$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa File: a3cdaf22-fa27-38fe-955b-f9f075407d40.roa (raw, json) Hash identifier: 67HvE2j/qoAbxCFVQfdRIxKOt2fAQmVatJ+tmWEKrmQ= Subject key identifier: 20:08:AE:35:33:41:ED:8C:96:17:1F:7F:60:9D:4A:25:19:F5:AC:3F Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584B4E770C0BD2400A262B98C460 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 270169 IP address blocks: 204.199.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0c:0b:d2:40:0a:26:2b:98:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=979f530f-da29-4c72-b544-57985d688bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:ac:d3:86:be:3e:ad:fe:e1:04:3c:29:01: 4d:a4:3e:81:1c:d2:0a:3a:8f:bb:ce:53:79:98:a1: 33:88:64:6e:45:76:ce:8b:8c:89:28:47:4b:a9:23: 0f:c0:a9:f4:ed:c9:49:2f:44:78:d8:64:6e:d5:56: 99:19:f5:4e:bc:0d:9b:4c:e8:9b:4e:73:27:60:90: f6:b0:06:c8:cf:99:77:ad:cb:5e:01:8c:38:99:c1: d9:e6:ca:45:f6:87:43:15:83:bc:7b:d0:b5:b3:c0: 57:db:85:66:d9:48:08:fe:91:03:e9:8b:75:f0:19: 79:24:0a:3d:0a:b4:53:3b:7b:ae:4d:1d:c4:12:98: 71:25:45:17:6a:dc:4f:b8:9c:8a:e6:eb:8b:a4:c2: 05:41:c5:72:30:88:12:30:15:49:10:cf:d3:a0:6a: 21:4b:b3:9b:24:45:4d:8c:a6:d9:0e:ee:0a:b0:37: 5d:b3:d6:93:d8:a9:8f:70:d4:a2:eb:83:cb:71:08: af:b7:ec:79:96:44:4f:91:05:5a:45:6c:1b:2f:c8: cb:bc:f8:38:e3:5f:84:9c:69:f0:29:43:2a:6d:8e: 4d:e0:db:5b:11:9d:06:73:fe:1f:8e:39:f6:7f:d5: 07:a6:f1:64:31:e1:9d:26:99:98:22:99:9a:c7:7e: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:08:AE:35:33:41:ED:8C:96:17:1F:7F:60:9D:4A:25:19:F5:AC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ac:55:d2:ba:a1:90:4d:cd:da:5b:6b:54:bb:de:61:f2:7a: 09:0f:b5:bc:82:67:ba:f2:e2:78:77:79:c4:ee:1c:0a:11:df: 6d:63:d7:9b:e3:4e:e6:45:5b:c2:46:b8:ad:a4:fd:42:4e:25: 0e:74:25:08:64:9c:59:98:d1:b3:6a:1c:7b:4b:44:f9:68:1d: 4f:d8:e3:55:7f:08:0a:67:14:11:6c:94:63:96:69:62:07:5a: bb:fb:dd:7f:c7:15:00:f0:96:7c:31:b7:55:10:16:5d:bd:48: df:1a:05:af:68:66:7e:f0:60:46:a9:e0:50:31:9d:72:3c:57: d2:9d:12:f5:20:f1:51:55:e6:a2:a3:1d:7d:17:97:71:e1:18: 44:88:35:ed:a6:72:3b:d0:5f:b2:c1:0d:ce:34:db:c2:1a:6f: 1f:d5:63:6c:31:c3:35:82:6b:41:b4:a2:e9:d3:8a:8d:38:d4: b8:74:57:0c:98:64:06:b4:5f:54:f8:69:4f:a0:95:f7:0d:9c: 9b:31:19:93:3e:fc:19:0f:ac:5d:ba:83:ec:b8:20:e7:c8:71: 0c:78:86:f9:f6:dc:43:97:4d:a0:47:71:8a:49:c6:cc:9f:9b: e0:83:19:8c:64:fe:8e:57:93:2b:13:25:48:db:57:dc:ba:63: fe:96:fa:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwwL0kAKJiuYxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OTc5ZjUzMGYtZGEyOS00YzcyLWI1NDQtNTc5ODVkNjg4YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiis04a+Pq3+4QQ8KQFNpD6BHNIKOo+7zlN5 mKEziGRuRXbOi4yJKEdLqSMPwKn07clJL0R42GRu1VaZGfVOvA2bTOibTnMnYJD2 sAbIz5l3rcteAYw4mcHZ5spF9odDFYO8e9C1s8BX24Vm2UgI/pED6Yt18Bl5JAo9 CrRTO3uuTR3EEphxJUUXatxPuJyK5uuLpMIFQcVyMIgSMBVJEM/ToGohS7ObJEVN jKbZDu4KsDdds9aT2KmPcNSi64PLcQivt+x5lkRPkQVaRWwbL8jLvPg441+EnGnw KUMqbY5N4NtbEZ0Gc/4fjjn2f9UHpvFkMeGdJpmYIpmax373aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAIrjUzQe2Mlhcff2CdSiUZ9aw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvYTNjZGFmMjItZmEyNy0z OGZlLTk1NWItZjlmMDc1NDA3ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFysVdK6oZBNzdpba1S73mHyegkPtbyCZ7ry4nh3ecTuHAoR321j15vj TuZFW8JGuK2k/UJOJQ50JQhknFmY0bNqHHtLRPloHU/Y41V/CApnFBFslGOWaWIH Wrv73X/HFQDwlnwxt1UQFl29SN8aBa9oZn7wYEap4FAxnXI8V9KdEvUg8VFV5qKj HX0Xl3HhGESINe2mcjvQX7LBDc4028Iabx/VY2wxwzWCa0G0ounTio041Lh0VwyY ZAa0X1T4aU+glfcNnJsxGZM+/BkPrF26g+y4IOfIcQx4hvn23EOXTaBHcYpJxsyf m+CDGYxk/o5XkysTJUjbV9y6Y/6W+iM= -----END CERTIFICATE-----Generated at Tue Oct 28 02:59:52 2025 by rpki-client