$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa File: 510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa (raw, json) Hash identifier: 4B4VX83u9bkGTY+xQQumO5TIZwLmXf4HhpZ+AxP+ZTQ= Subject key identifier: 40:44:C0:7F:13:97:FF:F6:14:C4:36:A0:94:A0:53:D0:51:2D:A1:5A Certificate issuer: /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Certificate serial: 010D0C9F4328584B477C79EABEC9154F8185BF00 Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 393990 IP address blocks: 192.33.167.0/24 maxlen: 24 192.160.255.0/24 maxlen: 24 2620:120:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:79:ea:be:c9:15:4f:81:85:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=2e0d917e-f4e7-4e85-a486-ebf3e0ad0050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:3e:20:89:aa:85:30:43:eb:fd:e3:0e:32: d9:eb:c5:c1:69:bb:47:85:ad:c4:d8:9c:c1:7d:1b: 1b:1c:15:a3:b3:41:ea:68:be:32:08:1d:f3:78:37: d1:c2:7d:79:25:e5:d9:4f:29:d0:f8:fb:0c:3c:63: 68:00:4b:df:0f:ad:27:62:2a:96:eb:04:88:8c:b1: e1:c0:78:b3:e6:e5:c5:44:2b:c3:5f:cc:2a:4c:ec: f0:dd:a3:14:22:65:27:30:22:64:e8:0f:1f:7d:4d: c8:b8:f1:21:40:d8:98:b4:c0:de:c7:a0:dc:5b:7c: 3b:d5:ea:31:1a:53:c1:f8:4f:c3:83:98:56:b8:78: 38:bc:00:ad:72:9e:25:cc:58:d0:44:c7:c7:dd:86: 47:d6:1f:33:0a:d4:7d:8d:c1:33:5c:1b:09:a2:53: b0:71:80:2b:e4:00:61:bc:57:9d:68:3e:1d:17:bb: 23:00:31:4a:d8:20:d9:93:04:89:f3:ab:d2:2a:ad: 6e:86:49:93:da:a6:5e:03:58:e0:65:21:55:19:f9: 75:cb:ac:ea:9d:25:3e:9e:03:15:9f:48:f8:2b:d6: 70:43:c9:80:5b:76:91:15:2f:d7:67:5f:5e:8a:3d: 16:8c:3a:42:1a:ab:ae:41:e7:84:e4:53:22:d0:72: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:C0:7F:13:97:FF:F6:14:C4:36:A0:94:A0:53:D0:51:2D:A1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl X509v3 Authority Key Identifier: keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer sbgp-ipAddrBlock: critical IPv4: 192.33.167.0/24 192.160.255.0/24 IPv6: 2620:120:8000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:89:d2:3e:43:60:fe:13:35:9d:a1:2d:e3:0b:22:ba:98:fa: b3:1a:21:99:f7:1d:92:3c:18:33:d3:e2:03:73:79:8b:eb:26: 7e:2e:8a:7f:14:70:70:0f:11:af:19:ad:18:1e:30:28:d6:ff: 89:b0:c0:bb:7f:39:0b:a0:74:f8:e9:02:1f:dc:33:fe:e9:e5: 5c:57:47:53:96:1e:6e:81:60:fd:d3:dd:9d:75:cb:c3:a1:28: 53:f4:8f:b6:f5:6f:9e:96:a3:53:9c:a9:66:57:75:e8:49:41: 23:50:dc:ef:4c:0b:74:6a:30:49:95:b3:65:0d:ac:0f:c4:6d: 83:0c:2b:44:d3:88:3d:ca:ff:3d:82:fa:1d:93:c8:cf:9a:c5: b1:1c:df:4c:6b:65:58:4d:c5:d2:4d:7b:87:37:6b:5c:31:b3: 1c:a7:32:2b:fe:bf:0b:85:6b:11:59:3f:86:81:0f:4b:ef:c9: b4:33:ec:65:4f:31:44:74:77:a7:59:29:a2:3c:f6:ca:af:55: f6:1d:d7:a4:68:b2:2d:1e:20:4e:91:2f:63:c6:f6:61:12:f8: 3f:ec:cf:7f:4d:7a:c9:b3:eb:e8:6f:29:b4:23:35:b0:1d:66: b6:0f:20:d4:7f:47:65:84:34:87:59:1a:b1:32:16:0b:bf:ba: 92:7d:8c:99 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEtHfHnqvskVT4GFvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmMjFiZmEtOWIwNC00YjUyLThhZjAtZTBiY2M5OTEy OGQzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MmUwZDkxN2UtZjRlNy00ZTg1LWE0ODYtZWJmM2UwYWQwMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt38+IImqhTBD6/3jDjLZ68XBabtHha3E2JzB fRsbHBWjs0HqaL4yCB3zeDfRwn15JeXZTynQ+PsMPGNoAEvfD60nYiqW6wSIjLHh wHiz5uXFRCvDX8wqTOzw3aMUImUnMCJk6A8ffU3IuPEhQNiYtMDex6DcW3w71eox GlPB+E/Dg5hWuHg4vACtcp4lzFjQRMfH3YZH1h8zCtR9jcEzXBsJolOwcYAr5ABh vFedaD4dF7sjADFK2CDZkwSJ86vSKq1uhkmT2qZeA1jgZSFVGfl1y6zqnSU+ngMV n0j4K9ZwQ8mAW3aRFS/XZ19eij0WjDpCGquuQeeE5FMi0HIQQwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFEBEwH8Tl//2FMQ2oJSgU9BRLaFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Yy MWJmYS05YjA0LTRiNTItOGFmMC1lMGJjYzk5MTI4ZDMvNTEwYzVkYWItOTkwNC0z YWE0LWI5NmEtYWNiOGNkYzNkMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNmMjFiZmEtOWIwNC00YjUyLThh ZjAtZTBiY2M5OTEyOGQzL2FjZjIxYmZhLTliMDQtNGI1Mi04YWYwLWUwYmNjOTkx MjhkMy5jcmwwHwYDVR0jBBgwFoAUC5YR7naTygov1+mx2PUBpLDN7gUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2YyMWJmYS05YjA0LTRiNTItOGFmMC1lMGJj Yzk5MTI4ZDMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwCGnAwQA wKD/MA8EAgACMAkDBwQmIAEggAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb4nSPkNg/hM1naEt4wsiupj6 sxohmfcdkjwYM9PiA3N5i+smfi6KfxRwcA8RrxmtGB4wKNb/ibDAu385C6B0+OkC H9wz/unlXFdHU5YeboFg/dPdnXXLw6EoU/SPtvVvnpajU5ypZld16ElBI1Dc70wL dGowSZWzZQ2sD8RtgwwrRNOIPcr/PYL6HZPIz5rFsRzfTGtlWE3F0k17hzdrXDGz HKcyK/6/C4VrEVk/hoEPS+/JtDPsZU8xRHR3p1kpojz2yq9V9h3XpGiyLR4gTpEv Y8b2YRL4P+zPf016ybPr6G8ptCM1sB1mtg8g1H9HZYQ0h1kasTIWC7+6kn2MmQ== -----END CERTIFICATE-----Generated at Sun Nov 2 00:15:28 2025 by rpki-client