$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa File: d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa (raw, json) Hash identifier: NC9TYN5fPI8D+OYtmfnjoVoci8zaU79SGGbZdm//6es= Subject key identifier: 5C:61:C1:56:BD:E2:F2:0A:DA:F3:A5:72:94:BA:14:8F:E8:D8:32:2F Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584B944227C4890AE89776F8BA00 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 40232 IP address blocks: 192.82.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:27:c4:89:0a:e8:97:76:f8:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=0ac544c9-cedf-40c3-8a0b-068fc3b7df39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:a2:3a:ff:bd:22:84:96:9d:17:37:01:00: e4:9e:04:08:38:0e:1d:88:77:1d:66:85:d3:de:28: 62:4b:91:7f:e8:52:e7:22:c8:b9:9d:f6:90:79:72: 68:4b:a5:d3:aa:4f:cb:bf:44:60:78:ff:8e:08:cb: a4:43:7c:17:28:25:f7:b2:5c:c9:e0:d6:1f:0a:11: 9f:1e:46:b3:5b:5b:bc:de:3e:f3:a8:f9:72:0b:09: 48:d4:0e:49:e3:fe:a1:d4:e1:b8:ee:8c:ba:8a:75: b8:ce:20:f6:d9:e1:10:33:6b:b5:df:74:13:8b:3c: 5f:64:c8:b6:94:e1:20:5c:fd:47:ba:6f:a6:e1:6f: de:22:cf:f0:fd:d1:aa:53:60:c7:66:3a:4e:5a:f5: dd:60:dc:ac:54:ac:15:50:1c:0c:ac:72:5b:fb:5a: d7:8e:8c:cf:9f:75:74:35:ab:53:fb:8b:da:97:19: ab:fe:fe:b4:ef:8e:ef:1d:e8:b4:f1:82:11:cd:8b: 89:6a:9e:4a:07:47:01:b5:2e:96:f2:6c:5f:7f:9c: 22:b0:7f:d9:aa:63:df:47:ad:25:6e:19:28:ca:37: 9b:40:58:01:42:87:a9:65:44:fc:8c:9e:28:c0:a3: e8:60:8d:03:65:0e:14:4e:e0:6b:f9:d5:cb:0b:de: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:61:C1:56:BD:E2:F2:0A:DA:F3:A5:72:94:BA:14:8F:E8:D8:32:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 192.82.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:53:31:3a:ce:6b:18:16:94:ee:81:9b:a3:87:3c:8e:03:43: e4:c1:f3:35:79:28:28:d2:65:e6:51:51:5c:6c:c5:79:cd:5d: cf:d3:0e:0b:3b:70:27:67:72:e6:c9:17:08:fc:5b:12:b4:0d: 96:00:47:a8:a1:45:ad:64:67:41:d9:af:63:b5:4c:da:b1:0f: 32:68:8c:a7:6d:e5:53:e6:e5:5f:6b:3b:fd:c7:07:3f:3f:f7: 5f:3d:72:42:72:a2:f0:d5:26:2e:c6:d2:b1:fb:9f:9a:67:33: 4d:85:4d:ae:a5:cc:d5:35:c5:e1:13:ba:92:c5:78:4e:47:ab: 25:c3:88:c9:9b:7b:53:41:db:69:9e:48:67:05:be:1a:d5:f3: 79:1b:a9:9a:8b:19:d7:9e:9c:3d:04:37:45:b4:b7:65:d6:38: c0:13:2f:02:1d:b4:07:30:20:8a:f6:be:35:6f:a9:23:fb:7d: 3d:24:33:a2:23:62:73:65:51:25:c8:cb:30:4e:05:8f:45:36: f7:37:ba:7b:53:46:cc:c5:a0:08:96:3f:9e:7f:4e:d7:4d:31: 84:59:b7:f3:2b:e9:7f:8b:67:48:e5:91:b1:73:7a:0e:68:6b: f5:cd:6f:8c:84:42:1d:b1:9d:e2:88:16:1b:6c:91:1c:b2:00: e0:7a:0c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQifEiQrol3b4ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MGFjNTQ0YzktY2VkZi00MGMzLThhMGItMDY4ZmMzYjdkZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJWiOv+9IoSWnRc3AQDkngQIOA4diHcdZoXT 3ihiS5F/6FLnIsi5nfaQeXJoS6XTqk/Lv0RgeP+OCMukQ3wXKCX3slzJ4NYfChGf HkazW1u83j7zqPlyCwlI1A5J4/6h1OG47oy6inW4ziD22eEQM2u133QTizxfZMi2 lOEgXP1Hum+m4W/eIs/w/dGqU2DHZjpOWvXdYNysVKwVUBwMrHJb+1rXjozPn3V0 NatT+4valxmr/v60747vHei08YIRzYuJap5KB0cBtS6W8mxff5wisH/ZqmPfR60l bhkoyjebQFgBQoepZUT8jJ4owKPoYI0DZQ4UTuBr+dXLC96GPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxhwVa94vIK2vOlcpS6FI/o2DIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvZDhmYzQ5YzktMTQzMi0z YWQ1LTlhMTctYzNkZjI4MGNjNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwFIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVTMTrOaxgWlO6Bm6OHPI4DQ+TB8zV5KCjSZeZRUVxsxXnNXc/TDgs7 cCdncubJFwj8WxK0DZYAR6ihRa1kZ0HZr2O1TNqxDzJojKdt5VPm5V9rO/3HBz8/ 9189ckJyovDVJi7G0rH7n5pnM02FTa6lzNU1xeETupLFeE5HqyXDiMmbe1NB22me SGcFvhrV83kbqZqLGdeenD0EN0W0t2XWOMATLwIdtAcwIIr2vjVvqSP7fT0kM6Ij YnNlUSXIyzBOBY9FNvc3untTRszFoAiWP55/TtdNMYRZt/Mr6X+LZ0jlkbFzeg5o a/XNb4yEQh2xneKIFhtskRyyAOB6DG0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:00 2025 by rpki-client