$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: KZ23jit9WTeCvWs/ep9ASD7BTysZ0XrtyPuQcifV+vQ= Subject key identifier: 37:04:67:3E:02:EF:F3:8C:AE:C4:9F:2F:52:B5:AF:14:E0:6B:4F:A5 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F4328584B328C35C1B946711E5A6A8EC8 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:35:c1:b9:46:71:1e:5a:6a:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=8f462651-aa4f-4abf-8ac9-c3d5a8489b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:b6:d2:95:37:7e:83:e1:6a:9f:5a:03:65: 9d:de:ef:a0:4c:b3:86:7c:e6:38:5b:43:97:9a:09: 1f:87:96:51:00:f1:09:d8:bb:4c:3e:0a:c2:4b:43: 6b:03:f9:70:11:89:70:e3:eb:0f:94:07:19:dc:3f: ce:e9:3d:d7:e0:37:84:af:55:7c:53:f6:95:e4:4d: 3c:1f:fe:36:67:16:0c:b0:e2:60:74:9f:ca:e2:71: 91:48:d9:3a:94:72:cc:04:dd:73:dc:d1:a8:cd:34: 9a:35:a7:8d:14:10:11:71:c7:00:fe:2d:5e:d4:38: 94:1a:f4:57:ad:cc:48:ec:6d:4a:dd:ae:42:76:35: cc:49:89:6d:38:2f:b8:f0:68:cc:fd:23:d1:46:b1: da:21:d7:04:fc:a2:7b:69:d5:20:ff:81:f1:4c:5e: 66:92:c6:9b:e7:71:be:bb:2e:8b:35:43:07:06:54: c4:ad:60:39:0c:dd:2f:4c:f4:2f:d3:48:5e:81:24: 54:b8:da:3c:ee:d0:42:d3:8e:74:ba:7c:bd:13:27: 53:fb:be:a0:f5:05:b9:f6:16:f3:e1:38:0d:83:1a: b5:9f:4a:7e:73:34:ba:c1:bd:ad:71:17:ee:16:57: d2:0f:e2:99:93:6b:8f:5c:c5:66:1c:86:43:64:1e: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:67:3E:02:EF:F3:8C:AE:C4:9F:2F:52:B5:AF:14:E0:6B:4F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7b:31:80:5c:7e:6d:5a:f3:6f:45:11:2d:58:35:9a:7e:22: 02:df:ec:f7:21:bd:d8:c7:fe:11:c3:a9:89:e3:03:e5:39:6d: b4:dd:77:c1:bb:a2:e3:70:17:31:cd:51:cf:f9:c1:fc:08:9e: 77:f7:60:03:d7:14:d9:f1:fd:38:8e:93:84:27:ab:06:1a:7d: e5:ef:62:90:95:8e:48:32:28:b2:9f:ec:ef:53:ef:cd:83:24: aa:e9:6a:ee:fc:6c:46:63:cd:9c:61:f3:eb:9d:e5:d7:28:6d: 79:ff:4d:a5:d7:a7:72:cf:6c:7d:f0:f1:18:21:67:a6:76:ea: f0:ea:16:6a:50:4a:fd:ed:64:63:f7:a3:69:e5:a3:22:ab:89: 62:f9:77:fc:09:77:a6:9b:52:a9:f1:6a:9b:8d:9b:4a:63:c4: 3a:c0:47:74:94:a3:07:38:4f:6b:24:58:e2:63:98:dd:f7:d3: 9c:0b:a2:7a:65:5a:b8:17:12:e6:d8:65:4c:23:12:b8:cc:0a: d7:6c:d0:44:ed:bc:ab:ed:e6:09:56:b4:47:78:07:c6:fc:94: 9f:98:12:37:e9:44:f0:e7:3e:2d:00:99:2c:d0:3c:82:3c:80: 74:5c:9a:bb:9d:b9:37:47:17:fd:36:09:ff:0e:3a:db:70:f7: 21:b4:45:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsyjDXBuUZxHlpqjsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk OGY0NjI2NTEtYWE0Zi00YWJmLThhYzktYzNkNWE4NDg5YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim620pU3foPhap9aA2Wd3u+gTLOGfOY4W0OX mgkfh5ZRAPEJ2LtMPgrCS0NrA/lwEYlw4+sPlAcZ3D/O6T3X4DeEr1V8U/aV5E08 H/42ZxYMsOJgdJ/K4nGRSNk6lHLMBN1z3NGozTSaNaeNFBARcccA/i1e1DiUGvRX rcxI7G1K3a5CdjXMSYltOC+48GjM/SPRRrHaIdcE/KJ7adUg/4HxTF5mksab53G+ uy6LNUMHBlTErWA5DN0vTPQv00hegSRUuNo87tBC0450uny9EydT+76g9QW59hbz 4TgNgxq1n0p+czS6wb2tcRfuFlfSD+KZk2uPXMVmHIZDZB5ExwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDcEZz4C7/OMrsSfL1K1rxTga0+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH57MYBcfm1a829FES1YNZp+IgLf7PchvdjH/hHDqYnjA+U5 bbTdd8G7ouNwFzHNUc/5wfwInnf3YAPXFNnx/TiOk4QnqwYafeXvYpCVjkgyKLKf 7O9T782DJKrpau78bEZjzZxh8+ud5dcobXn/TaXXp3LPbH3w8RghZ6Z26vDqFmpQ Sv3tZGP3o2nloyKriWL5d/wJd6abUqnxapuNm0pjxDrAR3SUowc4T2skWOJjmN33 05wLonplWrgXEubYZUwjErjMCtds0ETtvKvt5glWtEd4B8b8lJ+YEjfpRPDnPi0A mSzQPII8gHRcmruduTdHF/02Cf8OOttw9yG0RQ8= -----END CERTIFICATE-----Generated at Fri Oct 24 11:11:12 2025 by rpki-client