$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa File: 09a930bb-55eb-3fda-8b57-c185efb5138d.roa (raw, json) Hash identifier: FrECxWzGen9I272fjQ4LtEWTWk9AWton4PuqxJfo0jY= Subject key identifier: 89:B4:E5:20:94:7F:A6:2F:AF:E8:DA:30:00:A5:B3:90:BF:C3:4A:27 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584B821CD1000A19715C5EBE4AC0 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22418 IP address blocks: 192.157.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d1:00:0a:19:71:5c:5e:be:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4ad1b3dd-2acd-4286-8d41-e813e2d9a338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:c4:10:f2:89:4e:53:01:3e:82:54:13:d7: 99:30:68:37:22:88:74:4f:25:38:86:82:a3:53:b4: 79:7e:26:4e:98:33:e3:2e:57:db:3a:9d:24:22:38: c3:93:f0:cd:e8:54:2a:ad:83:f8:fd:a3:bc:80:f5: 03:df:62:4e:4c:e9:d9:8e:70:4e:30:76:36:45:0a: 2e:ec:c4:e6:bd:97:2b:8b:c3:3f:04:a1:e5:ca:10: f4:00:a8:c7:bc:d3:32:91:e7:0b:19:46:22:a1:82: cb:e7:f4:9c:03:d4:ad:cc:18:4f:37:c9:d1:9f:3e: 9b:55:4c:bd:72:77:13:15:d3:07:70:11:b5:5c:5e: 4a:47:05:d8:02:f3:6a:25:15:39:7b:5c:36:4d:69: d0:0e:52:62:91:20:f2:0b:2c:ff:4e:f8:c2:87:72: fb:53:b6:2f:fb:37:be:37:a8:f8:5c:61:be:8e:ba: 64:0e:06:ec:99:96:e4:d7:d9:95:4b:00:1f:f8:53: 8d:1a:4b:83:2f:a5:cc:85:ac:9f:f5:16:07:8b:e3: 6d:23:26:1f:32:ed:f2:47:d2:e9:b8:2c:b6:52:d9: 22:80:fb:c0:06:0d:b4:b9:ae:27:c6:ca:92:de:aa: 57:6f:8f:df:23:1e:4d:f6:83:0c:90:e1:1d:8d:a2: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:E5:20:94:7F:A6:2F:AF:E8:DA:30:00:A5:B3:90:BF:C3:4A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:61:70:03:a0:8a:de:07:c5:44:9b:d1:25:22:53:11:e9:85: 3a:0d:7b:fc:0d:b5:b1:ec:e1:82:91:b7:4e:3c:0e:2d:b6:81: 42:2e:4b:b8:48:d8:f7:14:54:2b:69:3c:67:e8:0c:44:91:9a: 70:18:dc:2a:5c:df:dc:ec:24:61:ef:41:5d:34:92:c1:2f:54: e0:70:c7:7f:c9:24:2d:c4:92:06:ec:9c:ad:7b:95:1c:2e:f8: 98:60:b5:9e:42:32:89:88:ed:ce:9d:3a:45:09:58:f3:22:b4: ca:82:69:c6:66:6a:e5:35:8d:03:4b:2b:2a:4a:e6:06:f5:77: a7:37:f9:bb:91:d9:74:7b:5a:ee:62:e8:b7:a8:ca:b3:60:e0: 27:ee:70:1e:81:16:43:bc:82:a9:24:f9:f8:46:47:e4:15:fb: 3c:82:6f:81:f5:c5:f5:01:85:e8:58:ad:eb:ba:b6:43:3f:f7: 24:80:eb:aa:4a:a5:a4:6f:7e:db:75:ae:99:7a:1d:68:42:ce: 0b:4f:a4:5e:33:5c:f9:20:4f:2e:d1:16:f4:ee:48:c1:3f:0b: 73:59:47:f6:76:c5:1f:f7:52:a1:27:15:dd:9b:23:53:ee:27: d7:5c:08:76:1a:7a:33:73:19:7d:55:e1:5b:69:cd:71:34:7f: 3b:c8:a0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNEAChlxXF6+SsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NGFkMWIzZGQtMmFjZC00Mjg2LThkNDEtZTgxM2UyZDlhMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5rEEPKJTlMBPoJUE9eZMGg3Ioh0TyU4hoKj U7R5fiZOmDPjLlfbOp0kIjjDk/DN6FQqrYP4/aO8gPUD32JOTOnZjnBOMHY2RQou 7MTmvZcri8M/BKHlyhD0AKjHvNMykecLGUYioYLL5/ScA9StzBhPN8nRnz6bVUy9 cncTFdMHcBG1XF5KRwXYAvNqJRU5e1w2TWnQDlJikSDyCyz/TvjCh3L7U7Yv+ze+ N6j4XGG+jrpkDgbsmZbk19mVSwAf+FONGkuDL6XMhayf9RYHi+NtIyYfMu3yR9Lp uCy2UtkigPvABg20ua4nxsqS3qpXb4/fIx5N9oMMkOEdjaKs9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm05SCUf6Yvr+jaMACls5C/w0onMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvMDlhOTMwYmItNTVlYi0z ZmRhLThiNTctYzE4NWVmYjUxMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJhcAOgit4HxUSb0SUiUxHphToNe/wNtbHs4YKRt048Di22gUIuS7hI 2PcUVCtpPGfoDESRmnAY3Cpc39zsJGHvQV00ksEvVOBwx3/JJC3EkgbsnK17lRwu +JhgtZ5CMomI7c6dOkUJWPMitMqCacZmauU1jQNLKypK5gb1d6c3+buR2XR7Wu5i 6LeoyrNg4CfucB6BFkO8gqkk+fhGR+QV+zyCb4H1xfUBhehYreu6tkM/9ySA66pK paRvftt1rpl6HWhCzgtPpF4zXPkgTy7RFvTuSME/C3NZR/Z2xR/3UqEnFd2bI1Pu J9dcCHYaejNzGX1V4VtpzXE0fzvIoA0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:14 2025 by rpki-client