$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa File: f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa (raw, json) Hash identifier: NKZksiVwm8h53mfxCAyyVzRd6cVoU/hnuAiRb/QAjqY= Subject key identifier: F3:21:A2:0D:D3:D1:29:7B:04:47:9F:21:86:81:AA:04:5E:AD:96:D7 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584B821CC9F6A5B46EC2A4017B40 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 192.161.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c9:f6:a5:b4:6e:c2:a4:01:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c25173db-d038-4e67-9353-903670051a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:cf:9e:ec:a7:8a:e6:3c:96:bd:67:3c:17: 3b:c1:0c:6d:5a:2c:53:d9:cb:e3:f1:37:6b:3b:67: 53:99:bf:20:ff:d4:48:64:a4:ca:3d:23:b9:a5:fe: 6d:9d:76:2b:65:d3:7f:91:55:75:35:dd:f3:4d:1b: 2a:18:4e:8e:5a:df:fe:06:8e:c2:6c:ac:ce:f8:f0: 31:36:d3:e5:6f:3d:ae:9c:84:c9:1c:c5:0f:3d:a7: c3:da:8e:00:c5:f3:ad:94:49:61:e4:03:49:17:b3: c2:4b:a6:1c:fc:6e:ef:93:07:d9:ac:7f:c7:35:4a: c0:46:21:d2:dc:bd:16:d4:46:be:77:ec:be:46:e6: 5f:d0:64:95:b1:b9:eb:34:ba:48:2b:44:ff:f7:a4: 2e:1d:d9:2c:f7:27:48:93:05:6a:36:90:55:a0:d8: c1:7e:d8:17:a9:d5:dc:70:5d:05:db:46:61:72:15: 00:d3:60:ad:d6:64:5c:41:6a:c5:40:c9:6d:59:8e: 88:fa:6c:63:19:31:3e:95:af:8f:29:54:5c:bc:99: f3:eb:f8:2b:43:a1:7f:45:e9:2b:62:ae:cc:11:5e: 27:b6:a8:25:96:cc:82:18:42:6d:e8:29:0c:ad:fa: e7:9a:89:d9:c3:10:91:07:bc:40:8d:fc:2a:15:1c: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:A2:0D:D3:D1:29:7B:04:47:9F:21:86:81:AA:04:5E:AD:96:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3d:e1:62:d8:8e:fc:93:34:33:7c:e2:9f:eb:96:f6:cc:cd: d5:41:28:d5:0f:a1:0d:8c:33:28:88:d6:5a:ad:b7:4c:92:8a: 43:1a:0a:36:f8:b1:aa:f4:bc:ed:6f:14:43:9c:5d:ca:3c:79: 80:03:78:e6:51:07:6d:26:5a:6c:5f:c6:a9:5b:19:c4:00:25: 6d:59:06:7c:02:0d:d9:1b:aa:21:90:80:80:9a:57:4c:23:24: 83:ba:0b:69:d7:7c:14:48:68:78:9c:3e:80:35:db:7f:36:7f: 9f:ed:a8:37:dd:1c:7c:c9:9c:c8:47:e8:8f:16:e6:e6:9e:dc: f6:c7:23:83:16:4c:8d:70:57:5c:5d:47:0b:41:d5:8e:5e:6b: 3e:e7:b4:5d:d2:5c:44:29:59:e3:38:6b:1d:c8:de:57:91:14: 6e:63:db:5d:28:73:df:67:24:b1:c4:c3:57:9a:8d:21:1e:a3: f6:de:1e:70:97:b2:e2:17:c7:46:54:ef:67:8b:66:d1:02:10: 92:d4:7c:af:7d:5e:cc:a3:a1:c0:53:f8:39:38:71:49:e3:a8: e1:83:7d:4b:89:57:f4:0d:c0:b5:da:64:99:c4:fd:88:fb:f0: 2f:47:59:a1:b9:ce:dd:e9:c0:9f:d1:47:36:09:ed:81:f5:8c: f1:93:47:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMn2pbRuwqQBe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzI1MTczZGItZDAzOC00ZTY3LTkzNTMtOTAzNjcwMDUxYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifbPnuyniuY8lr1nPBc7wQxtWixT2cvj8Tdr O2dTmb8g/9RIZKTKPSO5pf5tnXYrZdN/kVV1Nd3zTRsqGE6OWt/+Bo7CbKzO+PAx NtPlbz2unITJHMUPPafD2o4AxfOtlElh5ANJF7PCS6Yc/G7vkwfZrH/HNUrARiHS 3L0W1Ea+d+y+RuZf0GSVsbnrNLpIK0T/96QuHdks9ydIkwVqNpBVoNjBftgXqdXc cF0F20ZhchUA02Ct1mRcQWrFQMltWY6I+mxjGTE+la+PKVRcvJnz6/grQ6F/Rekr Yq7MEV4ntqgllsyCGEJt6CkMrfrnmonZwxCRB7xAjfwqFRyBzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMhog3T0Sl7BEefIYaBqgRerZbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvZjhhYTM1YmItY2Y5ZC0z NGE5LThjOTQtMzFmNjEyNjk4ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg94WLYjvyTNDN84p/rlvbMzdVBKNUPoQ2MMyiI1lqtt0ySikMaCjb4 sar0vO1vFEOcXco8eYADeOZRB20mWmxfxqlbGcQAJW1ZBnwCDdkbqiGQgICaV0wj JIO6C2nXfBRIaHicPoA12382f5/tqDfdHHzJnMhH6I8W5uae3PbHI4MWTI1wV1xd RwtB1Y5eaz7ntF3SXEQpWeM4ax3I3leRFG5j210oc99nJLHEw1eajSEeo/beHnCX suIXx0ZU72eLZtECEJLUfK99XsyjocBT+Dk4cUnjqOGDfUuJV/QNwLXaZJnE/Yj7 8C9HWaG5zt3pwJ/RRzYJ7YH1jPGTR3U= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:20 2025 by rpki-client