$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: 8mYeXYYZ/tZpaf+QpfgY4B5eCrelpkHVodV8gi22KD4= Subject key identifier: DA:2B:74:BA:4B:46:52:87:3B:33:1E:A8:F4:20:61:96:6F:C1:0F:DA Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584B328C3BBB888BAE8953748478 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3b:bb:88:8b:ae:89:53:74:84:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=aec99e76-c8ae-4ad1-b8de-08f1abe5084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:b3:d5:d2:10:0a:02:8b:9e:e5:3a:79:9b: e5:51:c4:ef:c8:fc:e5:5e:5d:04:35:d1:62:a1:a5: 0d:ab:80:73:28:ee:52:ef:35:5a:05:77:70:0d:fb: 3a:a1:72:66:44:c0:5e:cf:48:43:9c:f3:ae:0d:81: d9:3e:73:f6:01:e0:97:12:38:cf:df:d5:63:41:55: f8:a2:00:ff:2c:9a:cf:04:72:5b:b2:dd:d7:e7:e3: 64:0f:2a:0c:43:df:ed:cc:e1:83:78:9f:bd:1e:06: c4:28:44:4b:8d:d9:ef:9d:38:de:7b:95:e3:a8:6a: 9b:51:3f:13:b8:5a:51:a3:e2:8b:fb:61:46:61:26: 90:9f:fd:06:5d:2c:0e:c1:e4:6c:73:5f:ff:6d:e5: 0b:9f:bb:7c:72:c2:d3:66:cd:c3:e4:88:09:27:ea: 9b:24:04:b7:cf:2a:08:96:4d:7c:bb:8b:05:7c:b3: d8:cb:b5:d8:28:b3:d3:72:0f:b1:fc:09:78:ca:ee: 5f:b8:b9:55:ff:eb:de:0a:32:f3:6f:96:ca:00:e6: 50:99:be:6c:01:66:71:7a:4d:9b:01:c3:74:c2:e2: e1:fe:84:47:0b:42:3c:c6:23:9f:51:67:88:e4:2c: fb:3e:d3:20:0b:a3:38:bb:06:14:5c:7e:29:5d:34: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2B:74:BA:4B:46:52:87:3B:33:1E:A8:F4:20:61:96:6F:C1:0F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:de:16:55:96:0c:74:d3:2e:17:06:9d:be:8c:40:f3:e0:57: 70:f2:47:31:a3:14:c6:27:6c:85:95:b5:8c:8f:83:2a:91:5a: 1f:f0:fc:5d:ef:5c:99:15:d9:04:41:20:f3:f9:8f:07:6c:d3: 5f:10:90:7f:2a:84:3a:bb:cb:b7:c2:8b:a8:d3:9f:0f:bf:01: e8:6b:98:54:98:57:2d:7e:fc:0b:49:dc:7d:91:f0:1b:c3:df: 63:b1:d1:fd:c8:03:a5:55:74:44:82:2e:a7:da:de:5e:29:8e: f1:9f:be:41:b4:b6:d7:10:08:81:b9:b6:a1:5b:35:ca:fe:a6: 53:c6:81:9e:6c:e2:4c:cd:35:dd:bc:4b:77:fc:8d:fe:89:ee: 1c:bd:0d:28:30:a6:fc:b9:38:6c:dc:f2:3e:73:b8:1b:1a:af: 73:b8:2e:a4:6a:60:b1:c7:15:9c:70:7a:ba:e8:e5:45:13:97: 83:6f:f7:2a:eb:39:92:4e:c3:de:f0:a5:8a:47:63:fa:c6:c1: 77:73:89:39:66:39:59:71:ae:13:48:f8:53:82:44:e9:0c:bb: 7d:74:d3:c1:a2:0e:ad:21:94:f0:60:b3:00:24:5e:71:67:c3: d3:92:99:f3:a1:87:70:66:21:b9:be:67:b3:a4:e8:11:ba:c0: 95:49:b9:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDu7iIuuiVN0hHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YWVjOTllNzYtYzhhZS00YWQxLWI4ZGUtMDhmMWFiZTUwODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+z1dIQCgKLnuU6eZvlUcTvyPzlXl0ENdFi oaUNq4BzKO5S7zVaBXdwDfs6oXJmRMBez0hDnPOuDYHZPnP2AeCXEjjP39VjQVX4 ogD/LJrPBHJbst3X5+NkDyoMQ9/tzOGDeJ+9HgbEKERLjdnvnTjee5XjqGqbUT8T uFpRo+KL+2FGYSaQn/0GXSwOweRsc1//beULn7t8csLTZs3D5IgJJ+qbJAS3zyoI lk18u4sFfLPYy7XYKLPTcg+x/Al4yu5fuLlV/+veCjLzb5bKAOZQmb5sAWZxek2b AcN0wuLh/oRHC0I8xiOfUWeI5Cz7PtMgC6M4uwYUXH4pXTSMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNordLpLRlKHOzMeqPQgYZZvwQ/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfeFlWWDHTTLhcGnb6MQPPgV3DyRzGjFMYnbIWVtYyPgyqRWh/w/F3v XJkV2QRBIPP5jwds018QkH8qhDq7y7fCi6jTnw+/AehrmFSYVy1+/AtJ3H2R8BvD 32Ox0f3IA6VVdESCLqfa3l4pjvGfvkG0ttcQCIG5tqFbNcr+plPGgZ5s4kzNNd28 S3f8jf6J7hy9DSgwpvy5OGzc8j5zuBsar3O4LqRqYLHHFZxwerro5UUTl4Nv9yrr OZJOw97wpYpHY/rGwXdziTlmOVlxrhNI+FOCROkMu31008GiDq0hlPBgswAkXnFn w9OSmfOhh3BmIbm+Z7Ok6BG6wJVJuWM= -----END CERTIFICATE-----Generated at Thu Sep 18 17:52:34 2025 by rpki-client