$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa File: 6c9fb431-548f-3a10-9569-bcae411ab529.roa (raw, json) Hash identifier: O7pmkr6BWRRphLheXO+C/e5qRugc4h23Kph/Jqpiru0= Subject key identifier: E8:19:55:3E:E0:1D:14:21:0D:10:42:11:12:E7:E3:E2:32:DC:47:42 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF992C9C46B086C2ACCD0 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 192.103.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f9:92:c9:c4:6b:08:6c:2a:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=13d7c78c-a972-43f6-9822-a87ea79acec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:72:b3:8d:f7:d1:ec:b6:5e:d2:79:fd:3e: b6:b0:c1:c4:ee:49:2e:1e:01:b0:33:14:f0:6e:1a: bc:78:fa:84:c4:dc:84:99:61:b5:4f:40:88:68:6c: ee:04:37:e8:c1:2f:8e:4e:b0:fb:88:ba:8d:b4:50: b8:ad:1a:31:5f:39:4e:04:fb:6f:81:1f:92:6b:d5: 8a:ef:a7:58:f6:c1:34:da:7d:e9:33:d0:bc:d6:4e: ec:6c:f7:ca:62:7d:54:1b:b7:5d:f0:17:02:ad:a3: fc:d9:8e:a9:8a:95:c5:cc:9e:d6:3b:6b:b6:ee:74: e0:8a:4c:93:ea:b1:f3:b8:66:32:e3:76:77:33:ec: 32:60:e1:cc:ae:f0:f8:fb:36:ab:b9:a6:08:98:db: 17:16:89:a3:9b:d3:dd:e6:7d:0b:16:14:e6:b7:a0: a3:d4:7b:f2:24:45:fa:61:1e:62:57:06:b2:53:58: fa:61:fd:ad:9c:10:03:71:b1:17:c1:9d:1a:49:1c: de:e2:31:b2:ce:47:44:d2:33:6b:23:a9:42:d7:ea: b6:13:0c:81:24:48:0c:7d:44:f2:a7:b1:e4:42:f8: 88:56:1f:b5:7d:3e:3c:39:a0:cc:6b:67:90:91:81: 7e:63:d5:32:5d:0b:76:d8:8b:a9:2c:15:88:57:fa: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:19:55:3E:E0:1D:14:21:0D:10:42:11:12:E7:E3:E2:32:DC:47:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 192.103.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b1:e0:72:af:c1:ab:b9:46:87:e6:d1:a1:99:99:90:d8:35: 05:ba:7c:13:b3:ed:0f:91:bc:5e:2a:70:ce:72:c3:3a:1a:35: c6:1f:04:84:76:52:35:20:b4:b9:b1:e5:ee:f6:b8:37:0c:98: 4b:63:3c:80:46:7c:77:2e:28:6d:9f:e7:cc:84:5b:ad:b3:6c: e7:7b:12:c7:29:d8:9f:0e:67:7a:83:7a:b8:c9:8e:7b:a8:00: b2:47:2b:a1:cb:75:a0:98:01:7c:4e:46:e0:e4:56:ca:df:44: f7:21:3a:bf:49:77:dc:8d:39:ff:df:b5:b8:66:08:23:17:b6: 9a:ad:4e:a5:bb:73:3e:8e:4d:e1:c0:c9:0a:fe:62:53:11:f6: 02:58:67:69:cf:9f:35:8a:69:8f:8e:f6:b0:1a:62:39:5f:01: cb:52:1a:29:d6:76:bb:3d:e8:0e:00:f2:65:43:77:d4:b0:ae: 29:b8:16:2e:0c:f4:5e:2f:43:b8:3e:0c:dc:76:81:f5:e1:91: 68:9f:c5:fc:cc:08:ab:55:8a:35:75:a7:5d:b7:5e:54:b8:44: 3f:69:8f:c6:8c:2d:16:2c:54:a3:64:11:68:d5:b3:e0:0b:50: a3:51:bd:5e:af:f8:e8:5d:f0:55:ee:09:22:7a:37:d7:24:3c: 0d:27:65:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/mSycRrCGwqzNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MTNkN2M3OGMtYTk3Mi00M2Y2LTk4MjItYTg3ZWE3OWFjZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukBys4330ey2XtJ5/T62sMHE7kkuHgGwMxTw bhq8ePqExNyEmWG1T0CIaGzuBDfowS+OTrD7iLqNtFC4rRoxXzlOBPtvgR+Sa9WK 76dY9sE02n3pM9C81k7sbPfKYn1UG7dd8BcCraP82Y6pipXFzJ7WO2u27nTgikyT 6rHzuGYy43Z3M+wyYOHMrvD4+zaruaYImNsXFomjm9Pd5n0LFhTmt6Cj1HvyJEX6 YR5iVwayU1j6Yf2tnBADcbEXwZ0aSRze4jGyzkdE0jNrI6lC1+q2EwyBJEgMfUTy p7HkQviIVh+1fT48OaDMa2eQkYF+Y9UyXQt22IupLBWIV/pz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgZVT7gHRQhDRBCERLn4+Iy3EdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNmM5ZmI0MzEtNTQ4Zi0z YTEwLTk1NjktYmNhZTQxMWFiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwGd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADax4HKvwau5Rofm0aGZmZDYNQW6fBOz7Q+RvF4qcM5ywzoaNcYfBIR2 UjUgtLmx5e72uDcMmEtjPIBGfHcuKG2f58yEW62zbOd7Escp2J8OZ3qDerjJjnuo ALJHK6HLdaCYAXxORuDkVsrfRPchOr9Jd9yNOf/ftbhmCCMXtpqtTqW7cz6OTeHA yQr+YlMR9gJYZ2nPnzWKaY+O9rAaYjlfActSGinWdrs96A4A8mVDd9Swrim4Fi4M 9F4vQ7g+DNx2gfXhkWifxfzMCKtVijV1p123XlS4RD9pj8aMLRYsVKNkEWjVs+AL UKNRvV6v+Ohd8FXuCSJ6N9ckPA0nZTc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:15 2025 by rpki-client