$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa File: a30c69af-4a9f-3c4c-8d54-b9102c913071.roa (raw, json) Hash identifier: LTSKUF/witWJV7d83Ogmksu2jAr+XyH6NNveZvT5dx4= Subject key identifier: A5:3D:43:2B:C3:DD:76:3B:0D:F8:DF:E3:94:CC:62:22:AD:30:70:00 Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Certificate serial: 010D0C9F4328584B0A116CBF7F3517E461D3CD80 Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 21693 IP address blocks: 192.92.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6c:bf:7f:35:17:e4:61:d3:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=c78ab77a-3968-42b3-8184-6d12f381530c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:94:e7:51:a4:4a:84:e3:c9:b2:c2:4d:b1:bc: 28:7e:12:37:2e:33:69:4c:de:59:9a:c7:63:2e:26: 08:a7:3c:08:c9:20:3d:ae:14:8e:ac:7b:e2:ed:24: 9a:b9:cd:60:a9:6b:c4:c6:a6:9b:2c:50:8a:5b:3f: 5f:03:b2:e2:24:0a:14:36:f2:f6:f1:b3:50:8f:69: 66:cc:7e:d4:59:df:a8:1f:e8:b2:d7:55:f2:74:49: 84:0e:99:43:db:fe:c6:39:dd:eb:58:ed:13:0a:93: 1a:e6:f3:75:f8:a3:1a:16:dd:27:a1:43:65:84:93: c4:55:b5:86:fb:33:2f:00:6c:52:85:1c:ec:b6:63: e7:19:ed:82:17:b9:66:75:9e:03:a3:8e:2d:96:34: 6f:f1:31:86:e1:aa:56:f9:19:90:ec:78:89:fd:86: 33:71:8d:74:38:9e:2e:86:03:99:65:4a:b7:4f:3c: d1:fe:a4:12:65:c1:c3:18:4e:2d:10:46:44:94:22: df:c3:e9:74:ff:ed:47:10:75:7a:0b:5b:6c:31:10: 0c:8a:a8:12:a6:01:7a:66:36:48:3a:1a:c1:67:f4: 9f:2b:1e:07:c4:1c:d2:4c:e3:bc:19:75:95:d8:bc: 21:ff:00:95:0d:2a:2a:74:f8:c7:92:5c:33:cd:b1: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3D:43:2B:C3:DD:76:3B:0D:F8:DF:E3:94:CC:62:22:AD:30:70:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl X509v3 Authority Key Identifier: keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer sbgp-ipAddrBlock: critical IPv4: 192.92.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5b:c0:8b:d7:ab:31:44:00:cf:44:34:55:90:76:29:d7:30: c6:d3:1e:d3:03:86:6d:be:84:27:2f:83:80:50:86:12:f0:30: cd:19:78:b9:69:0b:41:6e:26:db:f3:dc:9e:b0:25:c0:fc:6d: 12:77:3c:55:97:6b:d3:c8:ea:e8:74:f7:9e:aa:c2:65:0b:39: e0:98:b4:d2:78:1c:f1:ac:c7:6d:ec:ff:1a:a1:eb:72:01:9e: 88:ad:68:35:b8:1a:b2:28:ef:ea:4e:24:df:67:dd:f6:2b:93: ad:08:19:ed:dc:9f:cf:a3:c2:ab:9f:5d:f6:f7:a3:73:3e:6a: 92:70:ff:ca:dd:c4:4d:9e:f7:95:92:78:03:a8:36:02:e9:88: 92:73:49:30:ee:75:01:9f:17:09:37:82:99:8a:1a:35:3d:9b: 41:2d:79:9a:0e:85:cb:3f:70:c8:90:9f:0a:04:a9:81:45:22: a5:bd:1e:6b:3e:46:06:c4:a4:54:a1:e8:d7:82:45:27:99:ed: 66:e6:1d:2c:da:f1:c4:f1:52:f2:84:c4:f9:23:7a:01:44:0b: 7c:1a:2f:b6:c8:00:81:f9:4a:8c:ce:dd:2a:6a:a1:f6:2e:64: 65:e0:34:2b:36:59:49:15:5f:a4:c9:2e:5a:62:eb:16:c1:9c: 9f:5e:22:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWy/fzUX5GHTzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVk MTE5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk Yzc4YWI3N2EtMzk2OC00MmIzLTgxODQtNmQxMmYzODE1MzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55TnUaRKhOPJssJNsbwofhI3LjNpTN5Zmsdj LiYIpzwIySA9rhSOrHvi7SSauc1gqWvExqabLFCKWz9fA7LiJAoUNvL28bNQj2lm zH7UWd+oH+iy11XydEmEDplD2/7GOd3rWO0TCpMa5vN1+KMaFt0noUNlhJPEVbWG +zMvAGxShRzstmPnGe2CF7lmdZ4Do44tljRv8TGG4apW+RmQ7HiJ/YYzcY10OJ4u hgOZZUq3TzzR/qQSZcHDGE4tEEZElCLfw+l0/+1HEHV6C1tsMRAMiqgSpgF6ZjZI OhrBZ/SfKx4HxBzSTOO8GXWV2Lwh/wCVDSoqdPjHklwzzbEhkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU9QyvD3XY7Dfjf45TMYiKtMHAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMjll MzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvYTMwYzY5YWYtNGE5Zi0z YzRjLThkNTQtYjkxMDJjOTEzMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTI5ZTM2NzQtYWNjNi00ODU4LWIw ZjEtN2EyZGFhYWVkMTE5L2EyOWUzNjc0LWFjYzYtNDg1OC1iMGYxLTdhMmRhYWFl ZDExOS5jcmwwHwYDVR0jBBgwFoAUml1tM1p2OnrYfTyiJ/n5DI1sO48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJk YWFhZWQxMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFzZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNbwIvXqzFEAM9ENFWQdinXMMbTHtMDhm2+hCcvg4BQhhLwMM0ZeLlp C0FuJtvz3J6wJcD8bRJ3PFWXa9PI6uh0956qwmULOeCYtNJ4HPGsx23s/xqh63IB noitaDW4GrIo7+pOJN9n3fYrk60IGe3cn8+jwqufXfb3o3M+apJw/8rdxE2e95WS eAOoNgLpiJJzSTDudQGfFwk3gpmKGjU9m0EteZoOhcs/cMiQnwoEqYFFIqW9Hms+ RgbEpFSh6NeCRSeZ7WbmHSza8cTxUvKExPkjegFEC3waL7bIAIH5SozO3SpqofYu ZGXgNCs2WUkVX6TJLlpi6xbBnJ9eIsc= -----END CERTIFICATE-----Generated at Wed Sep 17 22:49:59 2025 by rpki-client