$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa File: 9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa (raw, json) Hash identifier: 4IU0CGrtC3i14dU80IoO4uNxCdMWSJs6Px9MWyhTEGU= Subject key identifier: 57:BE:56:7A:60:2A:5F:DD:12:8A:4D:99:6E:6F:81:FF:DD:BE:7D:00 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584B4081A2E4E731F3F4FA56D7C0 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 395403 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a2:e4:e7:31:f3:f4:fa:56:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=506ecf05-a4cc-40e9-ad82-a1aac7c22561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:52:b5:1b:07:4f:86:23:ce:5e:c8:8b:a3: 38:cd:1d:65:18:86:03:e4:2c:94:f9:7f:1a:ca:f8: 90:e4:51:67:df:d7:5f:a8:43:c3:90:00:d0:95:e6: 52:8e:52:06:af:61:61:ea:3a:21:11:17:25:f4:97: 6c:5e:19:89:a0:6f:0d:e5:bf:ae:96:98:e3:e4:79: 71:9d:0a:17:f3:85:a1:40:5f:1c:f4:34:9f:5e:67: 3c:ee:49:2e:a6:97:a0:3c:ed:e2:5a:47:a8:7f:59: 64:ae:49:18:55:56:55:81:ff:5c:8a:f5:41:9a:cd: 4d:d7:fc:7c:30:cf:f0:a3:ec:4d:d0:ca:cf:c0:40: c4:12:87:87:15:9b:2f:c3:ef:86:e2:d2:44:cc:49: 7c:6d:7d:bb:f7:98:07:89:0f:34:2a:73:b7:43:4c: da:b2:3c:97:81:07:8f:18:0b:4d:0c:cf:c9:1c:49: e9:13:69:e8:4a:c8:c7:4b:4a:f7:74:b7:72:b3:bb: df:5d:2f:46:62:00:bd:a9:6e:3c:1b:2e:4c:db:2c: e4:65:33:d7:21:48:7e:80:8d:bc:a6:cc:19:f9:20: e8:4b:99:8a:94:d7:93:e3:2f:f2:b7:08:89:b3:9b: 8d:88:7c:4a:88:31:56:76:b0:ab:ac:b7:a0:aa:7d: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:56:7A:60:2A:5F:DD:12:8A:4D:99:6E:6F:81:FF:DD:BE:7D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:50:0d:3d:33:95:07:b4:e1:72:15:ea:31:ff:94:7e:72:eb: fd:9b:ba:da:e7:86:95:6b:f2:64:af:31:1a:7e:36:a2:da:00: 02:53:8f:65:5c:7a:fd:82:9b:7e:af:a3:93:20:83:52:89:18: 3a:23:6d:3c:27:75:13:63:bc:cd:e0:59:f5:0c:ce:83:ec:77: 59:40:20:ec:07:2b:43:51:e2:89:ff:a6:c1:80:17:53:4a:cb: 8f:4c:6c:de:ce:0f:d5:f1:d7:35:8f:35:86:ac:1f:5c:db:d2: b9:f0:a2:49:f3:76:64:b0:8a:56:12:48:47:9c:58:67:9a:97: 61:c9:a7:23:56:73:65:5c:92:95:61:bf:db:de:ac:1b:a7:7a: f0:29:c4:45:2b:a5:bf:63:d4:0d:61:d5:df:27:f2:38:85:38: bd:11:d5:14:e8:40:c5:fb:0b:ff:63:4b:0b:7f:d1:75:fa:6a: c2:df:ba:20:d7:b7:ea:ee:bd:99:06:1a:07:45:b8:72:27:83: ee:e0:41:1e:3e:75:b3:c9:5d:fe:df:bd:fb:5e:58:51:2d:a9: 1e:f2:20:9b:ee:ef:42:ea:90:c2:8a:f7:ea:ca:4a:f1:e8:bf: 09:a4:b4:74:7e:47:73:6d:ec:96:9f:7f:34:4c:fe:8a:f5:71: 28:30:0b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaLk5zHz9PpW18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NTA2ZWNmMDUtYTRjYy00MGU5LWFkODItYTFhYWM3YzIyNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSBStRsHT4Yjzl7Ii6M4zR1lGIYD5CyU+X8a yviQ5FFn39dfqEPDkADQleZSjlIGr2Fh6johERcl9JdsXhmJoG8N5b+ulpjj5Hlx nQoX84WhQF8c9DSfXmc87kkuppegPO3iWkeof1lkrkkYVVZVgf9civVBms1N1/x8 MM/wo+xN0MrPwEDEEoeHFZsvw++G4tJEzEl8bX2795gHiQ80KnO3Q0zasjyXgQeP GAtNDM/JHEnpE2noSsjHS0r3dLdys7vfXS9GYgC9qW48Gy5M2yzkZTPXIUh+gI28 pswZ+SDoS5mKlNeT4y/ytwiJs5uNiHxKiDFWdrCrrLegqn0U0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe+VnpgKl/dEopNmW5vgf/dvn0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOWViMmRlYzItOTcwMC0z YTZhLThkOTEtNmQ5MGViNjJiODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdQDT0zlQe04XIV6jH/lH5y6/2butrnhpVr8mSvMRp+NqLaAAJTj2Vc ev2Cm36vo5Mgg1KJGDojbTwndRNjvM3gWfUMzoPsd1lAIOwHK0NR4on/psGAF1NK y49MbN7OD9Xx1zWPNYasH1zb0rnwoknzdmSwilYSSEecWGeal2HJpyNWc2VckpVh v9verBunevApxEUrpb9j1A1h1d8n8jiFOL0R1RToQMX7C/9jSwt/0XX6asLfuiDX t+ruvZkGGgdFuHIng+7gQR4+dbPJXf7fvfteWFEtqR7yIJvu70LqkMKK9+rKSvHo vwmktHR+R3Nt7JaffzRM/or1cSgwC5M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:57 2025 by rpki-client