$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa File: 5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (raw, json) Hash identifier: kV89u/LaPGGqCUTeFbFALwmTOvoWezbCPJTHJCUAUo0= Subject key identifier: 30:B0:DC:82:7D:32:44:D7:C2:2D:CD:C9:06:0F:63:46:85:81:6D:3B Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584AEE269C62C7F713AE64951680 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 209 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9c:62:c7:f7:13:ae:64:95:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=8a86f725-5c4e-4717-8295-2631fbe686dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:0f:47:72:b1:51:98:99:3d:06:e7:43:2c: f8:dd:8e:30:3e:cf:39:cc:6e:76:08:67:2d:89:72: 62:8b:b0:90:81:05:06:10:62:79:18:64:f9:58:84: a8:ac:88:40:fb:cb:d9:25:d6:b2:40:d7:21:75:e4: f7:65:df:18:31:bd:de:ae:66:2a:58:c8:81:ea:27: 54:0f:83:df:60:e1:d1:08:24:08:01:9a:99:5a:f5: 81:91:3f:1b:a1:01:99:42:7e:0d:d6:7f:3c:5c:88: 1c:f6:a7:4f:08:9e:51:78:ad:19:48:ce:de:5b:4b: 7e:4d:f7:21:a0:0a:05:b8:1b:7f:b2:5a:e0:b2:55: 69:3f:ff:8b:f5:63:61:fd:98:dc:2e:ae:c2:92:21: 12:4c:6e:01:73:ad:58:cb:45:d4:1e:3b:ad:7f:8c: 6e:f9:6c:82:be:75:ca:d9:2a:99:97:f0:61:60:ee: dd:09:43:c9:ac:46:3b:db:1c:b6:fd:ce:5f:c6:cd: 40:06:51:60:4e:72:fb:ad:29:ee:91:43:3c:78:46: 54:cf:a4:a4:ed:49:74:14:e5:5d:da:45:df:ac:39: b5:b6:7c:e8:3d:26:e7:87:a2:dc:52:9d:10:da:c6: 36:37:82:ac:86:9c:35:80:f3:0f:62:4f:09:ef:79: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:DC:82:7D:32:44:D7:C2:2D:CD:C9:06:0F:63:46:85:81:6D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bd:d6:f7:35:18:96:10:43:44:01:14:b0:ef:2a:9d:39:64: 90:e6:5b:9d:9b:00:a4:52:1e:1e:b2:d4:ca:d6:5b:24:b5:70: 1f:b4:b0:08:12:72:f6:bf:72:23:60:13:30:7e:ae:64:53:8d: 1e:da:69:38:bc:37:9c:cf:4f:2f:eb:c9:9d:08:02:cb:32:37: 69:17:ea:09:d7:b1:72:d2:a9:f0:7b:5c:80:28:c4:72:2d:a4: 30:24:73:e4:70:71:5b:0f:af:ad:f8:12:cd:ab:f0:b0:5b:79: e7:6e:9c:15:d1:85:14:12:5d:9c:c6:a9:ba:ce:39:ee:83:fd: 9b:dd:45:fe:3b:b3:8b:fe:6b:cf:23:c6:e8:25:bd:0e:7b:5a: 1a:a3:51:fb:41:79:83:e1:d1:5f:b4:b0:3f:09:42:54:33:83: f0:0f:71:0f:48:fb:d8:5d:fc:c7:6b:41:ca:2d:e2:6c:92:7c: fe:9d:24:95:f5:d9:68:88:c3:30:f3:b2:06:af:8b:f7:92:4f: e1:f8:9a:01:1b:66:e5:af:47:ae:8d:e6:38:dd:ba:f1:2d:3e: c9:9a:51:ee:db:33:c1:c1:91:b8:fd:23:bc:5c:84:91:10:99: f4:82:2d:b1:90:2e:ff:fd:41:9b:82:74:bc:51:01:23:86:0e: c1:36:60:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpxix/cTrmSVFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk OGE4NmY3MjUtNWM0ZS00NzE3LTgyOTUtMjYzMWZiZTY4NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU4PR3KxUZiZPQbnQyz43Y4wPs85zG52CGct iXJii7CQgQUGEGJ5GGT5WISorIhA+8vZJdayQNchdeT3Zd8YMb3ermYqWMiB6idU D4PfYOHRCCQIAZqZWvWBkT8boQGZQn4N1n88XIgc9qdPCJ5ReK0ZSM7eW0t+Tfch oAoFuBt/slrgslVpP/+L9WNh/ZjcLq7CkiESTG4Bc61Yy0XUHjutf4xu+WyCvnXK 2SqZl/BhYO7dCUPJrEY72xy2/c5fxs1ABlFgTnL7rSnukUM8eEZUz6Sk7Ul0FOVd 2kXfrDm1tnzoPSbnh6LcUp0Q2sY2N4Kshpw1gPMPYk8J73mSuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCw3IJ9MkTXwi3NyQYPY0aFgW07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvNWYzZGNlZjUtMDQwNi0z M2NlLTg2NzMtOGYwNDQxM2M4Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe91vc1GJYQQ0QBFLDvKp05ZJDmW52bAKRSHh6y1MrWWyS1cB+0sAgS cva/ciNgEzB+rmRTjR7aaTi8N5zPTy/ryZ0IAssyN2kX6gnXsXLSqfB7XIAoxHIt pDAkc+RwcVsPr634Es2r8LBbeedunBXRhRQSXZzGqbrOOe6D/ZvdRf47s4v+a88j xuglvQ57WhqjUftBeYPh0V+0sD8JQlQzg/APcQ9I+9hd/MdrQcot4mySfP6dJJX1 2WiIwzDzsgavi/eST+H4mgEbZuWvR66N5jjduvEtPsmaUe7bM8HBkbj9I7xchJEQ mfSCLbGQLv/9QZuCdLxRASOGDsE2YAk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:36 2025 by rpki-client