$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa File: fd86afa8-57f3-379b-a855-4d084ac157bd.roa (raw, json) Hash identifier: BpHEecUWN6TDvmj2XU7ylPkF0nJX4KXpGkt3hKnT9Ik= Subject key identifier: E2:44:46:CE:79:D3:D8:7D:21:38:15:F0:CC:2E:90:16:57:F9:AA:14 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B0B76A0DCB647218A204E1E0C Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 27321 IP address blocks: 192.158.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a0:dc:b6:47:21:8a:20:4e:1e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=128465c7-45a4-43ff-b390-87c4bac6ad1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:f2:f7:2b:18:47:66:b2:73:38:40:52:e5: 90:39:6b:6d:f2:f1:7e:89:21:90:65:4d:d3:d8:48: b3:58:e0:1d:f9:56:75:07:c6:43:8d:35:bc:f6:9a: 9a:69:60:dd:b3:e7:13:ab:0d:ba:e9:b6:a6:b2:61: c5:77:a7:83:36:40:b6:be:41:cd:bc:0f:dc:7f:b3: bd:66:3a:10:a0:9b:42:f8:5c:5d:f7:96:7a:a4:3a: 16:39:ad:c4:5d:82:49:fb:fc:3f:e6:dd:10:53:73: de:cc:3c:b1:0b:1f:e1:d0:20:ac:e6:ce:82:82:60: 39:0d:92:a8:36:53:81:3e:72:8d:5c:95:9e:3a:c6: c2:61:14:71:35:2b:b6:cb:30:bd:6c:4c:09:db:dc: 9f:a9:7b:7e:35:20:bc:0d:84:66:7a:43:0a:49:b8: 21:05:03:28:cf:1c:b0:25:b0:54:88:9d:e1:7e:69: 6e:9f:c4:1b:49:e7:a8:11:58:b1:29:28:8d:74:94: d0:56:06:ab:33:11:9a:dc:c2:76:0b:4b:12:8d:6a: 1b:51:f4:84:35:5b:08:0b:df:69:33:3c:e6:f2:d2: 8b:53:b4:f5:e0:07:d4:9e:07:dd:99:75:87:c6:6a: 12:d4:e9:eb:bc:0f:d1:94:62:b7:e4:78:ad:91:8a: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:46:CE:79:D3:D8:7D:21:38:15:F0:CC:2E:90:16:57:F9:AA:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.158.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9a:1b:c3:0f:d2:e9:5e:f4:97:67:13:fc:62:74:72:c5:9d: d7:6e:66:95:2f:ed:ab:6a:d6:49:45:fa:95:44:da:f5:5a:40: ad:d6:71:10:05:d5:09:6c:99:c6:90:92:60:44:17:96:75:e0: 14:77:f5:7d:85:2d:e4:e2:02:4b:59:88:13:89:19:e7:db:b2: 0b:b6:23:c3:50:76:16:fa:91:e4:f5:d4:75:54:d1:6c:6f:25: ba:8a:c9:9b:72:2a:55:db:2a:0f:ca:2f:7e:9b:70:1a:8f:b8: 20:d1:a0:14:c9:e2:8b:bc:1b:f3:00:c1:fb:d4:04:4c:42:f2: 9c:8a:a6:fd:a7:7f:d9:04:2e:3a:08:a7:fd:d9:fb:66:e4:6f: e4:8a:37:e3:04:52:ad:dc:bd:23:96:b6:74:00:d6:36:24:2d: 74:98:0a:8c:ee:40:65:b0:39:15:96:db:d2:f2:1e:b2:56:dc: 81:aa:57:7d:c7:4c:fc:44:6e:20:17:1e:ab:d7:ab:c1:4b:e1: 32:af:cd:50:69:49:1d:cd:79:c8:d9:81:9e:f6:f8:de:a1:9e: be:6d:57:27:69:3a:ff:5b:0b:09:ec:5f:8d:7d:5a:a5:15:df: 11:3e:58:84:2a:09:62:05:87:de:3c:fa:c0:d5:34:53:92:f3: f5:4c:a5:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqDctkchiiBOHgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTI4NDY1YzctNDVhNC00M2ZmLWIzOTAtODdjNGJhYzZhZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoXy9ysYR2ayczhAUuWQOWtt8vF+iSGQZU3T 2EizWOAd+VZ1B8ZDjTW89pqaaWDds+cTqw266bamsmHFd6eDNkC2vkHNvA/cf7O9 ZjoQoJtC+Fxd95Z6pDoWOa3EXYJJ+/w/5t0QU3PezDyxCx/h0CCs5s6CgmA5DZKo NlOBPnKNXJWeOsbCYRRxNSu2yzC9bEwJ29yfqXt+NSC8DYRmekMKSbghBQMozxyw JbBUiJ3hfmlun8QbSeeoEVixKSiNdJTQVgarMxGa3MJ2C0sSjWobUfSENVsIC99p Mzzm8tKLU7T14AfUngfdmXWHxmoS1OnrvA/RlGK35HitkYrG3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJERs5509h9ITgV8MwukBZX+aoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZmQ4NmFmYTgtNTdmMy0z NzliLWE4NTUtNGQwODRhYzE1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiaG8MP0ule9JdnE/xidHLFndduZpUv7atq1klF+pVE2vVaQK3WcRAF 1QlsmcaQkmBEF5Z14BR39X2FLeTiAktZiBOJGefbsgu2I8NQdhb6keT11HVU0Wxv JbqKyZtyKlXbKg/KL36bcBqPuCDRoBTJ4ou8G/MAwfvUBExC8pyKpv2nf9kELjoI p/3Z+2bkb+SKN+MEUq3cvSOWtnQA1jYkLXSYCozuQGWwORWW29LyHrJW3IGqV33H TPxEbiAXHqvXq8FL4TKvzVBpSR3NecjZgZ72+N6hnr5tVydpOv9bCwnsX419WqUV 3xE+WIQqCWIFh948+sDVNFOS8/VMpUc= -----END CERTIFICATE-----Generated at Tue Sep 9 21:41:50 2025 by rpki-client