$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa File: 4f49763f-ed78-345f-8b50-e6621c015ab1.roa (raw, json) Hash identifier: /P4ZFeEHQuz9dANrRZrimStD2whctqBYpXQIJxOAadA= Subject key identifier: 66:C6:FF:57:85:4C:E6:8D:23:A7:C7:42:41:22:E2:65:2F:8C:9B:B2 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B1D9C2079C97DD8D242636840 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 3477 IP address blocks: 192.58.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:20:79:c9:7d:d8:d2:42:63:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=f9d358f7-e652-435b-8955-76864a8dab43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:da:45:df:66:b6:4e:2e:0a:5f:14:c0:cb: 1b:ed:92:ca:e5:50:af:ce:70:bc:97:ac:46:ac:43: 21:40:09:fa:34:9b:fd:e1:a3:a8:d6:e6:95:ef:98: b0:26:9b:4f:81:2d:57:8e:35:8b:e8:0c:1b:10:2d: 55:32:f4:9d:5e:de:4c:d9:28:9b:1f:b7:e7:79:71: 3c:c6:19:d1:49:89:d8:76:3f:d8:ab:06:9f:ee:59: 53:5b:46:87:24:33:e7:87:61:5d:6e:25:bf:13:86: 01:b5:ab:5f:cd:21:8f:df:b4:33:16:c4:65:bd:19: 0f:99:79:6a:32:f1:e1:15:12:95:d7:e5:a0:e9:7e: 2f:33:88:d4:49:73:28:5b:e9:01:fb:e6:1f:d7:da: 2a:93:0e:ce:38:85:cf:4b:88:d3:3d:0e:ab:86:b5: 50:d9:39:22:87:65:27:a3:93:98:48:bb:2d:0e:2d: e9:a1:90:44:b7:ae:16:a6:fe:34:c9:7d:04:e8:5e: 90:5c:50:fc:eb:96:9a:76:82:d5:b9:b8:8b:24:b7: 29:bf:dd:6f:f3:69:c5:7f:bf:ca:ba:37:cd:d7:aa: 18:77:50:6f:f2:4e:d9:81:76:86:07:b6:22:30:73: 22:7f:fb:c6:b3:1b:80:89:59:51:02:cb:ba:d8:51: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:FF:57:85:4C:E6:8D:23:A7:C7:42:41:22:E2:65:2F:8C:9B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c9:f5:89:0d:9b:01:f3:e2:b0:64:dd:9f:ea:9f:e0:bf:0a: f1:0c:3e:af:45:68:35:aa:5a:f1:b6:60:a3:04:b3:ca:71:ae: db:91:0d:dc:c2:b1:ce:75:a1:97:f8:34:a7:63:26:03:cc:8f: 06:82:5b:ef:e2:a7:a8:15:43:44:2d:dd:e9:8c:92:cb:8b:9c: ac:9c:b7:fb:8a:37:cb:27:dc:dc:33:bb:1f:82:ff:23:19:4c: 41:41:70:41:f2:f3:d6:fb:4b:1b:d4:0c:3e:9b:69:df:26:26: 4b:a6:df:f7:c3:89:74:4f:d3:8b:36:1d:d3:49:39:27:72:75: 65:5c:c0:7f:ba:9f:f8:5a:cf:fc:d4:d6:03:25:57:b1:0c:96: 59:94:13:78:ec:a0:6f:23:b2:22:df:c0:eb:07:03:70:2a:20: 0b:fd:e4:c3:3a:f6:20:f4:b1:25:02:80:62:d5:97:fa:7f:32: 28:9c:33:7b:11:59:fe:ce:66:bf:05:5c:b4:9f:9b:3b:26:03: 45:0b:1e:e7:fd:c6:82:47:ae:69:3f:e3:35:01:66:22:cc:9e: f7:37:db:c9:6e:02:26:bb:34:c1:95:2c:df:19:21:f1:a8:03: b6:1a:63:7d:ba:95:71:56:5d:85:c1:52:0b:89:d3:62:91:4e: 9a:d1:60:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCB5yX3Y0kJjaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjlkMzU4ZjctZTY1Mi00MzViLTg5NTUtNzY4NjRhOGRhYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO3aRd9mtk4uCl8UwMsb7ZLK5VCvznC8l6xG rEMhQAn6NJv94aOo1uaV75iwJptPgS1XjjWL6AwbEC1VMvSdXt5M2SibH7fneXE8 xhnRSYnYdj/Yqwaf7llTW0aHJDPnh2FdbiW/E4YBtatfzSGP37QzFsRlvRkPmXlq MvHhFRKV1+Wg6X4vM4jUSXMoW+kB++Yf19oqkw7OOIXPS4jTPQ6rhrVQ2Tkih2Un o5OYSLstDi3poZBEt64Wpv40yX0E6F6QXFD865aadoLVubiLJLcpv91v82nFf7/K ujfN16oYd1Bv8k7ZgXaGB7YiMHMif/vGsxuAiVlRAsu62FH8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbG/1eFTOaNI6fHQkEi4mUvjJuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNGY0OTc2M2YtZWQ3OC0z NDVmLThiNTAtZTY2MjFjMDE1YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInJ9YkNmwHz4rBk3Z/qn+C/CvEMPq9FaDWqWvG2YKMEs8pxrtuRDdzC sc51oZf4NKdjJgPMjwaCW+/ip6gVQ0Qt3emMksuLnKyct/uKN8sn3Nwzux+C/yMZ TEFBcEHy89b7SxvUDD6bad8mJkum3/fDiXRP04s2HdNJOSdydWVcwH+6n/haz/zU 1gMlV7EMllmUE3jsoG8jsiLfwOsHA3AqIAv95MM69iD0sSUCgGLVl/p/MiicM3sR Wf7OZr8FXLSfmzsmA0ULHuf9xoJHrmk/4zUBZiLMnvc328luAia7NMGVLN8ZIfGo A7YaY326lXFWXYXBUguJ02KRTprRYME= -----END CERTIFICATE-----Generated at Fri Oct 24 00:32:52 2025 by rpki-client