$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: /qf7AFjodKaut+P7c3Df4rQr21nuKAa+Z/E46DTqFoc= Subject key identifier: E1:C8:35:45:C9:4A:E6:8F:02:58:E2:51:E4:15:14:C0:0D:CB:85:44 Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F4328584B3AEC3E238F81221420112F80 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3e:23:8f:81:22:14:20:11:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=135140b4-4091-4f59-aad5-ecdb52008f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:f0:97:3d:eb:1a:c9:66:81:ba:14:52:85: f5:be:ca:18:14:54:af:0f:ed:a8:90:f0:5a:4c:51: 35:ba:0b:b5:ee:e9:a9:43:d3:57:db:f1:30:59:93: c4:30:8a:43:f1:87:94:8d:54:ae:52:35:14:cd:d8: e3:cd:af:91:7a:a6:d1:72:4d:ba:3f:f0:ec:2e:c3: fb:d3:1b:65:1e:fe:7a:85:30:4c:bd:77:3c:5b:d3: 67:fc:7c:f5:3b:51:0d:57:71:3e:f5:49:a6:ec:1c: 5b:d4:10:2c:2c:9b:00:6b:99:e2:5d:e1:49:f6:7e: 2e:2d:b1:2f:32:96:18:85:87:4a:7d:a6:19:b3:a8: e8:c6:6f:8a:16:ba:66:29:06:06:61:62:a4:88:8e: 62:d7:da:97:9e:6c:ca:5f:c1:a1:43:c9:31:8a:f4: 32:74:3a:88:66:fe:07:40:e5:7f:89:e7:35:ae:6a: 7a:fe:7b:e8:b1:c3:08:18:b5:c0:44:5b:50:d9:58: f4:c9:54:b4:e5:69:e4:46:dc:1a:2a:09:f5:22:a0: fb:bc:94:19:20:3f:3d:2e:98:ad:f0:e8:68:45:11: 1f:a0:f3:e7:fe:cb:11:ea:cc:69:aa:0e:fc:91:14: 15:5c:6f:c4:e5:10:cd:e6:91:3a:89:de:4c:2b:79: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C8:35:45:C9:4A:E6:8F:02:58:E2:51:E4:15:14:C0:0D:CB:85:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:87:06:ab:89:8a:fc:16:2e:ee:31:5f:07:e5:1c:ee:c5:f3: f9:3d:16:bb:d4:09:0a:50:7b:13:7a:cd:ad:35:a2:1e:e0:2e: 76:9e:20:22:8e:c8:82:95:41:46:34:76:6b:3b:8d:03:6d:e2: 9d:4e:6e:cc:9a:bd:d3:b2:b7:e2:6a:b2:ef:27:4b:a4:6b:9c: 48:9f:14:68:20:16:af:81:93:b9:1f:e8:c8:5a:b1:4e:79:84: d0:0f:be:2f:65:9a:1d:69:c8:36:a7:05:4b:41:10:31:87:b4: 2a:da:68:78:9b:73:52:17:68:19:83:98:e5:69:34:79:78:89: 72:03:89:24:14:05:27:43:fc:ec:0e:c4:aa:9d:f8:16:03:77: 22:f0:a7:c7:ef:bf:5f:f1:df:42:3c:73:03:05:18:97:e2:92: 8e:32:ca:5a:d4:be:fb:95:3e:e0:ab:63:30:19:0a:10:5a:b3: 68:a4:35:ac:1b:c0:9c:2d:49:f9:15:55:fe:b2:a1:f7:74:5c: 3f:e5:ec:9d:a5:8b:40:9c:31:b0:65:48:b3:ea:09:d9:38:4b: 99:16:41:63:70:91:4d:c9:8f:4b:1b:36:bc:4f:c1:c9:7f:c2: 6b:f2:fa:ce:a9:b3:b2:11:75:28:06:76:e0:a8:ec:eb:51:77: 25:10:c7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67D4jj4EiFCARL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk MTM1MTQwYjQtNDA5MS00ZjU5LWFhZDUtZWNkYjUyMDA4ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA097wlz3rGslmgboUUoX1vsoYFFSvD+2okPBa TFE1ugu17umpQ9NX2/EwWZPEMIpD8YeUjVSuUjUUzdjjza+ReqbRck26P/DsLsP7 0xtlHv56hTBMvXc8W9Nn/Hz1O1ENV3E+9Umm7Bxb1BAsLJsAa5niXeFJ9n4uLbEv MpYYhYdKfaYZs6joxm+KFrpmKQYGYWKkiI5i19qXnmzKX8GhQ8kxivQydDqIZv4H QOV/iec1rmp6/nvoscMIGLXARFtQ2Vj0yVS05WnkRtwaKgn1IqD7vJQZID89Lpit 8OhoRREfoPPn/ssR6sxpqg78kRQVXG/E5RDN5pE6id5MK3m5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHINUXJSuaPAljiUeQVFMANy4VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmHBquJivwWLu4xXwflHO7F8/k9FrvUCQpQexN6za01oh7gLnaeICKO yIKVQUY0dms7jQNt4p1ObsyavdOyt+Jqsu8nS6RrnEifFGggFq+Bk7kf6MhasU55 hNAPvi9lmh1pyDanBUtBEDGHtCraaHibc1IXaBmDmOVpNHl4iXIDiSQUBSdD/OwO xKqd+BYDdyLwp8fvv1/x30I8cwMFGJfiko4yylrUvvuVPuCrYzAZChBas2ikNawb wJwtSfkVVf6yofd0XD/l7J2li0CcMbBlSLPqCdk4S5kWQWNwkU3Jj0sbNrxPwcl/ wmvy+s6ps7IRdSgGduCo7OtRdyUQx1I= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:01 2025 by rpki-client