$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa File: 8897f3ee-f080-3829-99dc-2b04ccc6a373.roa (raw, json) Hash identifier: V58h5LVgBlyUXzPpqWWQCBAIJDpkPpwcyqhj0AjboIw= Subject key identifier: 9E:13:89:61:3B:6F:FC:1E:F7:10:67:DD:33:5F:C3:9E:C1:FD:0A:E5 Certificate issuer: /CN=3f190b80-0d25-47ff-904c-8479d592f576 Certificate serial: 010D0C9F4328584B2FC1BAD0BA32E3FB394E7B40 Authority key identifier: DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397322 IP address blocks: 192.203.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ba:d0:ba:32:e3:fb:39:4e:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f190b80-0d25-47ff-904c-8479d592f576 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=05bf02ed-e052-4861-bbd8-4a2509253a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:f0:b0:74:cc:8b:82:d2:18:f5:14:61:d0: 21:be:91:98:41:a4:0d:71:76:b6:42:c0:f1:b0:b3: f0:4a:a7:e6:c6:76:3e:13:d0:c5:cc:63:5a:dc:7b: ab:c1:87:d2:63:7b:a3:47:ed:bf:65:7d:b1:89:3a: 38:b5:50:eb:b5:df:dc:07:1c:79:f4:e6:b8:31:5f: 7d:7a:29:fa:7f:65:32:d7:03:2b:6f:e2:ea:29:ec: 98:fa:5e:3a:ee:cf:78:ca:34:c6:a8:d4:9b:f0:89: f0:00:00:55:2d:9c:1b:ef:39:e7:62:e7:9d:6f:57: a2:9d:b0:69:4a:8c:d6:93:c5:3a:ae:9b:35:e8:eb: cd:98:9d:45:2f:ad:d6:96:af:0a:98:1f:81:eb:44: f4:06:70:60:eb:48:57:e9:28:db:be:81:82:fc:99: 07:9f:51:74:76:5e:d7:4d:a1:2a:be:67:82:3b:c3: 6c:48:62:59:67:8d:fc:1b:78:76:40:21:a2:0c:a4: 00:7a:75:51:86:d9:3c:a7:ab:9f:84:12:c0:c1:a1: 98:f7:bb:a9:a7:be:b5:5d:5c:61:e8:fb:0a:20:9e: ae:c0:38:87:a5:73:30:28:23:bb:a3:24:58:dd:89: 77:1d:3c:e7:de:93:95:ea:2f:62:31:ae:05:2c:13: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:13:89:61:3B:6F:FC:1E:F7:10:67:DD:33:5F:C3:9E:C1:FD:0A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/8897f3ee-f080-3829-99dc-2b04ccc6a373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576/3f190b80-0d25-47ff-904c-8479d592f576.crl X509v3 Authority Key Identifier: keyid:DC:35:ED:75:89:12:98:B7:A2:3E:F1:34:D4:67:BC:30:0E:76:BD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f190b80-0d25-47ff-904c-8479d592f576.cer sbgp-ipAddrBlock: critical IPv4: 192.203.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:dd:f0:9e:ba:3a:d5:bf:9b:ac:7c:eb:66:1b:46:32:ef:57: 67:54:bd:65:9f:3e:57:82:4e:a0:01:f5:ed:45:83:45:8c:40: 55:c0:f5:52:97:16:e9:87:7d:61:cd:21:4a:ed:f5:24:e0:de: a3:6a:0c:0a:03:a3:dd:0b:70:79:26:a7:a6:d6:fb:b7:97:f2: 82:38:d8:9a:f1:b1:3d:e0:9f:48:2c:99:18:65:fd:e4:88:13: bf:13:5c:f4:9c:a7:9d:f2:23:5f:94:73:98:74:d7:63:52:25: 75:d5:b0:f6:4e:c4:8b:c9:a2:ea:cc:4a:c0:a2:4b:ba:49:82: ab:a8:c3:c1:df:e8:54:4f:0e:07:7a:8e:90:c3:8a:06:a5:9a: bb:42:b4:30:0b:29:a8:a5:39:8b:5d:65:ee:9e:d3:24:3a:90: 90:56:66:68:74:bb:84:2f:67:50:9d:3e:65:f2:4e:dc:c5:23: fe:92:98:7b:08:dc:c2:bf:66:db:63:5a:35:ff:09:e9:0c:6d: e0:4a:4c:d9:13:21:a6:de:2b:cf:cf:f9:09:0b:2d:1b:df:ad: 0c:92:be:aa:e1:16:0d:49:61:17:2b:d2:88:f7:67:7e:be:bc: 8d:18:a2:4e:d2:ae:68:c0:5d:c1:49:39:9f:40:27:ce:e0:05: 9a:39:fb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbrQujLj+zlOe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxOTBiODAtMGQyNS00N2ZmLTkwNGMtODQ3OWQ1OTJm NTc2MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MDViZjAyZWQtZTA1Mi00ODYxLWJiZDgtNGEyNTA5MjUzYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDwsHTMi4LSGPUUYdAhvpGYQaQNcXa2QsDx sLPwSqfmxnY+E9DFzGNa3HurwYfSY3ujR+2/ZX2xiTo4tVDrtd/cBxx59Oa4MV99 ein6f2Uy1wMrb+LqKeyY+l467s94yjTGqNSb8InwAABVLZwb7znnYuedb1einbBp SozWk8U6rps16OvNmJ1FL63Wlq8KmB+B60T0BnBg60hX6SjbvoGC/JkHn1F0dl7X TaEqvmeCO8NsSGJZZ438G3h2QCGiDKQAenVRhtk8p6ufhBLAwaGY97upp761XVxh 6PsKIJ6uwDiHpXMwKCO7oyRY3Yl3HTzn3pOV6i9iMa4FLBMPEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4TiWE7b/we9xBn3TNfw57B/QrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjE5 MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5ZDU5MmY1NzYvODg5N2YzZWUtZjA4MC0z ODI5LTk5ZGMtMmIwNGNjYzZhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2YxOTBiODAtMGQyNS00N2ZmLTkw NGMtODQ3OWQ1OTJmNTc2LzNmMTkwYjgwLTBkMjUtNDdmZi05MDRjLTg0NzlkNTky ZjU3Ni5jcmwwHwYDVR0jBBgwFoAU3DXtdYkSmLeiPvE01Ge8MA52vRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjE5MGI4MC0wZDI1LTQ3ZmYtOTA0Yy04NDc5 ZDU5MmY1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjd8J66OtW/m6x862YbRjLvV2dUvWWfPleCTqAB9e1Fg0WMQFXA9VKX FumHfWHNIUrt9STg3qNqDAoDo90LcHkmp6bW+7eX8oI42JrxsT3gn0gsmRhl/eSI E78TXPScp53yI1+Uc5h012NSJXXVsPZOxIvJourMSsCiS7pJgquow8Hf6FRPDgd6 jpDDigalmrtCtDALKailOYtdZe6e0yQ6kJBWZmh0u4QvZ1CdPmXyTtzFI/6SmHsI 3MK/ZttjWjX/CekMbeBKTNkTIabeK8/P+QkLLRvfrQySvqrhFg1JYRcr0oj3Z36+ vI0Yok7SrmjAXcFJOZ9AJ87gBZo5+3s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:38:06 2025 by rpki-client