$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa File: 9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa (raw, json) Hash identifier: ZwCrVU+cN+svHY0JTaeIYhSc6ZyuDexcHKvaa/RKiBU= Subject key identifier: 06:78:C6:A3:7C:E7:EB:36:11:9A:F4:99:8C:BF:C0:93:F5:36:F5:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43CDE5D9DB55E40B720100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa Signing time: Tue 26 Aug 2025 22:56:54 +0000 ROA not before: Tue 26 Aug 2025 22:56:54 +0000 ROA not after: Mon 24 Nov 2025 23:56:54 +0000 asID: 31898 IP address blocks: 192.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:cd:e5:d9:db:55:e4:0b:72:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:54 2025 GMT Not After : Nov 24 23:56:54 2025 GMT Subject: CN=17139a60-22a2-454f-a2e6-45b1695a8e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:60:30:a4:dc:df:e1:6c:99:40:f2:08:82: 0a:9d:60:88:97:5b:9e:73:75:01:73:f1:2c:32:41: bc:6b:01:98:42:04:43:7c:98:2e:f6:ec:12:de:07: 45:e2:83:a7:48:2d:1f:47:d2:a5:7e:61:65:40:fc: 6c:89:29:c5:df:bc:f2:4c:df:91:1e:78:28:c7:e8: bc:51:fb:09:1b:93:a6:7c:27:32:ca:d1:86:cd:49: 8a:60:40:93:62:6a:21:a9:c0:0e:46:5a:6d:a6:de: 0b:b7:a0:0b:be:51:2a:e3:d1:ca:88:bb:1c:e7:b6: 12:19:99:d7:ea:cf:91:bf:a3:80:01:15:28:34:d3: 0f:88:7e:cf:b3:5f:7b:e2:b2:20:c9:07:57:11:28: 39:0d:5b:6d:5c:a3:af:83:b4:67:77:ff:76:33:96: 90:8e:91:ba:b2:ce:0a:4d:f4:b9:ba:c9:1a:30:f1: 02:8e:72:25:62:4f:7f:23:4c:17:e8:ec:49:a6:80: 9a:08:e8:d1:98:cc:eb:9e:a0:09:83:d0:6e:70:7c: 9d:7e:9d:d9:69:09:6b:b7:5c:c6:1e:71:7e:59:92: e4:c4:7c:05:eb:61:98:b1:37:a6:a1:96:8e:aa:9f: 17:28:26:99:89:10:8e:01:53:27:ad:22:23:8a:83: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:C6:A3:7C:E7:EB:36:11:9A:F4:99:8C:BF:C0:93:F5:36:F5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:50:45:66:11:28:c5:4e:6b:ad:55:db:1f:b5:a6:a6:36:a4: 00:06:06:ff:55:67:ff:5a:cb:94:77:a5:43:dd:1e:8c:ae:0a: e4:f8:90:0d:29:2e:08:b2:d2:6c:3d:b3:84:25:74:1e:1d:0f: c6:c8:3f:90:92:dc:44:64:59:5c:98:3f:6b:00:07:03:88:9b: ce:3b:f0:a0:f1:dc:60:41:65:c1:e8:b8:e8:de:37:6b:eb:ad: b0:9b:7a:38:df:99:1f:50:fe:1c:5c:f4:1b:07:a7:25:67:28: 92:5c:9a:6d:b3:78:17:a0:56:54:b5:e7:68:01:e2:ca:a8:ad: dd:4f:5c:99:89:56:a1:de:4f:4a:e1:84:31:d2:97:fe:1a:6a: 89:5c:3c:e1:0e:8c:ed:52:90:78:65:2d:af:5b:6d:40:93:1d: 4d:77:a9:4c:99:26:65:b4:8d:65:70:19:75:63:85:76:5c:7f: 39:36:88:a4:71:b1:77:35:1d:1c:59:36:47:87:7e:21:4d:77: 74:5b:8f:63:72:09:af:f7:4f:6f:92:83:74:9d:28:24:26:6b: b8:a7:ed:26:6b:46:46:6e:b8:76:e1:0f:e4:7d:84:f2:7f:53: c3:cd:f0:79:16:8f:3f:6c:4b:2f:86:57:58:17:7b:b7:a2:ed: cb:a5:22:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q83l2dtV5AtyAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTY1NFoXDTI1MTEyNDIzNTY1NFowLzEtMCsGA1UEAxMk MTcxMzlhNjAtMjJhMi00NTRmLWEyZTYtNDViMTY5NWE4ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxgMKTc3+FsmUDyCIIKnWCIl1uec3UBc/Es MkG8awGYQgRDfJgu9uwS3gdF4oOnSC0fR9KlfmFlQPxsiSnF37zyTN+RHngox+i8 UfsJG5OmfCcyytGGzUmKYECTYmohqcAORlptpt4Lt6ALvlEq49HKiLsc57YSGZnX 6s+Rv6OAARUoNNMPiH7Ps1974rIgyQdXESg5DVttXKOvg7Rnd/92M5aQjpG6ss4K TfS5uskaMPECjnIlYk9/I0wX6OxJpoCaCOjRmMzrnqAJg9BucHydfp3ZaQlrt1zG HnF+WZLkxHwF62GYsTemoZaOqp8XKCaZiRCOAVMnrSIjioMzzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ4xqN85+s2EZr0mYy/wJP1NvW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg1MGYxMmQtZWI3Ni0z Y2RiLTg5OWItNGFkN2VhMGI1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBQRWYRKMVOa61V2x+1pqY2pAAGBv9VZ/9ay5R3pUPdHoyuCuT4kA0p Lgiy0mw9s4QldB4dD8bIP5CS3ERkWVyYP2sABwOIm8478KDx3GBBZcHouOjeN2vr rbCbejjfmR9Q/hxc9BsHpyVnKJJcmm2zeBegVlS152gB4sqord1PXJmJVqHeT0rh hDHSl/4aaolcPOEOjO1SkHhlLa9bbUCTHU13qUyZJmW0jWVwGXVjhXZcfzk2iKRx sXc1HRxZNkeHfiFNd3Rbj2NyCa/3T2+Sg3SdKCQma7in7SZrRkZuuHbhD+R9hPJ/ U8PN8HkWjz9sSy+GV1gXe7ei7culIsk= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:08 2025 by rpki-client