$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa File: fde4e71b-e3e8-3394-a523-a42805ae411a.roa (raw, json) Hash identifier: 7BybIg8wsA0Ip4txhit8fBMIQ6dsTH3oOLRuF064FVA= Subject key identifier: B1:DA:18:0B:A9:5F:C6:82:2E:0D:BC:3D:EF:A1:CA:2C:E1:10:93:C1 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEEB0F9CD77BCD7526400 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 192.151.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:b0:f9:cd:77:bc:d7:52:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e2764bcb-7cf7-47b3-8919-80c8f886d8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:20:6c:9b:22:61:9f:a2:2a:6a:54:09:f3: 7e:9c:44:ad:b5:0b:f0:65:e7:ce:de:a5:71:d5:32: 48:35:75:ef:eb:77:1f:45:d8:4f:62:45:f0:5a:0e: 55:33:cd:f1:9d:f9:e0:92:da:6b:8f:e8:38:83:f1: df:e9:29:a2:a4:69:bf:4f:7f:ff:86:86:a8:65:81: 7a:4c:4a:04:bf:e5:47:8f:44:84:74:d7:f7:4c:f1: c7:8e:1d:7e:e5:6f:98:b2:5e:a8:b4:21:c4:c1:be: cc:0c:5e:3d:4f:0a:ec:9a:82:d9:80:82:b4:bd:b2: d4:f1:ca:17:eb:cc:52:0f:db:99:62:4c:bd:b4:67: 68:50:a3:4c:d4:6a:f7:c3:0f:dd:44:2c:0d:65:33: 97:c0:d8:fd:84:3a:23:44:7b:1e:00:e3:f1:5a:28: 4c:20:a2:b7:e3:8a:09:c0:2a:43:06:f2:15:25:98: 17:cd:95:98:c5:55:2b:21:af:70:04:00:67:67:11: a5:8d:e4:b1:a4:7f:7b:1f:67:f9:bb:da:59:1e:a9: 7a:3f:16:34:a5:f8:3d:2c:ab:5b:65:ba:8c:9e:12: d1:c5:a8:fd:24:c7:da:a1:66:ef:ef:bc:21:94:f6: 7c:d0:14:b6:10:8b:f4:89:2f:ca:c0:55:19:db:1d: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:18:0B:A9:5F:C6:82:2E:0D:BC:3D:EF:A1:CA:2C:E1:10:93:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:71:6e:25:30:82:93:27:44:9f:15:08:75:21:89:3a:e7:62: e7:f6:ea:08:2e:5a:8e:84:d3:02:a8:24:61:b6:e9:5e:f4:45: 01:fb:db:b2:4e:ba:e7:eb:94:8f:d8:a2:43:b4:dc:3b:b8:40: 73:30:aa:46:a8:aa:e8:bf:c3:80:10:68:61:f0:6d:49:e2:f1: e7:04:b4:48:69:e3:58:1b:c5:5f:da:d7:29:4d:94:42:4e:8e: 24:d6:c8:60:93:34:33:f4:47:e5:7c:41:b1:b2:0d:97:76:4f: 3e:b9:24:d8:f3:b2:8c:ba:10:cb:02:59:b4:92:82:1c:6c:f2: d5:2d:90:90:04:d6:9f:41:45:3a:56:b1:eb:aa:fd:1e:b9:f9: 14:90:f7:f2:c4:f1:20:a4:46:bc:8b:60:ea:30:54:e5:a2:39: ce:14:9f:fc:90:40:ac:eb:68:de:3d:db:ce:9c:39:bd:2f:aa: 8a:b1:55:22:47:48:7b:0a:fc:16:b9:f8:0a:7c:61:ce:d2:fc: e3:fd:88:8e:ea:e2:1b:5a:fd:19:c6:ba:5e:4b:6e:e5:9a:78: f4:84:6f:e1:cd:9c:61:23:10:90:af:ba:47:02:06:5b:f7:63: be:c3:be:cd:d4:30:d1:64:58:3c:ea:95:b1:1b:52:b2:8e:57: f4:22:b4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+6w+c13vNdSZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTI3NjRiY2ItN2NmNy00N2IzLTg5MTktODBjOGY4ODZkOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsgbJsiYZ+iKmpUCfN+nESttQvwZefO3qVx 1TJINXXv63cfRdhPYkXwWg5VM83xnfngktprj+g4g/Hf6SmipGm/T3//hoaoZYF6 TEoEv+VHj0SEdNf3TPHHjh1+5W+Ysl6otCHEwb7MDF49TwrsmoLZgIK0vbLU8coX 68xSD9uZYky9tGdoUKNM1Gr3ww/dRCwNZTOXwNj9hDojRHseAOPxWihMIKK344oJ wCpDBvIVJZgXzZWYxVUrIa9wBABnZxGljeSxpH97H2f5u9pZHql6PxY0pfg9LKtb ZbqMnhLRxaj9JMfaoWbv77whlPZ80BS2EIv0iS/KwFUZ2x0u4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHaGAupX8aCLg28Pe+hyizhEJPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvZmRlNGU3MWItZTNlOC0z Mzk0LWE1MjMtYTQyODA1YWU0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBxbiUwgpMnRJ8VCHUhiTrnYuf26gguWo6E0wKoJGG26V70RQH727JO uufrlI/YokO03Du4QHMwqkaoqui/w4AQaGHwbUni8ecEtEhp41gbxV/a1ylNlEJO jiTWyGCTNDP0R+V8QbGyDZd2Tz65JNjzsoy6EMsCWbSSghxs8tUtkJAE1p9BRTpW seuq/R65+RSQ9/LE8SCkRryLYOowVOWiOc4Un/yQQKzraN49286cOb0vqoqxVSJH SHsK/Ba5+Ap8Yc7S/OP9iI7q4hta/RnGul5LbuWaePSEb+HNnGEjEJCvukcCBlv3 Y77Dvs3UMNFkWDzqlbEbUrKOV/QitO0= -----END CERTIFICATE-----Generated at Tue Sep 16 02:36:26 2025 by rpki-client