$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa File: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (raw, json) Hash identifier: gQKCGZ/pNsXZnwYUmMTge96h/Si/OUH0oJALLKKSlGQ= Subject key identifier: 90:26:D8:C8:E8:6F:E6:66:A9:73:73:36:14:19:1D:3A:FC:C0:51:A4 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584B540C68CF5261C5C755AC6EC0 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 21976 IP address blocks: 192.51.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:68:cf:52:61:c5:c7:55:ac:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c4b07b23-713e-405a-ab3f-e06516446542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:b6:8f:db:21:73:82:72:ce:cf:96:3a:e4: 88:68:f3:2a:dd:64:3d:32:c4:a7:a3:b6:3c:ee:58: c3:94:a0:5a:29:c7:86:2a:01:6e:5e:a4:22:f0:fd: 99:0f:a6:69:5f:63:f2:05:56:a1:17:a3:05:cf:ae: d1:fa:e1:3b:bf:fb:68:0a:d2:c3:24:14:b4:ff:9b: 6a:b8:8d:42:21:95:bf:3e:dc:a4:fd:71:7d:cf:38: d2:3c:0c:cc:0a:40:46:c1:95:84:18:73:be:78:2e: 4e:3d:f1:4e:8d:de:d5:4b:7d:7a:1b:0b:e9:e5:b0: 27:34:aa:df:8f:a2:48:7b:cd:c6:4a:be:a2:40:e2: 1d:a6:a2:85:f4:17:26:ac:f7:f2:c3:9d:65:32:a7: e5:04:1d:2d:b7:18:2d:af:c1:36:06:b6:a0:47:f6: 47:cd:76:8a:7a:1d:5d:be:04:41:b3:b8:b0:f1:3c: 66:e0:2c:ea:33:93:f9:68:0b:67:81:b8:5f:c8:63: f8:7f:ef:04:95:d7:ef:2d:51:e3:98:b4:50:40:9d: b5:43:bf:5a:18:52:79:70:47:78:45:02:86:80:5e: 76:b4:ef:6c:f3:38:a7:7f:26:d9:2a:69:c2:66:c6: d2:eb:8b:5d:bb:72:79:ec:49:1a:b9:90:32:fd:78: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:D8:C8:E8:6F:E6:66:A9:73:73:36:14:19:1D:3A:FC:C0:51:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: 192.51.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d8:72:8a:68:1d:f9:43:19:18:39:82:7d:4f:20:c8:07:a2: 07:30:c3:67:1a:58:32:76:68:0e:4a:f7:96:a0:22:9a:81:75: 16:1d:ad:96:50:47:ae:a7:0c:6e:5c:4e:fa:06:7f:4f:24:04: 97:f6:d5:6b:e7:41:e1:5d:3d:0e:48:7b:f2:17:40:1d:c8:4c: b9:2b:a7:ca:ae:ff:1e:70:24:92:ac:9e:1a:a2:e2:9b:05:3d: f3:d5:8f:7b:07:73:93:af:ba:fd:6a:f6:62:e3:59:ab:47:9a: bd:d1:a6:62:86:fa:7b:a9:61:c3:30:7a:f7:eb:4e:56:d6:e1: e1:c0:72:c1:31:2d:12:d7:64:2d:de:83:0f:86:9f:33:5d:5b: 32:3f:1f:96:07:e6:71:22:5d:55:66:c2:89:0b:30:dd:38:d3: d6:8a:42:f7:fd:27:f3:83:96:c2:35:87:61:a0:35:87:9d:bf: a5:b6:a0:8d:b7:e9:2a:49:ad:09:8f:f5:ad:ab:9c:3f:38:aa: f3:ee:1b:5c:69:bd:5d:92:a5:17:e2:bf:f4:c7:aa:d6:eb:3c: 4f:20:cc:3d:e0:24:a1:bd:0d:00:dc:5e:88:e3:1a:0b:88:5d: 57:03:6a:e7:a0:ce:30:8c:84:76:11:71:1c:14:a2:ed:44:28: 63:b4:43:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGjPUmHFx1WsbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzRiMDdiMjMtNzEzZS00MDVhLWFiM2YtZTA2NTE2NDQ2NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNi2j9shc4Jyzs+WOuSIaPMq3WQ9MsSno7Y8 7ljDlKBaKceGKgFuXqQi8P2ZD6ZpX2PyBVahF6MFz67R+uE7v/toCtLDJBS0/5tq uI1CIZW/Ptyk/XF9zzjSPAzMCkBGwZWEGHO+eC5OPfFOjd7VS316Gwvp5bAnNKrf j6JIe83GSr6iQOIdpqKF9BcmrPfyw51lMqflBB0ttxgtr8E2BragR/ZHzXaKeh1d vgRBs7iw8Txm4CzqM5P5aAtngbhfyGP4f+8EldfvLVHjmLRQQJ21Q79aGFJ5cEd4 RQKGgF52tO9s8zinfybZKmnCZsbS64tdu3J57EkauZAy/XjuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAm2Mjob+ZmqXNzNhQZHTr8wFGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvOWE4ZDk2ODUtNDM5My0z ZjA0LTg5OGItMWIwNzVhNGI2YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/YcopoHflDGRg5gn1PIMgHogcww2caWDJ2aA5K95agIpqBdRYdrZZQ R66nDG5cTvoGf08kBJf21WvnQeFdPQ5Ie/IXQB3ITLkrp8qu/x5wJJKsnhqi4psF PfPVj3sHc5Ovuv1q9mLjWatHmr3RpmKG+nupYcMwevfrTlbW4eHAcsExLRLXZC3e gw+GnzNdWzI/H5YH5nEiXVVmwokLMN0409aKQvf9J/ODlsI1h2GgNYedv6W2oI23 6SpJrQmP9a2rnD84qvPuG1xpvV2SpRfiv/THqtbrPE8gzD3gJKG9DQDcXojjGguI XVcDauegzjCMhHYRcRwUou1EKGO0Q5U= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:45 2025 by rpki-client