$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa File: 3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa (raw, json) Hash identifier: nAO+dp0I6eal22thOUVqupf0Uwi13bK4aycboHtWpp0= Subject key identifier: 2D:AA:ED:B4:AE:CF:25:7D:BC:EB:E5:84:4F:42:B5:47:A1:74:49:86 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584B8BE21F3BBC1FA5706F5A4A00 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1f:3b:bc:1f:a5:70:6f:5a:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=87072130-0166-46e6-bc5f-8eaa2146346b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:04:2a:40:b0:5d:1b:2e:8f:a2:97:46:13: 13:04:87:8a:ed:2b:68:41:ba:44:de:13:4d:8e:c9: 46:ee:99:37:ac:1d:ce:cc:62:d0:8b:cf:44:c5:88: c9:57:6e:b5:76:e0:69:45:98:4d:7e:ab:6c:d1:03: 44:5c:d4:64:ee:00:99:75:93:dc:c2:a3:59:64:ef: 26:5c:16:93:42:aa:0d:a8:6d:e9:d2:f3:cd:02:4e: da:60:66:64:8c:86:b5:db:39:a1:e0:9e:42:02:79: e7:5b:af:db:dd:a6:72:14:0a:21:3e:00:45:1c:a1: c0:56:78:54:d1:0f:dd:b1:1e:58:37:fa:60:bb:0c: 67:4f:ef:08:d3:aa:43:19:5a:81:0a:af:cf:a9:4d: 03:5a:cb:3b:ba:c9:34:7f:d9:54:93:80:b7:45:70: f9:9a:60:cf:65:4d:72:75:12:07:86:1a:61:36:2b: b5:de:cf:c4:38:82:c2:b2:5d:1a:2e:fe:13:95:c1: 59:96:20:7d:fc:db:18:03:6e:da:f2:e0:aa:73:6a: 2f:00:25:ed:e3:6b:ab:1d:51:f4:bc:6a:1a:03:f8: cf:d8:56:00:f0:00:9d:7a:f8:43:f9:8c:8e:bc:7c: d1:23:4a:3b:27:56:e2:f8:25:4b:97:0a:2b:49:82: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:ED:B4:AE:CF:25:7D:BC:EB:E5:84:4F:42:B5:47:A1:74:49:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:f9:51:1c:fb:89:f2:18:3a:ca:f8:af:80:5a:cb:4f:ca:35: 2f:62:39:64:6f:70:94:80:a6:17:94:b9:32:db:62:e1:c8:af: a8:67:ef:d8:cd:a5:b5:57:61:e0:c8:ee:88:1c:10:a6:25:da: be:f3:4f:d8:33:3a:44:ce:fb:e8:43:1b:fc:7d:d9:9f:8e:82: d7:f2:be:af:bf:9e:a6:03:31:0e:be:cf:00:b7:74:bc:25:83: 97:ad:86:91:3a:00:4b:80:7f:9e:ad:a1:e1:51:53:f8:60:32: 9d:91:cb:5b:ab:8c:9c:1d:35:19:b9:87:25:7a:b1:7d:73:b1: 8a:08:08:af:40:d4:f5:83:3d:a1:8f:43:e4:da:b3:cb:93:a3: d9:4a:19:00:4a:0a:ce:f9:0b:ae:d0:88:7d:99:e3:71:1c:1b: c2:79:81:74:fe:3e:e3:2f:13:57:b4:97:4a:57:77:09:2d:72: 9a:f1:70:e4:c1:35:ab:83:32:f5:11:57:6f:3e:5e:23:a1:66: fb:92:78:fe:4d:1b:6c:b0:87:a5:d3:64:c5:30:16:f8:7c:81: d6:05:9c:0d:ba:f9:d4:47:1d:18:1d:3f:8a:ba:ab:72:ed:0f: 85:c4:d0:f0:04:05:c9:2c:cb:73:17:5f:82:a2:68:61:e7:f5: ec:06:96:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4h87vB+lcG9aSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODcwNzIxMzAtMDE2Ni00NmU2LWJjNWYtOGVhYTIxNDYzNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMYEKkCwXRsuj6KXRhMTBIeK7StoQbpE3hNN jslG7pk3rB3OzGLQi89ExYjJV261duBpRZhNfqts0QNEXNRk7gCZdZPcwqNZZO8m XBaTQqoNqG3p0vPNAk7aYGZkjIa12zmh4J5CAnnnW6/b3aZyFAohPgBFHKHAVnhU 0Q/dsR5YN/pguwxnT+8I06pDGVqBCq/PqU0DWss7usk0f9lUk4C3RXD5mmDPZU1y dRIHhhphNiu13s/EOILCsl0aLv4TlcFZliB9/NsYA27a8uCqc2ovACXt42urHVH0 vGoaA/jP2FYA8ACdevhD+YyOvHzRI0o7J1bi+CVLlworSYI5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2q7bSuzyV9vOvlhE9CtUehdEmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvM2Q4NzYwNDAtNjE1Yi0z ZmQ1LWI2YzctYjYzZjhjYzAwZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANP5URz7ifIYOsr4r4Bay0/KNS9iOWRvcJSApheUuTLbYuHIr6hn79jN pbVXYeDI7ogcEKYl2r7zT9gzOkTO++hDG/x92Z+Ogtfyvq+/nqYDMQ6+zwC3dLwl g5ethpE6AEuAf56toeFRU/hgMp2Ry1urjJwdNRm5hyV6sX1zsYoICK9A1PWDPaGP Q+Tas8uTo9lKGQBKCs75C67QiH2Z43EcG8J5gXT+PuMvE1e0l0pXdwktcprxcOTB NauDMvURV28+XiOhZvuSeP5NG2ywh6XTZMUwFvh8gdYFnA26+dRHHRgdP4q6q3Lt D4XE0PAEBcksy3MXX4KiaGHn9ewGljk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:18:53 2025 by rpki-client