$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa File: b1a52e16-9db5-3a34-9bb1-3649b401126a.roa (raw, json) Hash identifier: PJx9blf2AFJ9uV3Hvst2sEH6zDDvAalSduo+TPhki7Y= Subject key identifier: E1:C6:97:17:85:51:62:27:8B:7A:D5:44:F1:65:27:CB:5C:17:01:AB Certificate issuer: /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288 Certificate serial: 010D0C9F4328584B0B76B92B85685AF094D29500 Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 199563 IP address blocks: 132.190.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b9:2b:85:68:5a:f0:94:d2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f7780f64-d784-4e20-a8ac-c3474686299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:ed:24:f3:30:8b:58:b8:8d:14:9c:1b:6f: 4c:2b:2b:5b:7e:25:5b:8d:ef:49:cd:06:33:c7:11: 2b:74:fe:80:11:54:de:9c:4f:33:4b:0d:c5:93:33: a2:b5:aa:55:a9:e1:6a:e1:88:b2:64:f5:37:f1:1c: 7b:9d:df:8c:37:91:66:71:76:98:41:ef:9b:61:0d: 6b:16:b9:22:a0:c2:a8:17:80:dd:0f:79:46:35:8b: 57:12:c6:ab:6d:10:a3:3a:c7:d7:ae:17:3e:59:81: 4f:29:8d:8c:e0:4d:a3:60:08:54:37:d2:47:c6:ff: 93:52:82:69:97:47:00:e8:e9:fa:3c:da:55:34:e4: fb:d2:29:47:a9:41:00:e6:bb:7d:1a:f2:4b:d0:d6: 2a:00:07:3e:6e:80:b7:85:fe:84:3e:61:a3:86:14: 05:da:cc:d2:e5:ae:4b:2e:54:83:0d:d4:34:47:87: 84:1e:da:3f:1b:2a:85:b3:b8:45:6b:65:59:cb:65: 13:64:a5:c0:91:e3:d2:6c:44:7a:a0:24:a7:6d:fa: 6a:aa:e2:01:c3:7e:34:61:3b:ea:23:5b:29:09:5f: 1a:0c:e9:50:29:00:a5:a3:31:b7:75:67:5a:55:c7: 9c:49:84:8f:05:80:7e:35:5c:ff:5e:f2:9a:0b:39: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:97:17:85:51:62:27:8B:7A:D5:44:F1:65:27:CB:5C:17:01:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl X509v3 Authority Key Identifier: keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer sbgp-ipAddrBlock: critical IPv4: 132.190.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:10:a1:84:89:80:f2:4d:c2:5a:58:18:4d:fa:05:c6:6e:d3: df:f8:0c:06:8d:64:7a:09:c1:07:06:0a:2f:ea:3a:6b:d1:39: 6b:1a:d8:43:71:f2:ea:b7:5f:7b:0d:ad:31:48:82:26:7a:85: 6d:5f:56:32:aa:a9:e2:ad:6b:b8:68:7a:1f:75:cd:31:c7:7f: 64:53:65:43:4d:b3:49:66:a1:47:a9:6e:0f:9d:5b:b2:52:a2: ab:ef:84:80:52:55:6e:da:58:be:ca:05:36:29:39:65:07:aa: c2:73:7c:2d:5c:d2:f8:c9:a6:eb:96:82:69:bd:6a:64:80:1e: d9:8b:23:b4:f3:bc:65:38:83:d9:23:e2:73:d7:7b:91:b1:22: 67:9e:cf:b7:ed:c1:43:d6:ea:2b:20:d5:0c:97:dd:a5:32:f9: 89:2f:20:7c:3f:c2:d2:1d:72:91:0d:d9:c5:a1:81:63:12:4b: f9:08:05:e1:4f:f4:9e:d6:09:9b:6c:cb:dc:b8:4e:fa:e5:ec: 5b:85:2f:42:d1:0d:3b:6e:bf:18:09:77:d6:bc:c3:cc:c6:6b: 0e:cf:ff:3a:f8:7f:03:ce:e5:ff:7e:22:85:2f:13:28:84:6d: 68:73:ce:98:ba:e8:61:14:e4:65:f5:04:4a:e9:07:66:28:33: 5c:7f:e3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrkrhWha8JTSlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzN2IwYzItMDNmNy00ZDRkLTkwNDgtYTcwNDFkZjhj Mjg4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Zjc3ODBmNjQtZDc4NC00ZTIwLWE4YWMtYzM0NzQ2ODYyOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxjtJPMwi1i4jRScG29MKytbfiVbje9JzQYz xxErdP6AEVTenE8zSw3FkzOitapVqeFq4YiyZPU38Rx7nd+MN5FmcXaYQe+bYQ1r FrkioMKoF4DdD3lGNYtXEsarbRCjOsfXrhc+WYFPKY2M4E2jYAhUN9JHxv+TUoJp l0cA6On6PNpVNOT70ilHqUEA5rt9GvJL0NYqAAc+boC3hf6EPmGjhhQF2szS5a5L LlSDDdQ0R4eEHto/GyqFs7hFa2VZy2UTZKXAkePSbER6oCSnbfpqquIBw340YTvq I1spCV8aDOlQKQClozG3dWdaVcecSYSPBYB+NVz/XvKaCzniIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHGlxeFUWIni3rVRPFlJ8tcFwGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYzM3 YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRmOGMyODgvYjFhNTJlMTYtOWRiNS0z YTM0LTliYjEtMzY0OWI0MDExMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmMzN2IwYzItMDNmNy00ZDRkLTkw NDgtYTcwNDFkZjhjMjg4L2ZjMzdiMGMyLTAzZjctNGQ0ZC05MDQ4LWE3MDQxZGY4 YzI4OC5jcmwwHwYDVR0jBBgwFoAUAydCR6DwqWhl6XIMJ3HOyGOyd4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0 MWRmOGMyODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhL4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8QoYSJgPJNwlpYGE36BcZu09/4DAaNZHoJwQcGCi/qOmvROWsa2ENx 8uq3X3sNrTFIgiZ6hW1fVjKqqeKta7hoeh91zTHHf2RTZUNNs0lmoUepbg+dW7JS oqvvhIBSVW7aWL7KBTYpOWUHqsJzfC1c0vjJpuuWgmm9amSAHtmLI7TzvGU4g9kj 4nPXe5GxImeez7ftwUPW6isg1QyX3aUy+YkvIHw/wtIdcpEN2cWhgWMSS/kIBeFP 9J7WCZtsy9y4Tvrl7FuFL0LRDTtuvxgJd9a8w8zGaw7P/zr4fwPO5f9+IoUvEyiE bWhzzpi66GEU5GX1BErpB2YoM1x/4ys= -----END CERTIFICATE-----Generated at Fri Sep 12 04:12:49 2025 by rpki-client