$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa File: 34587be0-801c-3456-af9f-aa43a46c930c.roa (raw, json) Hash identifier: NgEpqpgcXEKZGe+SKStNLjuMNHfSX1SggUWroTZ3VVk= Subject key identifier: 5C:93:CC:F5:B9:1C:DC:FA:D6:27:D6:6B:13:C5:E4:60:5E:0A:AD:D6 Certificate issuer: /CN=55bf3e52-332a-4f98-b430-2ed284592ddb Certificate serial: 010D0C9F4328584B25FC3722FD266154D082D880 Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 57974 IP address blocks: 192.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:37:22:fd:26:61:54:d0:82:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=a64b2d0b-29a3-4cdd-b417-a779fb081b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:fc:9c:af:88:0c:8e:1f:f8:79:da:89:0d: 80:9f:34:21:80:d2:29:1e:b3:dd:68:36:d8:0d:2a: 3a:db:d7:b1:40:d9:b3:0e:6d:96:f0:8b:a8:d4:66: bb:2c:99:a4:51:38:c4:95:bb:87:9f:ef:e7:b6:f8: d3:4f:81:1f:86:78:37:56:77:07:e5:dd:67:1b:60: 79:60:85:e6:d0:39:ef:cb:83:a4:de:d4:c9:94:47: d7:95:e8:dd:ea:af:7b:c1:5b:87:3b:11:75:7b:e9: 21:35:f8:bd:c6:7e:22:a0:5f:60:c7:46:18:2f:af: 33:9c:6f:11:9f:d8:89:18:9b:41:13:52:22:52:51: 9c:fd:dc:23:9f:b8:ee:08:73:51:34:39:12:21:92: 74:24:74:01:2c:04:6a:d6:30:88:b7:94:b0:19:bb: 54:75:2d:57:11:9b:52:6e:9f:b3:66:3e:ba:32:7d: 7b:90:12:6f:ea:4e:df:21:5a:fc:74:63:50:c0:5a: 24:6f:21:a5:20:7f:5c:43:3a:89:a9:86:3b:55:9e: c5:39:0a:9f:4e:4a:87:25:74:89:55:7f:bd:70:ad: cc:63:a7:4a:c3:1b:91:18:98:c4:72:c1:91:eb:d5: 5d:9c:91:1d:f5:e0:ac:1a:e9:1a:76:a4:41:93:31: 60:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:93:CC:F5:B9:1C:DC:FA:D6:27:D6:6B:13:C5:E4:60:5E:0A:AD:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl X509v3 Authority Key Identifier: keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer sbgp-ipAddrBlock: critical IPv4: 192.41.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:4d:fc:e4:8c:e9:96:0b:9f:d1:f9:5a:a5:00:78:8d:14:ac: 4e:49:58:a2:50:6e:cc:e2:d1:d3:3c:b8:5d:6f:32:97:b2:ff: bd:17:d3:95:56:ba:09:03:39:ba:73:92:f6:86:f9:6c:25:86: da:da:29:2f:03:bb:1f:2c:82:42:b3:0d:b1:f2:44:01:5b:f3: e5:7e:87:6a:03:db:bb:35:fd:cf:be:8e:be:dc:91:66:d8:7d: 56:e3:c4:14:6b:b6:c5:d3:e0:62:5f:3e:df:46:08:57:a1:07: 51:60:76:38:e1:cf:94:c8:a5:8d:43:f1:e4:17:04:2c:f3:0d: 1c:fd:0b:9c:64:2a:e1:9e:aa:25:4e:7c:01:3d:5d:a6:ff:b2: 18:b2:41:7d:dd:05:d1:b8:1e:7e:2e:c2:30:4f:a3:53:0b:46: a0:4e:dc:22:2a:d1:4f:62:0a:37:dd:fc:fd:03:cf:20:f8:28: 2a:86:cd:63:d4:4c:f9:7e:ab:41:55:eb:ec:14:ae:86:b4:78: 58:01:b0:49:93:26:0a:8d:97:12:44:cc:ec:c4:65:22:ce:93: 69:3f:83:26:0a:4a:a6:6b:18:12:c9:73:62:36:ed:0f:47:cc: b3:0e:fc:53:db:4e:77:0e:62:ef:28:f3:6c:80:fd:76:ea:b7: 55:99:df:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/Dci/SZhVNCC2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTViZjNlNTItMzMyYS00Zjk4LWI0MzAtMmVkMjg0NTky ZGRiMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YTY0YjJkMGItMjlhMy00Y2RkLWI0MTctYTc3OWZiMDgxYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkib8nK+IDI4f+HnaiQ2AnzQhgNIpHrPdaDbY DSo629exQNmzDm2W8Iuo1Ga7LJmkUTjElbuHn+/ntvjTT4Efhng3VncH5d1nG2B5 YIXm0Dnvy4Ok3tTJlEfXlejd6q97wVuHOxF1e+khNfi9xn4ioF9gx0YYL68znG8R n9iJGJtBE1IiUlGc/dwjn7juCHNRNDkSIZJ0JHQBLARq1jCIt5SwGbtUdS1XEZtS bp+zZj66Mn17kBJv6k7fIVr8dGNQwFokbyGlIH9cQzqJqYY7VZ7FOQqfTkqHJXSJ VX+9cK3MY6dKwxuRGJjEcsGR69VdnJEd9eCsGukadqRBkzFg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyTzPW5HNz61ifWaxPF5GBeCq3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NWJm M2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQyODQ1OTJkZGIvMzQ1ODdiZTAtODAxYy0z NDU2LWFmOWYtYWE0M2E0NmM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTViZjNlNTItMzMyYS00Zjk4LWI0 MzAtMmVkMjg0NTkyZGRiLzU1YmYzZTUyLTMzMmEtNGY5OC1iNDMwLTJlZDI4NDU5 MmRkYi5jcmwwHwYDVR0jBBgwFoAUmVLQ86figaVvg4KuMvIJCntlFbEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NWJmM2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQy ODQ1OTJkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwClmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBN/OSM6ZYLn9H5WqUAeI0UrE5JWKJQbszi0dM8uF1vMpey/70X05VW ugkDObpzkvaG+WwlhtraKS8Dux8sgkKzDbHyRAFb8+V+h2oD27s1/c++jr7ckWbY fVbjxBRrtsXT4GJfPt9GCFehB1Fgdjjhz5TIpY1D8eQXBCzzDRz9C5xkKuGeqiVO fAE9Xab/shiyQX3dBdG4Hn4uwjBPo1MLRqBO3CIq0U9iCjfd/P0DzyD4KCqGzWPU TPl+q0FV6+wUroa0eFgBsEmTJgqNlxJEzOzEZSLOk2k/gyYKSqZrGBLJc2I27Q9H zLMO/FPbTncOYu8o82yA/Xbqt1WZ32Q= -----END CERTIFICATE-----Generated at Mon Oct 20 03:51:33 2025 by rpki-client