$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa File: 201d8786-0ccc-3744-920e-735e09222b86.roa (raw, json) Hash identifier: 3kigiDRX3ognKzvSl8Rx/gubGNKMzWXY64B5G7Cg5ik= Subject key identifier: 68:F1:90:E0:99:5A:32:60:3E:47:BE:0B:F1:26:B8:F9:47:74:D9:E0 Certificate issuer: /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Certificate serial: 010D0C9F4328584B5571DF204351B5E41092E780 Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 54665 IP address blocks: 192.34.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:df:20:43:51:b5:e4:10:92:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=c7b7237b-fa9d-4bba-a59b-9cce44950247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:49:a2:27:0d:b1:01:79:3c:17:47:0b:6e: c3:0e:dc:ff:d1:ce:9f:84:f0:74:75:1e:59:53:80: 16:af:56:50:bb:30:97:b4:cc:1d:10:74:81:43:f3: 4e:21:65:e9:32:cd:7d:58:2b:4f:67:28:b6:01:5e: 89:dc:90:9e:32:b5:00:68:df:78:97:ef:10:7f:52: 00:f2:b3:ac:c7:4c:a3:5c:d4:6b:a7:a5:54:b2:1c: d2:8c:65:23:29:1d:f0:67:d0:c8:7c:7e:7b:27:55: 1e:63:ad:26:65:cc:9e:2e:40:10:af:a5:be:ab:50: a1:64:dc:c3:f3:35:5a:c1:46:4a:26:1b:ce:0a:c4: a0:76:c2:2e:85:0b:3c:68:22:c2:8c:2b:25:39:01: f9:ed:54:b3:73:a2:35:94:d4:6d:59:1e:1c:61:c2: be:8f:7c:cf:cc:af:5c:9c:06:5f:6a:da:7f:08:ad: 4c:12:01:a4:05:65:9f:60:a3:92:2b:1d:a8:30:16: cc:7a:73:a7:24:e7:de:29:0c:1a:9a:ee:06:82:4e: a8:9e:73:b9:f9:92:ce:54:d4:9e:87:c9:16:a5:f3: 7e:17:9f:da:2f:08:07:fc:19:33:d6:e7:71:48:c5: b3:36:0a:07:0b:d5:a8:1f:03:f6:96:b7:48:79:7a: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:90:E0:99:5A:32:60:3E:47:BE:0B:F1:26:B8:F9:47:74:D9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl X509v3 Authority Key Identifier: keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer sbgp-ipAddrBlock: critical IPv4: 192.34.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a5:fe:50:e4:52:3d:26:75:ce:c2:d7:63:de:d4:cd:93:6e: b9:bb:81:65:4b:4a:f8:c8:9b:3d:a0:29:e2:90:b5:eb:51:d0: 66:51:46:40:a0:f7:60:46:ac:83:df:6b:b5:bb:29:b8:de:68: 5b:39:a3:94:bf:f3:bc:0e:51:a6:c8:57:85:62:c7:17:28:08: 5c:4f:96:eb:d7:d8:74:81:ed:12:09:3d:99:23:6f:5d:3b:ec: 15:42:1b:13:2e:45:21:53:f4:3d:5d:8a:eb:1e:71:c4:5b:e8: 4a:80:27:e8:b1:3f:8f:d8:9c:d3:7d:58:8e:4f:c8:2d:34:9e: e5:11:30:dd:a8:38:24:5a:e0:04:45:4c:a9:41:48:0b:65:d6: cb:8f:9e:a1:0b:25:03:69:57:51:8d:1c:12:0a:e9:e3:a5:62: 59:db:88:a1:a6:97:b1:8b:cc:b8:56:bb:14:4a:4e:2d:31:62: 8b:6c:1f:2e:a2:60:89:d5:46:e8:37:5a:1a:ef:e9:61:f1:85: 2c:99:6e:a5:fc:ec:97:a4:3e:6e:cb:d5:e2:dd:01:49:33:f6: 57:36:fa:25:2a:1f:c6:47:ab:e5:23:26:1f:10:0a:5a:16:1b: d8:6a:93:c2:eb:d2:b0:49:ef:71:b5:6a:cf:21:06:cd:1a:95: 34:3e:c3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcd8gQ1G15BCS54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM1YzU3NzktMGUwYi00Y2E1LTkyMTMtNmVkZGRhZDli YzU1MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YzdiNzIzN2ItZmE5ZC00YmJhLWE1OWItOWNjZTQ0OTUwMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv5JoicNsQF5PBdHC27DDtz/0c6fhPB0dR5Z U4AWr1ZQuzCXtMwdEHSBQ/NOIWXpMs19WCtPZyi2AV6J3JCeMrUAaN94l+8Qf1IA 8rOsx0yjXNRrp6VUshzSjGUjKR3wZ9DIfH57J1UeY60mZcyeLkAQr6W+q1ChZNzD 8zVawUZKJhvOCsSgdsIuhQs8aCLCjCslOQH57VSzc6I1lNRtWR4cYcK+j3zPzK9c nAZfatp/CK1MEgGkBWWfYKOSKx2oMBbMenOnJOfeKQwamu4Ggk6onnO5+ZLOVNSe h8kWpfN+F5/aLwgH/Bkz1udxSMWzNgoHC9WoHwP2lrdIeXpU8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjxkOCZWjJgPke+C/EmuPlHdNngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MzVj NTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRkZGFkOWJjNTUvMjAxZDg3ODYtMGNjYy0z NzQ0LTkyMGUtNzM1ZTA5MjIyYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDM1YzU3NzktMGUwYi00Y2E1LTky MTMtNmVkZGRhZDliYzU1LzQzNWM1Nzc5LTBlMGItNGNhNS05MjEzLTZlZGRkYWQ5 YmM1NS5jcmwwHwYDVR0jBBgwFoAU26ZuQp5FEmEMtvQhWDW9hgEVBgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MzVjNTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRk ZGFkOWJjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWl/lDkUj0mdc7C12Pe1M2Tbrm7gWVLSvjImz2gKeKQtetR0GZRRkCg 92BGrIPfa7W7KbjeaFs5o5S/87wOUabIV4VixxcoCFxPluvX2HSB7RIJPZkjb107 7BVCGxMuRSFT9D1diuseccRb6EqAJ+ixP4/YnNN9WI5PyC00nuURMN2oOCRa4ARF TKlBSAtl1suPnqELJQNpV1GNHBIK6eOlYlnbiKGml7GLzLhWuxRKTi0xYotsHy6i YInVRug3Whrv6WHxhSyZbqX87JekPm7L1eLdAUkz9lc2+iUqH8ZHq+UjJh8QCloW G9hqk8Lr0rBJ73G1as8hBs0alTQ+w98= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:33 2025 by rpki-client