$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa File: fd3eb8c3-91d4-37ea-be61-7708453062cc.roa (raw, json) Hash identifier: WcTKBeiNS07nXfJVhlOepiUTg4TWgP/Xm5Pk/T1Vbns= Subject key identifier: 65:82:1B:1D:1F:05:6F:DD:E2:7F:AF:FC:E8:20:4F:5F:67:4B:E5:04 Certificate issuer: /CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Certificate serial: 010D0C9F4328584B36BC4612BC4166E2B193D080 Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 192.243.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:46:12:bc:41:66:e2:b1:93:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=6001c965-cbb3-4222-b081-ceb7fe4d3c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:75:38:97:1d:c1:29:a2:29:53:7f:71:18: 5c:76:57:28:15:c9:52:50:cd:11:6d:9b:b2:eb:d7: 9b:17:7b:b7:77:0d:b8:74:ce:f6:6f:a6:ba:f6:65: ac:16:70:76:4a:b2:f6:d6:ba:2a:e9:7f:66:aa:2c: a1:1b:bf:ed:29:27:32:c2:8e:17:51:2f:09:3e:0f: bd:b0:4e:dd:26:b2:b0:ea:86:53:7d:1a:72:8d:66: 2a:78:dc:07:13:fb:44:ce:5d:7b:40:f2:26:d8:15: ca:26:e6:e4:d8:f0:2f:2b:a5:db:0b:e1:d7:67:89: c5:ff:9d:73:03:02:a1:1c:51:cd:f2:53:3a:d3:40: b6:01:5a:63:85:cb:a9:70:c8:2d:5c:00:8d:64:9f: 69:57:8a:c1:96:e0:63:64:6f:ef:9a:82:09:67:d6: c5:17:1c:ac:c0:bb:3a:32:be:3b:d0:10:7b:46:06: 17:8a:db:a5:39:0c:fe:3e:05:b4:e8:a9:5c:fd:45: 1e:22:54:b2:48:0a:c6:5b:ef:a2:05:f1:31:f0:07: 00:cd:ee:57:01:ed:3a:6d:f1:67:ce:a1:be:78:c7: 6e:e2:d8:7d:bd:78:cf:3c:60:88:09:51:58:70:f8: ab:7f:77:37:1c:08:86:32:c5:58:e0:70:52:d3:af: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:1B:1D:1F:05:6F:DD:E2:7F:AF:FC:E8:20:4F:5F:67:4B:E5:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl X509v3 Authority Key Identifier: keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer sbgp-ipAddrBlock: critical IPv4: 192.243.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ef:a8:c6:3a:39:c8:4f:29:16:b2:50:6e:6c:0a:f9:4b:43: 35:c2:7c:57:82:6c:0b:a9:b3:05:48:af:a7:a1:80:9e:4d:47: f3:c1:61:4f:dd:a7:91:c5:16:2e:06:4a:7e:43:38:a3:e6:a9: 35:a8:3a:10:73:93:99:1a:29:a2:77:a7:71:91:99:8c:51:5e: c2:53:ff:01:a4:c2:0b:0f:20:74:61:a6:94:49:f7:f0:c0:88: 42:39:6c:68:60:06:fd:e9:71:17:88:a1:01:3c:34:39:45:f3: 93:ea:0b:11:14:c6:f5:f2:c1:42:14:66:0f:fc:ad:f0:eb:d5: e0:af:32:b3:6a:5d:98:64:c1:c3:40:5e:73:f9:cc:fd:fa:3d: 27:49:d5:9e:28:70:fa:8a:29:7b:bd:4d:e0:43:36:ff:af:95: ea:1f:0f:70:1d:11:70:3b:28:88:84:29:c9:0f:82:b2:15:a2: 52:ca:2c:b6:3a:d4:3a:7f:27:00:6d:35:09:df:91:aa:a1:2a: 73:b6:40:4a:89:1d:0d:68:fc:3e:20:84:2e:50:bd:79:10:22: 77:65:4c:d3:3e:16:d1:c4:14:25:2c:fc:cf:0f:33:ae:00:51: f5:1e:1e:27:97:12:a9:a0:29:07:35:3d:25:ed:75:65:aa:2f: 94:aa:bf:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vEYSvEFm4rGT0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzMDRiNmEtY2Q0YS00MGYyLWIxNDItNWY0NGU4MjRi NTQ3MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NjAwMWM5NjUtY2JiMy00MjIyLWIwODEtY2ViN2ZlNGQzYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWN1OJcdwSmiKVN/cRhcdlcoFclSUM0RbZuy 69ebF3u3dw24dM72b6a69mWsFnB2SrL21roq6X9mqiyhG7/tKScywo4XUS8JPg+9 sE7dJrKw6oZTfRpyjWYqeNwHE/tEzl17QPIm2BXKJubk2PAvK6XbC+HXZ4nF/51z AwKhHFHN8lM600C2AVpjhcupcMgtXACNZJ9pV4rBluBjZG/vmoIJZ9bFFxyswLs6 Mr470BB7RgYXitulOQz+PgW06Klc/UUeIlSySArGW++iBfEx8AcAze5XAe06bfFn zqG+eMdu4th9vXjPPGCICVFYcPirf3c3HAiGMsVY4HBS06+xuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWCGx0fBW/d4n+v/OggT19nS+UEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDMw NGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0ZTgyNGI1NDcvZmQzZWI4YzMtOTFkNC0z N2VhLWJlNjEtNzcwODQ1MzA2MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQzMDRiNmEtY2Q0YS00MGYyLWIx NDItNWY0NGU4MjRiNTQ3Lzg0MzA0YjZhLWNkNGEtNDBmMi1iMTQyLTVmNDRlODI0 YjU0Ny5jcmwwHwYDVR0jBBgwFoAUPf1lkVOGZzUg0FsqvFPFF6iUjVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDMwNGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0 ZTgyNGI1NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPNbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDvqMY6OchPKRayUG5sCvlLQzXCfFeCbAupswVIr6ehgJ5NR/PBYU/d p5HFFi4GSn5DOKPmqTWoOhBzk5kaKaJ3p3GRmYxRXsJT/wGkwgsPIHRhppRJ9/DA iEI5bGhgBv3pcReIoQE8NDlF85PqCxEUxvXywUIUZg/8rfDr1eCvMrNqXZhkwcNA XnP5zP36PSdJ1Z4ocPqKKXu9TeBDNv+vleofD3AdEXA7KIiEKckPgrIVolLKLLY6 1Dp/JwBtNQnfkaqhKnO2QEqJHQ1o/D4ghC5QvXkQIndlTNM+FtHEFCUs/M8PM64A UfUeHieXEqmgKQc1PSXtdWWqL5Sqv8g= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:49 2025 by rpki-client