$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa File: 6cfc4b7f-42d4-362c-98f2-32caa153320a.roa (raw, json) Hash identifier: pb437Jnu1t3E7k0Of9yh87fBJ2zYD1qiEYIGL/HyQFI= Subject key identifier: C0:FD:20:5A:20:26:F6:BB:13:73:77:08:CA:87:CC:D5:64:3A:D3:3C Certificate issuer: /CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Certificate serial: 010D0C9F4328584B821CC25A52B55AC488CF02A0 Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 21538 IP address blocks: 192.131.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c2:5a:52:b5:5a:c4:88:cf:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=2a7afac4-07a1-4b37-a834-041a9e8b022c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:d0:ec:5a:a1:47:cb:71:bd:d5:7e:09:89: 29:56:3a:02:1d:e6:3e:c2:77:32:25:08:a7:f3:dd: 1e:76:95:5a:7b:66:a1:9f:ba:7e:3d:ad:e0:a4:24: db:b2:d2:82:fe:6b:1a:55:58:3a:9e:9b:37:d6:97: ab:24:62:1d:66:f0:1c:55:c2:c6:1e:c0:6e:9d:8e: 64:c7:a9:fc:6c:2a:2c:c4:44:c7:0b:f5:08:0a:72: f2:89:4e:ab:3b:b4:0d:0c:4e:3b:e1:aa:e9:1b:73: 4b:ca:2d:5d:77:18:80:e7:ec:06:10:94:85:eb:c3: 4e:b8:a2:cb:f6:35:a0:80:13:da:4e:6b:c0:e1:c1: ce:23:d8:3b:61:38:3d:2a:28:71:08:7f:74:f2:4a: a2:e0:c0:6b:96:27:44:e0:48:cd:d6:52:40:da:fb: 7d:ca:8b:52:24:86:a5:07:47:8c:01:e4:6e:ed:c0: 9e:8f:92:79:26:d8:fd:80:ff:75:27:21:d5:75:b0: 8d:c3:b6:6b:ce:8f:7c:4f:64:84:84:b9:fa:86:6c: 6e:f2:09:23:62:92:2b:ba:a6:27:80:70:9d:66:ee: 58:e8:08:8a:b8:33:cd:41:e8:f2:4b:28:d8:d9:1a: b3:c2:7b:aa:1e:c1:d7:8f:df:8b:b5:ca:7f:65:d3: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:20:5A:20:26:F6:BB:13:73:77:08:CA:87:CC:D5:64:3A:D3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl X509v3 Authority Key Identifier: keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer sbgp-ipAddrBlock: critical IPv4: 192.131.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:61:b3:cc:ca:70:08:b5:b4:da:49:58:5f:02:7b:39:16:54: fd:e9:7a:bb:a3:c0:24:29:5c:f0:dd:fd:cc:63:dd:7b:06:cf: 14:a0:03:5a:4f:29:a4:d5:62:ea:0e:47:85:7f:7b:98:1a:c3: 09:d0:e1:62:89:d9:78:8e:31:e6:1b:b2:39:81:cd:ce:80:ee: 73:e5:59:58:06:82:06:50:7c:5c:96:e6:a0:02:66:a1:95:25: f9:d0:e6:a8:24:54:bb:92:3c:52:2a:2f:33:e0:52:d5:7e:b3: 45:c0:b6:93:24:ce:dd:6e:c5:11:ba:d8:aa:e2:c6:ab:67:c7: 0b:53:c3:d7:5b:33:4b:30:dc:be:30:1e:c7:a9:32:27:00:a2: 19:ec:38:aa:1b:e5:ec:9e:3a:4b:43:d7:d0:67:a2:b1:d5:6e: 07:76:b3:81:94:18:63:89:8b:e9:2f:64:6c:d3:2f:f9:ce:2f: 57:3e:87:41:01:09:ef:41:6d:11:1d:8c:97:f3:0a:9c:a7:e5: 63:0c:1a:46:b2:aa:60:97:a1:71:55:2c:83:3d:31:62:76:34: 1f:cb:24:d7:a3:02:3b:e2:f7:16:f4:5a:3b:54:cb:f0:29:1f: e8:1d:c8:89:9e:64:27:6f:4c:94:53:47:81:bb:49:62:77:d9: 35:6d:b4:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMJaUrVaxIjPAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw MzczMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MmE3YWZhYzQtMDdhMS00YjM3LWE4MzQtMDQxYTllOGIwMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip7Q7FqhR8txvdV+CYkpVjoCHeY+wncyJQin 890edpVae2ahn7p+Pa3gpCTbstKC/msaVVg6nps31perJGIdZvAcVcLGHsBunY5k x6n8bCosxETHC/UICnLyiU6rO7QNDE474arpG3NLyi1ddxiA5+wGEJSF68NOuKLL 9jWggBPaTmvA4cHOI9g7YTg9KihxCH908kqi4MBrlidE4EjN1lJA2vt9yotSJIal B0eMAeRu7cCej5J5Jtj9gP91JyHVdbCNw7Zrzo98T2SEhLn6hmxu8gkjYpIruqYn gHCdZu5Y6AiKuDPNQejySyjY2RqzwnuqHsHXj9+Ltcp/ZdOPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD9IFogJva7E3N3CMqHzNVkOtM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvNmNmYzRiN2YtNDJkNC0z NjJjLTk4ZjItMzJjYWExNTMzMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew NzAwMTAzNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhhs8zKcAi1tNpJWF8CezkWVP3perujwCQpXPDd/cxj3XsGzxSgA1pP KaTVYuoOR4V/e5gawwnQ4WKJ2XiOMeYbsjmBzc6A7nPlWVgGggZQfFyW5qACZqGV JfnQ5qgkVLuSPFIqLzPgUtV+s0XAtpMkzt1uxRG62KrixqtnxwtTw9dbM0sw3L4w HsepMicAohnsOKob5eyeOktD19BnorHVbgd2s4GUGGOJi+kvZGzTL/nOL1c+h0EB Ce9BbREdjJfzCpyn5WMMGkayqmCXoXFVLIM9MWJ2NB/LJNejAjvi9xb0WjtUy/Ap H+gdyImeZCdvTJRTR4G7SWJ32TVttGM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:46 2025 by rpki-client