$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json) Hash identifier: v5hty6O4OLmJuXOGtOpdoSTLiUCfwHbEDSKMl/c5XL0= Subject key identifier: 7E:55:5E:B1:D5:00:9E:6B:07:47:70:21:D7:A0:87:17:E6:72:F8:B5 Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584B0A116C4C8F6504C748E00760 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13692 IP address blocks: 192.133.23.0/24 maxlen: 24 199.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6c:4c:8f:65:04:c7:48:e0:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=54db3da1-de9f-4ce9-b6fb-d9835370c0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:1f:53:fe:20:f3:a2:c5:6b:f4:61:8b:8f: a1:60:d5:ae:94:15:d3:4b:b1:33:0b:6c:7c:1e:77: a8:43:8e:1f:2c:25:d1:6f:b6:d2:8d:95:fe:f4:74: dc:ee:33:2f:f8:36:41:da:35:84:4c:70:08:01:2a: 0a:fb:aa:f4:fc:3e:af:af:41:85:7c:57:4d:c5:63: 80:32:6e:d3:89:cf:16:b4:07:f5:42:a2:2c:9a:ac: 14:e4:35:b1:dc:a8:95:29:61:96:2b:3d:a0:57:6a: 1d:ca:b2:bb:71:ca:37:6a:af:94:c1:00:68:3e:46: bb:ee:5a:5b:fe:00:9a:35:25:d0:38:9c:aa:f2:01: eb:f2:11:08:d5:e6:3b:b4:9c:b9:86:d4:e3:dd:d9: c0:59:b3:96:a1:19:1d:5d:25:17:66:f0:8f:ef:2e: 5c:99:c1:e2:9a:18:06:f9:f5:6e:91:93:0d:b4:9f: e7:ed:21:71:b2:64:15:51:6e:34:41:2f:9a:8b:25: 39:b5:a4:2e:3f:fd:4c:e6:49:a8:d3:1b:78:59:58: 37:c8:b4:91:65:e0:87:23:8d:d2:51:d3:ac:12:d9: 69:d4:8b:27:09:df:8b:51:98:15:dd:68:e0:b2:00: ae:fd:8e:dc:f9:f9:f8:f3:13:41:d8:52:2a:14:2b: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:5E:B1:D5:00:9E:6B:07:47:70:21:D7:A0:87:17:E6:72:F8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: 192.133.23.0/24 199.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:34:1a:a4:5a:25:f5:e4:e3:fa:fa:fe:9f:5c:3e:d9:1a:d1: 6f:d6:1e:c3:3f:ce:43:22:6a:7f:37:0c:d3:da:d6:b2:f6:ea: 06:9d:94:26:84:eb:33:a7:ac:cf:02:bf:72:b6:c1:50:48:0a: 85:be:c1:29:95:39:de:2a:ab:a7:37:47:17:df:0f:fb:15:4b: 50:b9:ca:ba:4f:4f:dd:33:d4:54:36:cd:b2:10:e6:f9:f1:41: fc:c7:ba:af:17:44:a6:40:87:bb:08:05:1a:69:7d:f6:ad:fd: 9a:88:b4:e6:89:f3:a0:97:2b:1c:98:90:a5:fb:0e:fa:9c:96: 2b:eb:80:49:a0:2b:a9:1f:4d:b4:1a:7e:30:e5:1d:6c:1a:aa: da:c2:ca:f7:b2:1b:59:fb:82:5f:d3:52:ca:01:d6:c6:2a:f3: 31:35:14:fc:53:5e:0a:31:31:86:e2:83:46:68:06:69:63:1f: 42:26:ce:30:c5:1c:1a:5e:6e:01:81:a6:a4:ec:3d:d7:33:01: c5:e8:08:64:e1:b4:1d:51:d4:11:1a:1b:4f:75:38:e4:53:0c: f6:f5:f2:08:27:0c:cb:43:e7:91:72:a8:78:79:44:c8:09:e7: a4:c7:c2:b8:c2:67:8d:d1:69:4c:21:82:e6:7e:d3:5f:91:c1: 74:1e:9f:6e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsKEWxMj2UEx0jgB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NTRkYjNkYTEtZGU5Zi00Y2U5LWI2ZmItZDk4MzUzNzBjMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQwfU/4g86LFa/Rhi4+hYNWulBXTS7EzC2x8 HneoQ44fLCXRb7bSjZX+9HTc7jMv+DZB2jWETHAIASoK+6r0/D6vr0GFfFdNxWOA Mm7Tic8WtAf1QqIsmqwU5DWx3KiVKWGWKz2gV2odyrK7cco3aq+UwQBoPka77lpb /gCaNSXQOJyq8gHr8hEI1eY7tJy5htTj3dnAWbOWoRkdXSUXZvCP7y5cmcHimhgG +fVukZMNtJ/n7SFxsmQVUW40QS+aiyU5taQuP/1M5kmo0xt4WVg3yLSRZeCHI43S UdOsEtlp1IsnCd+LUZgV3WjgsgCu/Y7c+fn48xNB2FIqFCva3wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH5VXrHVAJ5rB0dwIdeghxfmcvi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvOGE5Y2JhZTgtYjY0OS0z NDI4LWE2NWEtZGVlNzQxYmJmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIUXAwQE x8MQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADc0GqRaJfXk4/r6/p9cPtka0W/WHsM/zkMian83DNPa1rL2 6gadlCaE6zOnrM8Cv3K2wVBICoW+wSmVOd4qq6c3RxffD/sVS1C5yrpPT90z1FQ2 zbIQ5vnxQfzHuq8XRKZAh7sIBRppffat/ZqItOaJ86CXKxyYkKX7DvqclivrgEmg K6kfTbQafjDlHWwaqtrCyveyG1n7gl/TUsoB1sYq8zE1FPxTXgoxMYbig0ZoBmlj H0ImzjDFHBpebgGBpqTsPdczAcXoCGThtB1R1BEaG091OORTDPb18ggnDMtD55Fy qHh5RMgJ56THwrjCZ43RaUwhguZ+01+RwXQen24= -----END CERTIFICATE-----Generated at Tue Oct 21 07:23:57 2025 by rpki-client