$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa File: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (raw, json) Hash identifier: SQizz8981Tz8/dwv7U6qGnXjfe+jD24uQ0tWBhi5/O8= Subject key identifier: 39:C6:D5:C3:3E:42:FA:2E:11:77:00:20:1F:08:A1:D4:13:BA:9F:E8 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584B7F520F20D16653F3874D0F00 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 65068 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0f:20:d1:66:53:f3:87:4d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a69fe476-e2ee-4586-88c5-2dd33cb724bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:14:e0:9b:73:80:24:b5:9b:67:2f:78:48: 5e:1e:7e:c1:39:16:f5:87:4b:e1:aa:f4:df:9b:9b: e0:99:c7:df:06:ec:ce:27:b8:c4:c0:8a:a5:c2:8b: 26:b9:8b:d0:a6:d0:cc:72:3b:c4:c9:da:d0:5f:0a: 05:b8:34:83:8c:a1:2f:f5:72:50:5e:6b:a1:fd:65: 52:b1:f3:56:21:af:df:72:b0:93:c9:e2:b6:85:71: dc:c6:72:7e:77:b4:8d:c8:a4:cd:58:2c:e1:18:8f: b8:7c:d4:93:5d:fa:6d:63:ee:4e:1f:94:19:cf:3c: cc:64:46:d1:d3:a2:11:db:ea:30:91:0a:a5:25:1a: 36:44:03:5e:a5:2b:3b:02:db:fa:a0:bb:f3:96:3f: de:5a:73:55:d2:d0:74:bc:93:b9:3f:58:d6:44:88: 67:79:37:ab:71:1d:6e:a6:c8:5e:f8:40:88:b4:46: 39:70:d7:7b:38:08:54:21:76:df:27:9b:6c:58:05: 95:4e:f2:47:93:d3:59:85:c3:9e:c8:b8:e9:fa:1b: 17:15:c9:66:17:b5:d7:87:12:16:de:1e:90:54:20: 2a:e9:ad:c2:eb:c5:e1:55:fa:77:98:f7:18:46:89: 24:3a:c6:bf:df:37:db:d6:f4:05:bf:66:5c:7a:bd: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C6:D5:C3:3E:42:FA:2E:11:77:00:20:1F:08:A1:D4:13:BA:9F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6b:c4:ca:03:ab:7d:cf:7a:23:c8:5a:33:0c:1d:f7:dd:56: d4:36:f4:62:92:fd:9d:95:a2:01:6a:45:a7:ad:b4:85:0f:c9: 22:38:ec:69:ad:45:b3:84:f1:06:b5:ad:40:99:78:3d:4f:cb: 91:19:59:4a:d8:42:85:3c:90:6b:82:3f:4d:c1:94:48:69:19: 51:68:48:fe:20:98:66:cc:25:2e:68:0c:64:23:7c:7a:63:a4: 0f:1d:72:bc:6e:d2:20:50:f7:80:2a:38:eb:ae:f6:0d:4d:e9: f5:67:71:da:15:27:13:ec:03:96:6e:da:69:f8:89:af:b0:ed: 43:c2:f4:a8:f1:b0:46:82:cc:59:24:76:8b:69:1d:fd:52:6d: d1:b9:8d:de:1b:f3:91:85:33:ee:b9:9b:08:a1:d8:42:ea:03: e8:5c:55:bf:a1:9c:63:bb:61:4c:2a:84:cd:7f:e0:69:a7:ff: 4d:3e:65:81:9c:a9:62:17:27:94:1b:44:7e:98:42:8f:d2:33: 69:5a:a6:70:2c:a4:52:f7:dd:73:ab:e8:2e:87:37:15:20:a9: 42:78:c4:4d:a4:d6:34:44:d2:ea:be:23:11:56:a9:b7:35:69: 5d:c5:05:4a:8d:5c:6e:2b:35:33:b7:c5:5b:d8:fe:53:49:c7: b7:42:dd:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ug8g0WZT84dNDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTY5ZmU0NzYtZTJlZS00NTg2LTg4YzUtMmRkMzNjYjcyNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbwU4JtzgCS1m2cveEheHn7BORb1h0vhqvTf m5vgmcffBuzOJ7jEwIqlwosmuYvQptDMcjvEydrQXwoFuDSDjKEv9XJQXmuh/WVS sfNWIa/fcrCTyeK2hXHcxnJ+d7SNyKTNWCzhGI+4fNSTXfptY+5OH5QZzzzMZEbR 06IR2+owkQqlJRo2RANepSs7Atv6oLvzlj/eWnNV0tB0vJO5P1jWRIhneTercR1u pshe+ECItEY5cNd7OAhUIXbfJ5tsWAWVTvJHk9NZhcOeyLjp+hsXFclmF7XXhxIW 3h6QVCAq6a3C68XhVfp3mPcYRokkOsa/3zfb1vQFv2Zcer0yHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnG1cM+QvouEXcAIB8IodQTup/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvM2Y0NTU5Y2QtNTVlYi0z ZWU0LTk2YTYtMjJkMzdkYjM5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABrxMoDq33PeiPIWjMMHffdVtQ29GKS/Z2VogFqRaettIUPySI47Gmt RbOE8Qa1rUCZeD1Py5EZWUrYQoU8kGuCP03BlEhpGVFoSP4gmGbMJS5oDGQjfHpj pA8dcrxu0iBQ94AqOOuu9g1N6fVncdoVJxPsA5Zu2mn4ia+w7UPC9KjxsEaCzFkk dotpHf1SbdG5jd4b85GFM+65mwih2ELqA+hcVb+hnGO7YUwqhM1/4Gmn/00+ZYGc qWIXJ5QbRH6YQo/SM2lapnAspFL33XOr6C6HNxUgqUJ4xE2k1jRE0uq+IxFWqbc1 aV3FBUqNXG4rNTO3xVvY/lNJx7dC3UU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:35 2025 by rpki-client