$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/818756cb-9b5c-31e2-88e1-4b4c1744ffdd.roa File: 818756cb-9b5c-31e2-88e1-4b4c1744ffdd.roa (raw, json) Hash identifier: /uVZUalMpeb3rSNx1vd8LczsdO3EFQc87bgMxWO/VR0= Subject key identifier: B0:0A:FA:DC:7F:C4:1A:03:18:C9:62:AC:83:07:B5:AB:37:5C:BD:C5 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B583C8ED78A7A744DD0DBB980 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/818756cb-9b5c-31e2-88e1-4b4c1744ffdd.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 199.192.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:d7:8a:7a:74:4d:d0:db:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c153f6d8-3090-4e1a-b8c9-ebab63b654e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:57:4a:35:7a:c0:ee:92:40:8e:23:36:a6: 24:fb:1c:b1:6c:61:3e:b3:e1:3b:c1:c9:0b:07:62: 77:0d:61:97:65:c3:03:c3:3f:90:29:fd:3f:a4:38: 59:b8:a9:5e:52:b5:f1:93:4a:3e:d8:72:03:98:f7: e6:51:b7:87:9a:3b:13:8c:99:b4:13:15:0d:1a:da: 2a:86:2c:ef:ff:1e:4d:b0:3d:48:cf:05:db:8d:f3: 99:ac:89:3e:68:31:5a:e2:cc:d9:d8:1c:98:e3:03: bd:71:f0:1b:aa:72:8f:82:70:2c:28:84:e8:e5:9f: 87:9e:86:f2:c3:be:d3:f6:f4:48:cb:37:18:97:08: 8d:ec:b4:c7:ae:49:41:11:84:ec:56:e5:ec:03:df: d9:78:e4:cf:0b:89:26:85:e1:22:9f:de:62:97:af: 66:41:92:8b:81:3d:f7:44:f6:29:b3:c1:ad:e6:3f: 0d:9f:7a:c4:cb:83:26:13:a9:a6:7d:fb:90:0b:66: 0d:0d:48:ea:19:65:d4:d7:11:cb:22:d6:de:e4:c2: 59:bb:69:2c:1d:7e:98:23:c1:13:21:fc:6a:ba:51: b8:30:c5:87:75:f9:40:82:6c:3e:d5:95:c2:25:0a: b6:33:c3:93:ba:f3:35:36:d1:2d:bf:cd:09:96:39: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0A:FA:DC:7F:C4:1A:03:18:C9:62:AC:83:07:B5:AB:37:5C:BD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/818756cb-9b5c-31e2-88e1-4b4c1744ffdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e9:af:75:43:4b:10:b8:43:66:5d:ed:8b:f8:9e:c8:58:5b: 94:b0:6d:26:c6:30:fc:70:54:6c:fe:ab:3d:91:ee:42:a9:25: 61:68:cf:39:d2:87:4c:f4:d2:fb:bb:59:db:8d:34:29:79:20: 0e:33:ef:f0:c8:40:0d:b8:03:93:40:e6:18:39:f1:e1:56:92: 68:53:60:6c:ba:68:af:eb:ff:06:0c:d7:85:6e:db:7f:93:bb: c0:5d:37:da:0d:02:ee:49:9c:f6:c7:65:ff:47:57:73:53:b4: f1:e7:ca:b5:bf:b2:05:e0:3b:2a:ca:76:35:2c:25:b0:da:b1: c8:14:01:15:fa:0f:58:6e:3e:b0:a0:85:3b:b5:71:bf:e5:be: 06:b6:fb:be:97:e6:dd:69:f7:88:bb:ee:80:a3:0b:bd:94:73: 2c:51:1e:13:8c:1e:86:26:b0:30:64:7b:90:51:bd:12:c7:97: f0:e9:f7:e2:91:33:21:ec:c3:ad:52:c5:40:bd:71:ba:f7:3d: 0c:4a:55:c6:18:f2:ee:b0:a1:97:4b:dd:c0:fd:8f:98:9a:6c: ef:ab:ad:6e:8e:f0:58:2b:3c:d4:da:ca:ba:f7:2f:5e:44:cd: eb:81:9d:09:e5:ea:3b:34:c2:1a:7b:4a:55:a1:2f:8b:31:b4: 58:65:1c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI7Xinp0TdDbuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzE1M2Y2ZDgtMzA5MC00ZTFhLWI4YzktZWJhYjYzYjY1NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvVXSjV6wO6SQI4jNqYk+xyxbGE+s+E7wckL B2J3DWGXZcMDwz+QKf0/pDhZuKleUrXxk0o+2HIDmPfmUbeHmjsTjJm0ExUNGtoq hizv/x5NsD1IzwXbjfOZrIk+aDFa4szZ2ByY4wO9cfAbqnKPgnAsKITo5Z+Hnoby w77T9vRIyzcYlwiN7LTHrklBEYTsVuXsA9/ZeOTPC4kmheEin95il69mQZKLgT33 RPYps8Gt5j8Nn3rEy4MmE6mmffuQC2YNDUjqGWXU1xHLItbe5MJZu2ksHX6YI8ET IfxqulG4MMWHdflAgmw+1ZXCJQq2M8OTuvM1NtEtv80JljkT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAK+tx/xBoDGMlirIMHtas3XL3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvODE4NzU2Y2ItOWI1Yy0z MWUyLTg4ZTEtNGI0YzE3NDRmZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjpr3VDSxC4Q2Zd7Yv4nshYW5SwbSbGMPxwVGz+qz2R7kKpJWFozznS h0z00vu7WduNNCl5IA4z7/DIQA24A5NA5hg58eFWkmhTYGy6aK/r/wYM14Vu23+T u8BdN9oNAu5JnPbHZf9HV3NTtPHnyrW/sgXgOyrKdjUsJbDascgUARX6D1huPrCg hTu1cb/lvga2+76X5t1p94i77oCjC72UcyxRHhOMHoYmsDBke5BRvRLHl/Dp9+KR MyHsw61SxUC9cbr3PQxKVcYY8u6woZdL3cD9j5iabO+rrW6O8FgrPNTayrr3L15E zeuBnQnl6js0whp7SlWhL4sxtFhlHOo= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:32 2025 by rpki-client