$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa File: 2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa (raw, json) Hash identifier: RXQNeplSTQQOIbWxK5zv0t/N89UF3Hg3fXy9IiKH6Gk= Subject key identifier: A3:9B:3E:D9:12:0C:74:0C:92:6C:41:1F:11:B7:7C:8D:48:AF:A7:46 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B13D6BB0FC6495A8D033C8700 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 0 IP address blocks: 192.129.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bb:0f:c6:49:5a:8d:03:3c:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=1aa0ed00-4cfc-4b32-8fee-44ea5f7509bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:c9:5f:65:5a:34:c4:93:c2:0a:dc:2e:fb: 66:09:4e:61:d4:41:5b:ca:a6:f8:43:c5:cc:73:57: 9c:df:8f:7d:d7:38:9c:56:1e:d5:f0:79:14:d9:41: 11:a3:d0:9f:43:71:56:4c:59:61:1f:4e:46:ca:22: e2:25:02:fc:22:2b:cd:d1:e9:b2:b5:7c:f9:33:0d: 29:42:a8:c3:b2:31:9e:96:61:51:36:aa:25:f9:ee: a8:e6:76:66:c8:46:d7:be:55:3e:40:47:85:6d:52: 76:3c:4f:a1:d1:1a:ef:73:f1:d8:cb:ac:41:82:31: 26:d6:da:83:1c:83:40:5c:74:fc:6a:64:1b:f0:79: a6:62:17:b6:1f:2c:43:89:60:3d:a5:24:8b:59:97: 85:0b:e2:2e:dd:7d:fe:da:28:ea:e7:70:85:3b:18: b7:c3:fe:2e:10:2d:b3:9a:bf:c4:fc:6c:61:e5:88: 86:a7:a7:bb:17:2b:ed:4f:95:3a:c2:b8:fc:2c:58: a2:f6:14:2c:b2:ab:e8:27:3a:f6:a8:14:f3:a9:1f: 6f:1d:6e:c8:d2:23:6a:b1:2a:e4:c9:3b:1b:e3:4b: da:f1:5c:f1:1d:b0:a3:52:fb:16:96:16:52:08:a6: 61:b5:96:25:d6:8a:d6:36:96:33:09:1f:b8:cc:3c: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:3E:D9:12:0C:74:0C:92:6C:41:1F:11:B7:7C:8D:48:AF:A7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.129.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a7:51:80:e6:1f:36:c0:aa:df:69:cb:21:d7:fb:e7:4d:35: 20:55:9f:2a:0b:dd:81:27:75:6f:da:95:dd:da:7d:00:05:22: 0a:20:76:b1:0a:c9:2d:67:79:39:a2:41:26:fa:0f:9b:34:2e: f9:a3:81:73:3c:27:5f:8d:5b:e9:32:d2:52:e2:cd:a8:3d:3e: 11:f8:ba:19:a6:d6:30:4c:13:3f:40:85:40:2c:54:d7:7f:3d: 82:2b:ac:e4:49:c7:ff:fb:3b:a1:09:94:db:bb:a3:b9:85:8f: 3a:be:02:b0:8c:80:2f:8b:0b:dc:aa:38:27:d6:87:41:86:3a: 48:f0:04:14:d4:72:21:37:ae:33:0a:e9:61:00:46:10:f9:50: d4:a2:01:e1:d4:3d:cb:e7:45:04:e5:74:d5:da:6e:a7:ff:3c: 48:09:9e:2f:2e:b5:f5:c7:6d:a3:a0:49:fb:eb:0c:bf:2d:b9: 7f:c9:40:c7:b4:da:72:c5:7f:99:b5:07:8b:57:de:bf:0a:59: ce:53:b1:7c:5d:b9:5e:26:ef:df:87:aa:8b:44:04:d3:45:75: c9:38:5a:a1:48:75:d5:30:72:93:62:c2:a3:bf:92:2d:8d:0a: 11:5a:80:52:ef:48:a8:82:b3:23:1e:29:8f:45:4a:db:bf:ff: 1c:a3:5c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rsPxklajQM8hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MWFhMGVkMDAtNGNmYy00YjMyLThmZWUtNDRlYTVmNzUwOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ObJX2VaNMSTwgrcLvtmCU5h1EFbyqb4Q8XM c1ec34991zicVh7V8HkU2UERo9CfQ3FWTFlhH05GyiLiJQL8IivN0emytXz5Mw0p QqjDsjGelmFRNqol+e6o5nZmyEbXvlU+QEeFbVJ2PE+h0Rrvc/HYy6xBgjEm1tqD HINAXHT8amQb8HmmYhe2HyxDiWA9pSSLWZeFC+Iu3X3+2ijq53CFOxi3w/4uEC2z mr/E/Gxh5YiGp6e7FyvtT5U6wrj8LFii9hQssqvoJzr2qBTzqR9vHW7I0iNqsSrk yTsb40va8VzxHbCjUvsWlhZSCKZhtZYl1orWNpYzCR+4zDwYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKObPtkSDHQMkmxBHxG3fI1Ir6dGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMmEwZDFkZmYtMDk3NS0z MWNmLTliY2ItYjBkMDg3NDA5YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+nUYDmHzbAqt9pyyHX++dNNSBVnyoL3YEndW/ald3afQAFIgogdrEK yS1neTmiQSb6D5s0LvmjgXM8J1+NW+ky0lLizag9PhH4uhmm1jBMEz9AhUAsVNd/ PYIrrORJx//7O6EJlNu7o7mFjzq+ArCMgC+LC9yqOCfWh0GGOkjwBBTUciE3rjMK 6WEARhD5UNSiAeHUPcvnRQTldNXabqf/PEgJni8utfXHbaOgSfvrDL8tuX/JQMe0 2nLFf5m1B4tX3r8KWc5TsXxduV4m79+HqotEBNNFdck4WqFIddUwcpNiwqO/ki2N ChFagFLvSKiCsyMeKY9FStu//xyjXMA= -----END CERTIFICATE-----Generated at Fri Oct 24 00:42:03 2025 by rpki-client