$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/c82cf3d0-5339-3f15-bb67-d6e2853367d5.roa File: c82cf3d0-5339-3f15-bb67-d6e2853367d5.roa (raw, json) Hash identifier: jwtK+Smk0mVquXNWGPJYMvGGHLlhFoPU/g+rcASwigo= Subject key identifier: 6D:51:CA:86:54:25:BC:63:F9:D4:9A:A5:33:B2:D3:37:30:61:0F:70 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584B68FC9749B7405071731CD600 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/c82cf3d0-5339-3f15-bb67-d6e2853367d5.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 683 IP address blocks: 192.5.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:97:49:b7:40:50:71:73:1c:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=384747d3-3a04-42c2-9b74-aafe637d2a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:30:63:1f:a9:80:c7:85:e6:94:44:ae:c0: d4:4b:35:14:25:30:e5:76:a0:9f:ee:9f:04:27:90: 5b:b2:e4:70:40:d5:6f:c5:48:d2:55:ef:1b:b3:3d: 86:db:f5:0f:61:3b:04:ea:d4:25:fb:d6:00:db:0b: ac:44:c9:e6:45:7f:43:3f:4c:fb:b1:2d:ef:17:e8: 11:09:fb:36:d0:45:4e:8e:2c:64:cb:54:fc:77:ae: bb:ac:94:00:0d:b4:d7:e9:27:69:01:89:37:96:62: ed:f1:65:ab:0e:f9:17:26:89:01:eb:69:a2:6f:cc: 68:1c:17:c2:04:d4:b0:02:7e:9e:ec:f5:03:2c:cd: 79:97:de:20:6d:51:0f:15:ed:5c:99:d6:a4:a5:e1: 7f:17:95:80:f6:cf:88:92:1f:a7:cf:be:6b:bb:ba: 30:97:78:34:f0:fd:10:6c:9a:da:b1:0d:b3:73:72: 8e:ca:d7:15:80:70:85:a2:95:27:5f:1b:4f:69:e0: d4:76:b3:df:5a:12:b8:99:56:66:82:a0:1e:5f:a6: 1f:3c:8f:cc:53:7a:9d:fa:45:07:ac:5d:ac:95:8c: 2f:c7:3b:42:0d:85:13:96:71:4d:ea:68:16:10:73: 97:a7:51:85:ef:e4:88:da:2e:f9:9b:ea:b7:bf:29: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:51:CA:86:54:25:BC:63:F9:D4:9A:A5:33:B2:D3:37:30:61:0F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/c82cf3d0-5339-3f15-bb67-d6e2853367d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 192.5.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:67:47:cc:f9:c8:51:59:53:16:8f:cb:4a:84:6a:41:bb:e0: 3f:8d:54:71:cc:2f:e0:99:37:da:c7:31:9a:5b:5c:bc:05:11: 3b:73:8c:10:bb:83:63:3b:33:67:a0:24:a6:29:5e:e9:40:f7: 0f:93:71:7f:09:5b:e9:8c:a5:d4:9a:5a:02:54:9c:78:b6:c3: 51:7f:cd:99:a2:55:47:88:b1:b7:ce:31:d9:2e:86:50:d6:bd: 2b:4f:13:af:8a:ec:39:98:6d:f2:11:e8:f8:bb:48:f6:01:76: 3f:bd:88:48:58:a4:0e:6c:86:0b:1d:23:cb:19:81:f8:1a:83: af:1a:44:55:ba:31:72:15:b4:0b:c2:55:19:66:c6:d8:b6:f4: 87:1c:7c:36:f1:7b:41:1f:8c:29:92:38:94:67:2a:18:ab:91: 8d:df:b8:87:97:65:ca:77:aa:4b:60:43:7f:90:b5:73:0c:45: b6:14:d3:28:50:2c:98:1a:c6:41:f7:97:d6:d0:8c:a5:38:2e: 58:81:b2:1e:9a:13:d7:f7:3b:ad:a4:eb:5b:f9:c0:cd:a4:36: cf:8d:d2:20:11:d5:d8:0b:df:02:58:7d:fe:e8:ec:e5:f5:07: af:be:42:a7:33:7e:81:a4:64:62:44:4c:40:8b:91:5a:68:e1: 78:4e:e2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JdJt0BQcXMc1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk Mzg0NzQ3ZDMtM2EwNC00MmMyLTliNzQtYWFmZTYzN2QyYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoMwYx+pgMeF5pRErsDUSzUUJTDldqCf7p8E J5BbsuRwQNVvxUjSVe8bsz2G2/UPYTsE6tQl+9YA2wusRMnmRX9DP0z7sS3vF+gR Cfs20EVOjixky1T8d667rJQADbTX6SdpAYk3lmLt8WWrDvkXJokB62mib8xoHBfC BNSwAn6e7PUDLM15l94gbVEPFe1cmdakpeF/F5WA9s+Ikh+nz75ru7owl3g08P0Q bJrasQ2zc3KOytcVgHCFopUnXxtPaeDUdrPfWhK4mVZmgqAeX6YfPI/MU3qd+kUH rF2slYwvxztCDYUTlnFN6mgWEHOXp1GF7+SI2i75m+q3vylIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1RyoZUJbxj+dSapTOy0zcwYQ9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvYzgyY2YzZDAtNTMzOS0z ZjE1LWJiNjctZDZlMjg1MzM2N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwAWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5nR8z5yFFZUxaPy0qEakG74D+NVHHML+CZN9rHMZpbXLwFETtzjBC7 g2M7M2egJKYpXulA9w+TcX8JW+mMpdSaWgJUnHi2w1F/zZmiVUeIsbfOMdkuhlDW vStPE6+K7DmYbfIR6Pi7SPYBdj+9iEhYpA5shgsdI8sZgfgag68aRFW6MXIVtAvC VRlmxti29IccfDbxe0EfjCmSOJRnKhirkY3fuIeXZcp3qktgQ3+QtXMMRbYU0yhQ LJgaxkH3l9bQjKU4LliBsh6aE9f3O62k61v5wM2kNs+N0iAR1dgL3wJYff7o7OX1 B6++QqczfoGkZGJETECLkVpo4XhO4jg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:34:49 2025 by rpki-client