$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa File: cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa (raw, json) Hash identifier: Swc6cLx54gHUxv/oc2ux+2eW3gRKzZKsRgtVZM8Zpc4= Subject key identifier: 05:85:FE:42:05:EC:D8:07:80:1C:1B:C8:6D:81:C6:6E:49:E9:CE:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43DE6C64F3935425B72C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa Signing time: Tue 26 Aug 2025 22:57:01 +0000 ROA not before: Tue 26 Aug 2025 22:57:01 +0000 ROA not after: Mon 24 Nov 2025 23:57:01 +0000 asID: 31898 IP address blocks: 192.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:de:6c:64:f3:93:54:25:b7:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:01 2025 GMT Not After : Nov 24 23:57:01 2025 GMT Subject: CN=3249fad8-f4b2-47ed-8716-6ba5f1b34c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:ad:24:e4:2c:d3:28:4f:03:36:0a:dc:cb: 17:81:76:aa:a6:4e:79:b7:9e:10:88:f3:66:0f:49: 0b:ff:5b:d1:f4:80:06:9e:a1:eb:17:94:6c:85:ba: 82:80:95:4b:84:d6:9b:11:a4:b3:64:35:37:cf:7a: 34:6a:98:12:e8:90:b3:f1:5e:58:00:12:9b:b1:df: f7:07:d7:68:f7:b6:aa:06:33:06:07:73:29:9b:33: a8:05:11:95:63:b9:a0:c2:a3:9b:54:66:b1:70:8b: 39:01:5f:b2:ce:5d:cf:94:04:eb:18:50:fa:ba:1c: 35:28:bd:ea:05:53:82:a4:5c:8f:2b:8c:6e:41:08: 2f:f4:ed:e4:15:ec:2f:83:96:e3:d6:e6:ac:01:d4: 96:cc:c1:bc:16:33:d2:63:0f:87:63:1d:00:94:e2: 5a:86:cf:fd:c1:48:36:a4:0f:61:df:cc:2c:7a:aa: bb:dd:ab:c8:fa:c4:f1:ca:86:19:57:1e:e6:2a:1d: 7d:11:1f:8e:cb:26:18:1a:fc:3b:87:de:6b:e7:8d: e5:2f:e9:4b:11:77:63:46:e7:90:07:e6:e2:1a:1d: 40:de:dd:ea:d2:08:42:77:01:49:c9:78:d8:9a:01: 3d:cb:9b:3e:98:07:9c:78:48:6c:78:19:12:34:d5: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:85:FE:42:05:EC:D8:07:80:1C:1B:C8:6D:81:C6:6E:49:E9:CE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8a:c3:05:96:21:92:ed:22:af:64:fa:33:96:a9:64:82:33: 17:d7:6d:9d:b8:21:d5:dc:d4:31:ec:dc:38:21:b5:81:f7:31: 08:3f:15:65:78:51:4a:61:58:fa:f4:ca:50:f0:e8:2d:a2:23: 72:e6:f4:49:6a:46:c7:fa:ef:0c:d2:f6:4c:fe:0a:ef:e5:75: 4a:fc:b0:1d:5e:b2:6c:44:cc:d8:1e:c0:43:03:a9:7c:55:c3: 2f:06:89:cc:be:57:cb:43:c8:b1:02:1a:bd:ea:30:c3:48:4b: 52:68:18:de:40:6f:da:10:60:7c:34:4f:d3:64:98:c7:16:fd: 91:1c:51:4c:a5:14:0a:a1:8e:96:a2:01:06:0d:71:e5:92:ff: 47:fa:24:c9:71:1c:a7:be:70:b5:07:a3:ea:57:6b:ab:c5:8b: c8:2b:e3:8c:ea:51:ab:0d:70:73:32:54:80:11:b3:c5:ea:b4: 4b:79:d2:23:d4:1e:95:a7:fd:4f:ac:82:19:c5:d2:e6:fd:ea: d8:12:c9:53:f6:70:65:c1:2a:e3:dd:c9:7a:39:75:3c:b5:ee: dc:ae:a8:66:24:2e:06:bc:91:cc:a9:21:80:e8:a9:bd:dd:a4: 25:1d:92:11:a1:ba:be:28:ee:0a:43:c7:26:94:e5:39:1a:9d: f6:e0:e8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q95sZPOTVCW3LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTcwMVoXDTI1MTEyNDIzNTcwMVowLzEtMCsGA1UEAxMk MzI0OWZhZDgtZjRiMi00N2VkLTg3MTYtNmJhNWYxYjM0YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jutJOQs0yhPAzYK3MsXgXaqpk55t54QiPNm D0kL/1vR9IAGnqHrF5RshbqCgJVLhNabEaSzZDU3z3o0apgS6JCz8V5YABKbsd/3 B9do97aqBjMGB3MpmzOoBRGVY7mgwqObVGaxcIs5AV+yzl3PlATrGFD6uhw1KL3q BVOCpFyPK4xuQQgv9O3kFewvg5bj1uasAdSWzMG8FjPSYw+HYx0AlOJahs/9wUg2 pA9h38wseqq73avI+sTxyoYZVx7mKh19ER+OyyYYGvw7h95r543lL+lLEXdjRueQ B+biGh1A3t3q0ghCdwFJyXjYmgE9y5s+mAeceEhseBkSNNXR+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWF/kIF7NgHgBwbyG2Bxm5J6c5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2QzMzg4M2YtYTc2Mi0z ZDdiLTllN2UtZjkxYzM5ZGFhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuKwwWWIZLtIq9k+jOWqWSCMxfXbZ24IdXc1DHs3DghtYH3MQg/FWV4 UUphWPr0ylDw6C2iI3Lm9ElqRsf67wzS9kz+Cu/ldUr8sB1esmxEzNgewEMDqXxV wy8Gicy+V8tDyLECGr3qMMNIS1JoGN5Ab9oQYHw0T9NkmMcW/ZEcUUylFAqhjpai AQYNceWS/0f6JMlxHKe+cLUHo+pXa6vFi8gr44zqUasNcHMyVIARs8XqtEt50iPU HpWn/U+sghnF0ub96tgSyVP2cGXBKuPdyXo5dTy17tyuqGYkLga8kcypIYDoqb3d pCUdkhGhur4o7gpDxyaU5Tkanfbg6KA= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:03 2025 by rpki-client