$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa File: 3570b9a2-7257-34c2-8ad6-93b2c8045343.roa (raw, json) Hash identifier: FfvuSplrJBj9OlqWi76IzAoCy+XVd4/pC3DRVZ6FNgQ= Subject key identifier: 90:EF:CA:DE:57:EB:9D:8F:77:91:54:93:58:72:F8:29:1F:49:A3:E0 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584B34B553F999EC81F8A8858344 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa Signing time: Mon 15 Sep 2025 19:35:05 +0000 ROA not before: Mon 15 Sep 2025 19:35:05 +0000 ROA not after: Sun 14 Dec 2025 20:35:05 +0000 asID: 4812 IP address blocks: 192.163.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:b5:53:f9:99:ec:81:f8:a8:85:83:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 15 19:35:05 2025 GMT Not After : Dec 14 20:35:05 2025 GMT Subject: CN=0074c1ab-94f1-468f-9101-34326404afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:a7:b7:30:ab:2a:9a:07:07:5b:ed:06:b1: f3:30:64:a7:d8:d2:6d:24:04:e5:c0:aa:75:8d:35: c3:d7:5b:e3:be:f8:56:00:de:b8:e8:c4:09:73:f4: 44:c1:50:d4:15:03:d3:f3:56:9d:56:68:c1:ba:0e: 1a:eb:76:ca:30:1b:ae:bd:66:a1:b5:16:4d:a9:73: 78:1d:e5:ca:a3:41:af:28:8f:27:15:9f:9b:46:5e: 50:07:5f:cf:8a:b4:58:93:c8:2e:30:e7:b4:be:79: ca:72:d6:dc:70:ca:aa:f9:95:5b:6d:bb:74:5b:ad: 17:60:4e:ab:f2:c1:09:ce:b7:a1:14:de:69:92:0a: ee:07:fb:76:d6:02:23:4f:ea:34:89:fb:fa:c0:da: cb:3a:80:e2:ec:34:44:b0:ea:8f:e8:95:26:f9:54: 72:66:74:2d:78:54:79:ed:10:6f:19:d6:dd:86:c5: 3c:e7:11:f8:9b:42:a9:7b:c9:6b:0d:8a:45:cb:e3: ab:65:bb:e3:ae:c4:37:c4:b1:f9:2e:05:0d:0f:3d: 05:44:4a:3e:54:07:3f:f5:80:42:7a:52:50:21:f1: 89:df:3f:c5:94:a2:fd:67:9d:51:61:85:46:e1:20: 56:08:57:2c:49:6a:8b:23:18:9e:51:4a:35:16:0a: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:CA:DE:57:EB:9D:8F:77:91:54:93:58:72:F8:29:1F:49:A3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8f:72:6a:e8:5f:3c:f4:4e:4f:54:51:69:1e:4d:0f:1a:c8: 4c:47:6a:33:62:22:f7:66:29:39:2a:5f:ef:50:4d:f7:5e:04: 4c:68:99:c8:39:11:19:07:cf:2b:63:83:ca:09:47:6d:83:09: 4b:8d:d4:d3:fa:4f:00:00:aa:bc:46:ea:88:b7:c5:d9:15:ff: 01:c2:75:53:f4:d8:d9:16:40:c1:dd:2d:f1:86:b6:6d:54:f4: aa:d4:ba:90:63:71:ba:c4:a9:23:8d:a6:5b:16:a0:79:07:1c: e5:f4:34:81:20:54:9e:2d:87:25:13:48:73:43:9d:a1:cd:31: 9c:5e:0c:7d:7a:2c:e3:f3:02:e8:a5:20:70:b7:a4:1b:da:07: 16:1c:a8:84:e0:49:79:7f:85:5e:85:3f:eb:38:03:98:2a:cf: 81:89:53:de:d1:da:b5:72:4c:ad:81:e5:c2:64:dd:47:fc:f1: d1:e2:3a:55:6b:5a:30:14:e4:7c:7b:29:93:4f:5b:01:8f:96: de:4c:58:f6:47:77:12:a5:e4:27:f6:48:48:c8:16:d2:2c:c5: 2f:ba:86:1f:59:40:d4:d2:e3:17:8d:46:88:c1:0e:3c:ff:15: 67:7c:6a:be:59:13:03:04:56:bd:1b:20:31:af:9d:1d:ff:84: 3a:47:44:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0tVP5meyB+KiFg0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDkxNTE5MzUwNVoXDTI1MTIxNDIwMzUwNVowLzEtMCsGA1UEAxMk MDA3NGMxYWItOTRmMS00NjhmLTkxMDEtMzQzMjY0MDRhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApumntzCrKpoHB1vtBrHzMGSn2NJtJATlwKp1 jTXD11vjvvhWAN646MQJc/REwVDUFQPT81adVmjBug4a63bKMBuuvWahtRZNqXN4 HeXKo0GvKI8nFZ+bRl5QB1/PirRYk8guMOe0vnnKctbccMqq+ZVbbbt0W60XYE6r 8sEJzrehFN5pkgruB/t21gIjT+o0ifv6wNrLOoDi7DREsOqP6JUm+VRyZnQteFR5 7RBvGdbdhsU85xH4m0Kpe8lrDYpFy+OrZbvjrsQ3xLH5LgUNDz0FREo+VAc/9YBC elJQIfGJ3z/FlKL9Z51RYYVG4SBWCFcsSWqLIxieUUo1FgpMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDvyt5X652Pd5FUk1hy+CkfSaPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvMzU3MGI5YTItNzI1Ny0z NGMyLThhZDYtOTNiMmM4MDQ1MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqPcmroXzz0Tk9UUWkeTQ8ayExHajNiIvdmKTkqX+9QTfdeBExomcg5 ERkHzytjg8oJR22DCUuN1NP6TwAAqrxG6oi3xdkV/wHCdVP02NkWQMHdLfGGtm1U 9KrUupBjcbrEqSONplsWoHkHHOX0NIEgVJ4thyUTSHNDnaHNMZxeDH16LOPzAuil IHC3pBvaBxYcqITgSXl/hV6FP+s4A5gqz4GJU97R2rVyTK2B5cJk3Uf88dHiOlVr WjAU5Hx7KZNPWwGPlt5MWPZHdxKl5Cf2SEjIFtIsxS+6hh9ZQNTS4xeNRojBDjz/ FWd8ar5ZEwMEVr0bIDGvnR3/hDpHRJA= -----END CERTIFICATE-----Generated at Wed Oct 8 17:19:33 2025 by rpki-client