$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa File: d57b8855-f9bb-367b-821d-c56c2260256c.roa (raw, json) Hash identifier: NJLQ1lDbGKCnPFowUa5N7863Be8cnAW31rqhDpGDKKg= Subject key identifier: 38:F3:8A:37:B5:6B:11:E0:03:19:09:7D:60:BD:AB:57:82:E5:0F:AF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B1C36C61475274BF765AAF8C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 54994 IP address blocks: 168.235.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c6:14:75:27:4b:f7:65:aa:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=dd471045-e309-4ceb-bdb7-81f8e7e5c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:78:0c:a3:cf:77:13:8a:32:87:92:3e:57: 19:8e:86:38:fa:d4:f9:bb:31:23:63:ec:d6:dc:af: 6a:7b:05:b7:c6:c4:1a:07:45:a7:d4:4f:39:44:49: 89:97:13:85:2f:e7:20:12:2b:65:76:23:00:08:98: 6a:54:84:93:a4:d7:37:1b:48:7e:2a:a5:e0:10:fa: 61:58:ef:d5:c6:5b:ea:75:27:e8:a0:c2:0b:22:2a: 33:b5:fd:f4:69:de:9d:b0:65:8e:ca:0f:d2:01:38: d3:b3:ed:ce:e8:d8:81:c9:b4:1d:34:6c:37:b9:63: 84:d5:f9:5a:8e:91:12:42:cd:f5:ea:bc:68:53:70: d9:4e:20:22:dc:f6:6f:b7:f6:74:b3:ea:99:64:5f: 8c:9c:70:d9:08:79:23:08:f5:dc:a0:21:36:7f:fb: 1a:85:40:ed:fa:2c:a2:c3:ba:bf:22:41:da:43:da: 18:1f:56:dd:f6:42:e6:7e:d3:23:f2:b3:1b:47:95: bb:80:ac:56:d4:98:48:62:c0:12:59:66:85:5c:be: ef:4a:39:d1:d5:de:4b:08:42:a0:3a:7c:10:ff:82: 8e:37:f4:b9:11:a1:13:89:1c:7b:50:df:f8:06:f6: 4e:6f:65:3b:d8:f4:f6:cb:23:8a:d8:da:6e:2f:d1: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F3:8A:37:B5:6B:11:E0:03:19:09:7D:60:BD:AB:57:82:E5:0F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f4:85:e5:9f:62:6b:86:6e:a0:3e:e0:01:ca:0b:49:ca:0c: 7c:e0:e4:e6:ca:5f:83:4c:24:eb:75:0d:3c:09:18:d3:bd:db: 4c:5b:3c:49:24:9f:82:cf:e9:40:a6:29:89:7e:3c:7c:49:42: 89:1b:08:1f:de:dc:ff:58:69:ab:f8:77:6c:e3:94:5d:f5:f2: 9e:33:3e:63:03:6a:70:77:2c:65:f6:04:7c:88:f9:52:75:2a: 4a:38:ec:48:a3:33:25:28:25:34:d0:ce:49:2a:3a:34:32:a8: 9a:a3:45:3d:32:a7:d0:b3:12:a5:12:f7:c5:b0:78:8a:8e:48: b8:c0:45:a8:bf:3f:6b:fe:2e:11:34:64:62:25:bd:48:aa:f7: 81:43:a1:5c:51:84:d4:11:cf:a0:14:00:2e:34:23:f9:a1:d4: 6e:af:68:35:81:ea:73:2c:ca:76:1c:37:6f:bb:ad:93:05:b7: a2:75:a8:91:6c:4a:f7:4b:68:d0:4a:53:17:14:7b:7e:57:51: e8:2d:93:81:b7:d3:67:a5:48:d7:9f:9c:8f:5d:29:2c:df:66: 6d:e9:13:6a:b3:f5:04:b2:c9:64:70:4c:d9:f7:e4:04:f5:71: d2:5b:1f:2c:33:fc:e6:ea:4e:89:0c:b9:58:5b:51:dd:f0:22: b6:4a:63:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsYUdSdL92Wq+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ0NzEwNDUtZTMwOS00Y2ViLWJkYjctODFmOGU3ZTVjMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgZ4DKPPdxOKMoeSPlcZjoY4+tT5uzEjY+zW 3K9qewW3xsQaB0Wn1E85REmJlxOFL+cgEitldiMACJhqVISTpNc3G0h+KqXgEPph WO/VxlvqdSfooMILIioztf30ad6dsGWOyg/SATjTs+3O6NiBybQdNGw3uWOE1fla jpESQs316rxoU3DZTiAi3PZvt/Z0s+qZZF+MnHDZCHkjCPXcoCE2f/sahUDt+iyi w7q/IkHaQ9oYH1bd9kLmftMj8rMbR5W7gKxW1JhIYsASWWaFXL7vSjnR1d5LCEKg OnwQ/4KON/S5EaETiRx7UN/4BvZOb2U72PT2yyOK2NpuL9E1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjzije1axHgAxkJfWC9q1eC5Q+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZDU3Yjg4NTUtZjliYi0z NjdiLTgyMWQtYzU2YzIyNjAyNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG30heWfYmuGbqA+4AHKC0nKDHzg5ObKX4NMJOt1DTwJGNO920xbPEkk n4LP6UCmKYl+PHxJQokbCB/e3P9Yaav4d2zjlF318p4zPmMDanB3LGX2BHyI+VJ1 Kko47EijMyUoJTTQzkkqOjQyqJqjRT0yp9CzEqUS98WweIqOSLjARai/P2v+LhE0 ZGIlvUiq94FDoVxRhNQRz6AUAC40I/mh1G6vaDWB6nMsynYcN2+7rZMFt6J1qJFs SvdLaNBKUxcUe35XUegtk4G302elSNefnI9dKSzfZm3pE2qz9QSyyWRwTNn35AT1 cdJbHywz/ObqTokMuVhbUd3wIrZKY6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:35 2025 by rpki-client