENhicrtSDPDiMq uhMbC5mwmmWvRDp2lzBKlguDP9VsKavRnH3vfRVuUYdVaolBORn7hEET9+vQ0tCU CAN8bTZRh3aA0gGAWFUZ5+gr26dGCRg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:39:06 2025 by rpki-client