$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa File: cafabcb4-1733-380b-a238-a258e12b6734.roa (raw, json) Hash identifier: gALvd3fOLiNyyVn/fqazznHWzbVYUKQ3Wj7jkBLuFJ4= Subject key identifier: 41:A2:4E:37:18:E0:5A:A2:80:25:50:3C:A3:58:0F:CD:6D:BF:C4:62 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806CFF4C1AF88BC63BCA780 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cf:f4:c1:af:88:bc:63:bc:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ce3b8a6b-4703-4e40-8e35-3280658f3f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:bc:e9:fa:1b:d3:8c:e6:6b:fa:0d:2f:13: f7:f0:bf:d0:91:02:09:a9:3d:2a:4e:6f:32:81:8f: ff:2d:13:eb:86:4a:20:50:f8:9c:a2:10:dd:a9:d0: c7:2d:50:6f:61:c9:15:08:e6:fe:cf:1c:0a:9c:39: 41:73:8f:0f:18:3b:ae:58:59:3f:e3:4c:ac:f0:49: c7:c3:7c:fc:0a:12:78:72:88:04:40:e3:e4:6e:48: 8d:10:84:6e:78:a7:c8:17:d8:d3:82:ba:e9:5c:4f: 80:47:52:4f:47:0b:6c:90:64:9a:f0:2b:bd:96:e7: 46:e1:fc:9c:39:45:95:18:0e:2f:56:c9:39:2c:d1: af:ce:21:62:3f:21:be:e9:98:60:1d:e4:15:66:a8: 9d:91:bb:9a:d2:4e:cf:c8:09:52:85:e8:42:d8:0b: b4:89:61:d9:bc:12:6e:6c:6b:5d:ca:55:98:3b:09: 2b:36:f3:2c:19:33:f7:60:37:d3:d6:3d:ed:65:9a: 38:3e:3a:98:c7:79:33:cf:a9:cc:91:f0:cc:79:b9: 98:8b:4a:8a:89:d4:12:ec:d3:2d:5c:ba:6e:54:da: 8e:53:6c:dd:a2:38:23:1e:1d:c5:64:02:66:66:3d: 3e:3c:75:ad:8d:76:01:6a:cf:a8:48:70:52:f4:57: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:4E:37:18:E0:5A:A2:80:25:50:3C:A3:58:0F:CD:6D:BF:C4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:da:1e:85:e3:0c:c8:5a:15:06:c6:46:60:33:b2:bd:8a:55: 0a:e1:64:ea:74:6d:8c:24:9d:67:d0:8e:6d:ce:90:55:77:31: 21:cf:ca:a8:ed:b5:6c:79:6f:c8:ec:e1:0d:45:e9:5b:77:1f: ab:fc:e4:c5:a0:a6:c9:98:96:67:fa:ce:35:99:2d:1c:a4:68: 53:3b:cf:7d:23:d7:ee:05:70:2f:64:be:d3:52:92:e5:19:7d: af:c1:9c:81:e2:95:2c:06:ff:97:83:e0:a8:65:0d:18:a7:a4: 47:7a:1b:d9:1d:d3:7c:16:99:06:3d:c3:f4:e3:91:f4:8b:22: 97:36:32:84:19:ad:55:4d:a0:b8:2e:16:b0:a7:11:f9:b4:6f: 83:7a:28:7d:df:d3:25:0c:70:a0:32:03:82:ff:57:51:29:00: 57:47:be:93:cf:27:86:94:73:e1:e6:ff:b0:ef:7f:9b:c3:af: e2:f8:e2:e2:f5:2d:4f:29:38:09:88:57:53:31:aa:52:59:87: a1:fe:4a:b4:7c:2b:38:f9:73:69:f9:29:cc:cd:33:ee:61:75: 7c:b8:9d:17:c4:d1:2f:07:c4:96:37:03:23:1c:81:9a:75:74: b5:41:90:b6:b8:a6:e8:39:56:d1:96:b2:a7:d4:7a:53:45:58: 6b:27:9a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs/0wa+IvGO8p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2UzYjhhNmItNDcwMy00ZTQwLThlMzUtMzI4MDY1OGYzZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaa86fob04zma/oNLxP38L/QkQIJqT0qTm8y gY//LRPrhkogUPicohDdqdDHLVBvYckVCOb+zxwKnDlBc48PGDuuWFk/40ys8EnH w3z8ChJ4cogEQOPkbkiNEIRueKfIF9jTgrrpXE+AR1JPRwtskGSa8Cu9ludG4fyc OUWVGA4vVsk5LNGvziFiPyG+6ZhgHeQVZqidkbua0k7PyAlShehC2Au0iWHZvBJu bGtdylWYOwkrNvMsGTP3YDfT1j3tZZo4PjqYx3kzz6nMkfDMebmYi0qKidQS7NMt XLpuVNqOU2zdojgjHh3FZAJmZj0+PHWtjXYBas+oSHBS9FeRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGiTjcY4FqigCVQPKNYD81tv8RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2FmYWJjYjQtMTczMy0z ODBiLWEyMzgtYTI1OGUxMmI2NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTaHoXjDMhaFQbGRmAzsr2KVQrhZOp0bYwknWfQjm3OkFV3MSHPyqjt tWx5b8js4Q1F6Vt3H6v85MWgpsmYlmf6zjWZLRykaFM7z30j1+4FcC9kvtNSkuUZ fa/BnIHilSwG/5eD4KhlDRinpEd6G9kd03wWmQY9w/TjkfSLIpc2MoQZrVVNoLgu FrCnEfm0b4N6KH3f0yUMcKAyA4L/V1EpAFdHvpPPJ4aUc+Hm/7Dvf5vDr+L44uL1 LU8pOAmIV1MxqlJZh6H+SrR8Kzj5c2n5KczNM+5hdXy4nRfE0S8HxJY3AyMcgZp1 dLVBkLa4pug5VtGWsqfUelNFWGsnmqk= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:50 2025 by rpki-client