$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa File: 3acf301c-9ec5-387a-aab4-0c7bec71a379.roa (raw, json) Hash identifier: TRpC9w8YZF1f/EmwoQqaMiWAl9m5wVUCedwOrSQkRsU= Subject key identifier: A9:4C:30:28:A2:B2:84:E3:18:1A:EB:7E:83:37:99:10:85:4C:B9:64 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370D42AB0FEC7E21FE5880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 192.48.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0d:42:ab:0f:ec:7e:21:fe:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3ab8fcf4-5505-4256-99bb-19d89bb7d22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:39:f7:c8:c9:85:bc:48:d3:b4:49:3d:66: 78:a6:9f:19:04:1f:15:c9:9b:f7:14:56:19:b3:d9: 8e:a6:40:ea:93:ab:b0:c2:21:03:38:83:1c:36:6b: ca:e2:81:8e:05:9a:ce:43:a9:e6:30:e7:c3:f8:5a: 53:1e:f4:34:4c:4f:0d:02:56:56:b4:99:7e:65:17: a3:1e:16:8e:32:fb:b2:65:bf:1b:7d:01:7f:9a:55: b7:6e:44:d0:37:5a:2d:7f:1c:a9:17:cf:d5:57:de: a3:c3:db:09:b1:33:c4:d1:f8:f0:e8:1f:5d:38:2a: e9:14:d1:05:95:5d:39:ea:7f:ae:c0:16:a8:48:11: d8:b7:c0:9c:1c:65:c0:08:57:03:8a:02:3f:45:1f: 36:f8:6c:f8:bc:f1:ed:f2:5b:6d:04:f5:36:45:12: f8:a8:2c:35:16:5e:a6:e1:1e:c6:f9:9e:7a:67:b7: e5:a6:2f:d2:12:a1:46:39:e2:db:9f:ec:3d:c8:00: 58:87:72:c7:df:dd:b1:71:26:76:cc:f8:c8:59:12: a4:4c:ae:88:cd:3b:c6:4a:97:8d:7d:8d:10:82:1c: c4:8e:78:a1:ea:bd:54:ca:51:a1:a3:3e:a9:a3:25: 89:e6:54:68:e3:fa:03:b7:fb:c4:a9:e6:cb:b4:2c: 32:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4C:30:28:A2:B2:84:E3:18:1A:EB:7E:83:37:99:10:85:4C:B9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 192.48.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:12:dd:61:40:f2:47:cc:ab:5a:c9:c5:9b:46:5a:fa:84:14: ad:c8:f4:12:36:0a:8e:31:ef:57:5d:b4:9b:79:9e:06:b9:07: 5d:5c:a1:f5:49:4c:52:17:82:4a:77:e7:25:5f:9f:30:0b:8a: 5e:ff:4c:10:d8:43:60:55:6b:08:47:0c:c3:1b:07:7f:7d:39: 8e:d3:c0:12:f1:ba:18:2d:f6:14:af:35:ab:b6:11:f3:58:2d: bb:2c:c0:21:85:ed:ad:83:c7:4c:e5:83:45:37:1a:37:15:f9: 9a:0a:65:81:77:fc:2a:17:26:4a:49:61:3e:b4:f6:56:a1:26: e6:c0:19:8e:e7:04:56:cd:ef:ed:1a:21:6d:6f:dd:0d:8a:89: 55:99:23:eb:ca:a9:33:81:6b:24:2a:d2:ff:bb:8d:46:03:f8: 1c:35:52:56:38:29:e4:a1:4b:8f:76:f7:65:8a:97:34:37:43: 78:16:4a:7a:cb:c9:91:f8:1e:48:b5:ee:8c:e6:b4:9c:6a:2f: 79:da:a7:b5:95:30:6e:9e:ef:84:f4:f5:53:6a:dd:da:42:cc: fd:94:7d:04:5a:53:43:5f:82:20:20:12:36:6e:df:66:be:d2: 1c:11:d1:b3:75:59:18:23:a7:b9:96:8a:42:a9:e5:07:f3:84: df:81:d3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw1Cqw/sfiH+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2FiOGZjZjQtNTUwNS00MjU2LTk5YmItMTlkODliYjdkMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbo598jJhbxI07RJPWZ4pp8ZBB8VyZv3FFYZ s9mOpkDqk6uwwiEDOIMcNmvK4oGOBZrOQ6nmMOfD+FpTHvQ0TE8NAlZWtJl+ZRej HhaOMvuyZb8bfQF/mlW3bkTQN1otfxypF8/VV96jw9sJsTPE0fjw6B9dOCrpFNEF lV056n+uwBaoSBHYt8CcHGXACFcDigI/RR82+Gz4vPHt8lttBPU2RRL4qCw1Fl6m 4R7G+Z56Z7flpi/SEqFGOeLbn+w9yABYh3LH392xcSZ2zPjIWRKkTK6IzTvGSpeN fY0QghzEjnih6r1UylGhoz6poyWJ5lRo4/oDt/vEqebLtCwyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlMMCiisoTjGBrrfoM3mRCFTLlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FjZjMwMWMtOWVjNS0z ODdhLWFhYjQtMGM3YmVjNzFhMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwS3WFA8kfMq1rJxZtGWvqEFK3I9BI2Co4x71ddtJt5nga5B11cofVJ TFIXgkp35yVfnzALil7/TBDYQ2BVawhHDMMbB399OY7TwBLxuhgt9hSvNau2EfNY LbsswCGF7a2Dx0zlg0U3GjcV+ZoKZYF3/CoXJkpJYT609lahJubAGY7nBFbN7+0a IW1v3Q2KiVWZI+vKqTOBayQq0v+7jUYD+Bw1UlY4KeShS49292WKlzQ3Q3gWSnrL yZH4Hki17ozmtJxqL3nap7WVMG6e74T09VNq3dpCzP2UfQRaU0NfgiAgEjZu32a+ 0hwR0bN1WRgjp7mWikKp5QfzhN+B04c= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:25 2025 by rpki-client