$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa File: aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa (raw, json) Hash identifier: vBjF1IZRHuAvJVvHsR+WRa4L59TLvVJ06XM0MjAj5vg= Subject key identifier: 93:EB:F6:CE:C4:B6:52:58:C5:2F:62:35:7D:39:7C:D4:B9:E8:E1:55 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584B1D9C1FF136BDB2BA0B131980 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 0 IP address blocks: 192.58.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:1f:f1:36:bd:b2:ba:0b:13:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=f3573745-1bff-4bb7-9814-a9db5cb9d5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:09:03:1b:05:98:ae:6f:07:77:e1:2f:77: 88:b5:51:b5:92:dd:01:d5:5e:64:00:cf:6d:1d:97: c8:3f:7d:7b:80:8d:54:f1:ff:a4:9a:de:5f:17:28: c2:79:c6:f5:60:39:2d:b9:3c:a6:63:eb:f9:c0:54: e1:49:05:3e:b6:a3:53:c9:e6:8c:41:99:0c:ef:88: 15:40:8a:d7:df:66:97:ce:76:e5:e4:7d:e9:9f:2d: 72:16:83:a2:13:10:4e:66:0c:0b:3d:2d:75:b1:f6: 79:10:f9:6e:d0:5f:7a:f2:72:37:2b:d4:72:bc:6a: a3:4d:5f:15:d0:bd:13:f9:c8:8d:50:22:62:67:3c: a8:d1:45:a3:2c:fe:fc:b2:2e:b1:c5:cb:8b:91:30: 16:a2:8a:bb:7a:5d:52:66:ba:84:62:9b:c8:41:0a: e9:42:73:8a:a4:bd:16:5b:33:5e:a3:da:89:f7:86: 54:e2:22:a9:2d:89:bc:18:1a:8d:6e:db:15:8e:40: e9:dc:14:ff:02:53:fb:a2:19:d0:9f:65:6d:7b:b5: 6f:53:b2:af:e2:92:fc:63:a8:30:d0:ad:1a:04:e1: ff:20:47:70:bf:d9:84:a0:62:22:ee:d2:b9:b3:93: 1f:c7:d6:fd:c3:08:91:ac:8b:7c:39:5f:d7:b3:e5: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EB:F6:CE:C4:B6:52:58:C5:2F:62:35:7D:39:7C:D4:B9:E8:E1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8e:2f:40:62:2e:c6:9a:33:7b:95:91:9a:5a:79:53:64:53: 9f:d6:87:81:11:9a:d4:f7:e7:ea:96:ac:0c:79:d9:d0:c6:2e: b8:f5:83:98:33:d4:3c:9d:aa:1b:db:c5:79:f0:bf:50:06:a8: 2a:84:73:bf:4b:59:b9:38:cb:76:c6:ee:a4:5e:9d:98:bd:df: bd:40:cb:3a:f9:df:7a:70:94:cb:24:dd:6d:18:eb:40:dd:e3: 09:e3:88:8a:75:38:3a:0e:00:36:41:c0:a1:29:37:c2:69:94: 3a:ac:76:da:14:9f:ec:f0:bf:c6:cb:f4:bd:68:1d:de:c8:1f: a4:5a:13:75:91:6f:3c:ae:79:85:aa:64:7d:57:1c:b7:cf:33: 80:c6:14:e9:79:d9:87:47:91:05:dd:e1:ab:c9:2b:03:14:d9: 28:6f:f0:3b:1c:f9:d3:26:6a:0a:94:88:bb:d3:30:92:a0:02: db:48:25:d7:a5:1d:8e:8e:82:01:09:bd:1f:ba:77:3b:74:20: 09:50:f7:87:b0:72:59:e0:35:60:7b:a7:4d:a4:0e:a8:1b:76: 76:bc:1f:36:98:86:fd:e4:80:2f:19:31:75:b8:e1:8f:32:ca: 2f:45:b3:fe:39:7f:6a:91:c2:0c:f4:cc:97:08:0c:28:38:f5: e1:16:b3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnB/xNr2yugsTGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjM1NzM3NDUtMWJmZi00YmI3LTk4MTQtYTlkYjVjYjlkNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvMJAxsFmK5vB3fhL3eItVG1kt0B1V5kAM9t HZfIP317gI1U8f+kmt5fFyjCecb1YDktuTymY+v5wFThSQU+tqNTyeaMQZkM74gV QIrX32aXznbl5H3pny1yFoOiExBOZgwLPS11sfZ5EPlu0F968nI3K9RyvGqjTV8V 0L0T+ciNUCJiZzyo0UWjLP78si6xxcuLkTAWooq7el1SZrqEYpvIQQrpQnOKpL0W WzNeo9qJ94ZU4iKpLYm8GBqNbtsVjkDp3BT/AlP7ohnQn2Vte7VvU7Kv4pL8Y6gw 0K0aBOH/IEdwv9mEoGIi7tK5s5Mfx9b9wwiRrIt8OV/Xs+XqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPr9s7EtlJYxS9iNX05fNS56OFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYWFhMTVlNTktZDVhMC0z ZDI0LThiMGEtN2MzZTE3OGI0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiOL0BiLsaaM3uVkZpaeVNkU5/Wh4ERmtT35+qWrAx52dDGLrj1g5gz 1DydqhvbxXnwv1AGqCqEc79LWbk4y3bG7qRenZi9371Ayzr533pwlMsk3W0Y60Dd 4wnjiIp1ODoOADZBwKEpN8JplDqsdtoUn+zwv8bL9L1oHd7IH6RaE3WRbzyueYWq ZH1XHLfPM4DGFOl52YdHkQXd4avJKwMU2Shv8Dsc+dMmagqUiLvTMJKgAttIJdel HY6OggEJvR+6dzt0IAlQ94ewclngNWB7p02kDqgbdna8HzaYhv3kgC8ZMXW44Y8y yi9Fs/45f2qRwgz0zJcIDCg49eEWs/w= -----END CERTIFICATE-----Generated at Sun Oct 19 23:51:02 2025 by rpki-client