$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa File: 31de5975-70d3-38db-af47-39cb7d439a32.roa (raw, json) Hash identifier: Dj1i/ag7kpspXpMErID0uDj2bIVo6XSzpqdulKliJbI= Subject key identifier: 14:4D:58:51:19:AD:34:A6:3D:52:AF:DC:BB:1B:73:05:BE:3C:32:C3 Certificate issuer: /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Certificate serial: 010D0C9F4328584B4E904C06984F513347AD7C00 Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa Signing time: Thu 25 Sep 2025 01:51:29 +0000 ROA not before: Thu 25 Sep 2025 01:51:29 +0000 ROA not after: Wed 24 Dec 2025 02:51:29 +0000 asID: 3450 IP address blocks: 192.249.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:90:4c:06:98:4f:51:33:47:ad:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Validity Not Before: Sep 25 01:51:29 2025 GMT Not After : Dec 24 02:51:29 2025 GMT Subject: CN=2911b3d6-94ec-421b-bbf0-fbfc90b02325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:e5:6b:4e:2a:48:03:3f:64:e8:9d:fb:fe: 04:26:dd:31:5f:b0:78:25:64:ee:c1:c1:1e:49:0b: 4f:56:09:e8:cd:0c:72:13:98:b4:f8:a1:a6:12:ae: f5:b1:08:96:1c:d8:50:ac:d3:b4:cb:af:b1:bc:e6: c5:e8:50:83:9c:41:c5:d4:16:64:30:3a:94:bd:7f: 1c:6e:1f:eb:c1:35:5a:b3:b6:f1:7d:2a:23:49:07: 1c:22:84:a6:52:df:a3:cd:a1:08:6f:19:f1:92:8c: e3:7d:5c:00:89:3f:a4:91:28:2c:4f:d1:b6:aa:ab: 0c:65:f6:f3:06:91:3f:24:5b:e1:70:02:2a:56:f7: 6b:85:04:c1:e9:80:92:ab:3d:20:f3:40:79:a9:91: 4d:d5:42:3f:ea:86:83:2e:d5:1b:03:c4:30:f7:3d: 7a:d1:8a:cb:d3:79:0a:94:4b:3e:0f:01:2c:85:0c: 76:62:2e:3d:c9:85:e2:5c:66:03:ec:1d:47:bb:2b: a9:0b:55:21:0f:f6:af:9a:70:a4:d0:33:0e:c3:88: 65:bd:10:1e:fb:40:b1:cf:59:72:35:99:6b:67:f1: 25:1f:77:83:73:b3:6b:97:24:a6:1d:f1:1b:7b:04: 92:69:1c:76:98:48:30:b9:08:ae:43:ac:73:34:9e: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4D:58:51:19:AD:34:A6:3D:52:AF:DC:BB:1B:73:05:BE:3C:32:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl X509v3 Authority Key Identifier: keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer sbgp-ipAddrBlock: critical IPv4: 192.249.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1a:77:28:aa:3c:c1:24:fd:25:fa:1a:21:a9:2e:cf:f5:76: 70:a2:c6:17:f1:f6:53:29:20:35:3e:1f:ac:9e:fc:89:91:87: 5e:72:d9:19:58:7c:3a:7a:72:2d:6b:b7:70:08:d9:89:c9:3d: d2:82:cf:0e:a0:62:f1:ed:07:21:75:5c:f3:72:31:c1:ae:d7: 3c:e4:0e:7e:30:68:3c:a0:4c:dc:39:26:92:a1:a3:7e:92:31: a3:e4:ac:d3:2b:e2:b2:0f:63:b9:16:59:e7:78:8e:84:c2:3c: 18:47:dc:38:b5:bd:e4:5b:fa:58:09:30:2f:7a:a1:7a:e8:30: 38:d8:e9:a7:c0:55:e0:b3:9c:0c:15:c0:d8:04:7c:41:e3:b3: bf:f7:2e:23:3f:97:f8:d0:f7:3f:2b:b5:61:30:ce:5f:79:ff: dc:2d:40:32:f2:78:5c:23:a3:9b:62:b5:d5:58:40:91:40:96: fc:41:fd:37:f0:6d:14:dc:84:71:84:12:a2:b3:54:ef:98:bf: c6:06:aa:50:83:28:27:11:3d:45:1e:8f:96:c5:1f:31:37:35: eb:73:22:24:aa:64:fc:94:42:b7:da:69:d2:d6:28:8a:b5:11: 96:4a:d3:76:2e:49:d6:68:6b:6c:3e:01:04:9b:25:59:56:6e: 47:94:3b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOkEwGmE9RM0etfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyYjM5Y2MtMDEwOC00ZGIxLWIwNTktYjQ4MzNiNTNj MWEzMB4XDTI1MDkyNTAxNTEyOVoXDTI1MTIyNDAyNTEyOVowLzEtMCsGA1UEAxMk MjkxMWIzZDYtOTRlYy00MjFiLWJiZjAtZmJmYzkwYjAyMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ/la04qSAM/ZOid+/4EJt0xX7B4JWTuwcEe SQtPVgnozQxyE5i0+KGmEq71sQiWHNhQrNO0y6+xvObF6FCDnEHF1BZkMDqUvX8c bh/rwTVas7bxfSojSQccIoSmUt+jzaEIbxnxkozjfVwAiT+kkSgsT9G2qqsMZfbz BpE/JFvhcAIqVvdrhQTB6YCSqz0g80B5qZFN1UI/6oaDLtUbA8Qw9z160YrL03kK lEs+DwEshQx2Yi49yYXiXGYD7B1HuyupC1UhD/avmnCk0DMOw4hlvRAe+0Cxz1ly NZlrZ/ElH3eDc7NrlySmHfEbewSSaRx2mEgwuQiuQ6xzNJ6LHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRNWFEZrTSmPVKv3LsbcwW+PDLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJi MzljYy0wMTA4LTRkYjEtYjA1OS1iNDgzM2I1M2MxYTMvMzFkZTU5NzUtNzBkMy0z OGRiLWFmNDctMzljYjdkNDM5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjEyYjM5Y2MtMDEwOC00ZGIxLWIw NTktYjQ4MzNiNTNjMWEzL2YxMmIzOWNjLTAxMDgtNGRiMS1iMDU5LWI0ODMzYjUz YzFhMy5jcmwwHwYDVR0jBBgwFoAUFOFhU1y8L4PdCDAgazUSrdrmj9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJiMzljYy0wMTA4LTRkYjEtYjA1OS1iNDgz M2I1M2MxYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMadyiqPMEk/SX6GiGpLs/1dnCixhfx9lMpIDU+H6ye/ImRh15y2RlY fDp6ci1rt3AI2YnJPdKCzw6gYvHtByF1XPNyMcGu1zzkDn4waDygTNw5JpKho36S MaPkrNMr4rIPY7kWWed4joTCPBhH3Di1veRb+lgJMC96oXroMDjY6afAVeCznAwV wNgEfEHjs7/3LiM/l/jQ9z8rtWEwzl95/9wtQDLyeFwjo5titdVYQJFAlvxB/Tfw bRTchHGEEqKzVO+Yv8YGqlCDKCcRPUUej5bFHzE3NetzIiSqZPyUQrfaadLWKIq1 EZZK03YuSdZoa2w+AQSbJVlWbkeUO4I= -----END CERTIFICATE-----Generated at Wed Oct 8 21:07:34 2025 by rpki-client