$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa File: 381340d3-4d65-3093-9630-6d2c34537be7.roa (raw, json) Hash identifier: kAJvgA/sX9JGFJRXybNAvh303sgoO4z1hhRB5zKblMI= Subject key identifier: EC:72:4D:CF:D3:A9:FE:14:F0:2C:34:51:5F:A8:DC:72:5E:CF:C7:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43D8F76962E24C0C50E180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa Signing time: Tue 26 Aug 2025 22:56:59 +0000 ROA not before: Tue 26 Aug 2025 22:56:59 +0000 ROA not after: Mon 24 Nov 2025 23:56:59 +0000 asID: 31898 IP address blocks: 192.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:d8:f7:69:62:e2:4c:0c:50:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:59 2025 GMT Not After : Nov 24 23:56:59 2025 GMT Subject: CN=74075baf-e5eb-491c-bc56-36ab1cf7f3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:3b:96:b7:e0:f9:bc:b0:18:3e:20:5a:cc: fc:4d:df:2d:88:be:30:6e:16:a3:18:b1:c0:87:19: a3:89:6c:13:ce:21:34:3a:c3:b5:5f:27:a8:5d:39: 60:d9:ca:06:a8:be:aa:d3:c9:da:0f:97:13:75:83: ef:0c:98:9e:71:ac:0f:94:ac:49:b1:f9:a2:11:b7: ab:5c:5b:79:76:82:44:a7:65:15:50:f5:88:e0:d5: aa:d5:32:8f:92:84:a3:ed:f0:3e:17:ec:c0:c9:df: 6b:1d:30:30:90:38:da:33:23:36:21:ef:23:e6:cb: 23:34:62:75:ab:9a:d9:f7:b5:8a:f4:cf:c3:c0:4f: 77:58:35:c7:9b:81:cb:1c:6f:e1:67:e9:8c:cb:59: c1:59:94:6f:b3:ab:11:78:08:94:f8:b3:58:f6:17: ac:6a:6a:f5:52:46:94:a4:cc:e2:c3:1f:31:78:03: 12:b3:7b:61:4b:a3:a7:cc:de:51:b2:14:d5:f5:83: 68:5a:32:a4:22:7e:76:66:27:0a:c8:78:55:fe:1d: e0:0a:20:74:b3:66:a7:69:36:4b:4f:ab:5f:76:c7: 65:4f:d6:6a:b6:8c:08:8a:92:c5:19:af:42:e0:2d: f1:b1:e9:32:26:78:24:e4:56:b0:49:2a:74:df:d5: a5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:4D:CF:D3:A9:FE:14:F0:2C:34:51:5F:A8:DC:72:5E:CF:C7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:bd:25:a0:4c:97:b2:3f:a8:57:f7:d2:cf:c7:f9:22:e1:63: 16:16:9f:ca:b4:62:f8:dd:44:42:d0:1d:e9:5d:4b:56:8e:7a: 97:4d:fc:69:88:5a:23:85:7d:89:68:96:51:96:4c:31:a6:48: c8:da:b1:54:da:08:13:95:5f:fc:68:23:e5:16:b5:ac:7b:ee: c7:26:8c:ec:79:b0:3d:56:da:66:ee:c4:b3:dc:2f:10:75:62: a5:28:eb:19:7c:c7:be:c1:9b:27:1f:bd:bc:cc:ff:ae:c1:4a: 6a:3f:f8:66:c8:27:9f:e6:79:8e:8a:fb:b1:cc:86:98:3f:ca: 74:e0:87:d5:80:77:df:0c:d9:34:5c:08:03:7e:a2:de:65:05: 58:c7:2a:cb:dc:3a:0a:f3:12:01:99:6f:52:6c:50:31:ef:90: ff:c1:ea:0e:49:97:ad:5e:4c:41:73:ab:46:a1:82:64:13:6a: 05:cd:9a:97:55:0b:aa:4a:a0:95:a9:28:ec:10:21:02:0e:af: 3b:9d:0b:60:f0:5f:2e:5f:52:36:ab:8d:c5:8f:13:c3:ad:79: 39:5b:0b:e7:f8:ff:9b:3c:60:7b:47:ac:1a:cc:12:0d:0e:7b: 89:55:0a:1b:d4:1d:00:e9:f5:e9:e4:19:2b:7d:84:0c:26:df: 54:42:57:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q9j3aWLiTAxQ4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTY1OVoXDTI1MTEyNDIzNTY1OVowLzEtMCsGA1UEAxMk NzQwNzViYWYtZTVlYi00OTFjLWJjNTYtMzZhYjFjZjdmM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlks7lrfg+bywGD4gWsz8Td8tiL4wbhajGLHA hxmjiWwTziE0OsO1XyeoXTlg2coGqL6q08naD5cTdYPvDJiecawPlKxJsfmiEber XFt5doJEp2UVUPWI4NWq1TKPkoSj7fA+F+zAyd9rHTAwkDjaMyM2Ie8j5ssjNGJ1 q5rZ97WK9M/DwE93WDXHm4HLHG/hZ+mMy1nBWZRvs6sReAiU+LNY9hesamr1UkaU pMziwx8xeAMSs3thS6OnzN5RshTV9YNoWjKkIn52ZicKyHhV/h3gCiB0s2anaTZL T6tfdsdlT9ZqtowIipLFGa9C4C3xsekyJngk5FawSSp039WlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxyTc/Tqf4U8Cw0UV+o3HJez8fjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzgxMzQwZDMtNGQ2NS0z MDkzLTk2MzAtNmQyYzM0NTM3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW9JaBMl7I/qFf30s/H+SLhYxYWn8q0YvjdRELQHeldS1aOepdN/GmI WiOFfYlollGWTDGmSMjasVTaCBOVX/xoI+UWtax77scmjOx5sD1W2mbuxLPcLxB1 YqUo6xl8x77BmycfvbzM/67BSmo/+GbIJ5/meY6K+7HMhpg/ynTgh9WAd98M2TRc CAN+ot5lBVjHKsvcOgrzEgGZb1JsUDHvkP/B6g5Jl61eTEFzq0ahgmQTagXNmpdV C6pKoJWpKOwQIQIOrzudC2DwXy5fUjarjcWPE8OteTlbC+f4/5s8YHtHrBrMEg0O e4lVChvUHQDp9enkGSt9hAwm31RCV/k= -----END CERTIFICATE-----Generated at Thu Oct 9 01:04:23 2025 by rpki-client