$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa File: 1ea82c41-df57-34f9-b22f-123106d885e9.roa (raw, json) Hash identifier: Sb8muCqeqRrUXPZvSE8vg7lZie22Xre2M5SBfw/LAxs= Subject key identifier: 6F:F7:5C:EC:94:7C:B7:E0:F2:B2:99:18:C6:C6:93:1F:B1:4E:22:D7 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584B821CD0D9067D639D36655B80 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22418 IP address blocks: 192.157.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d0:d9:06:7d:63:9d:36:65:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=21f4d59c-9fd7-420d-98bf-8e61d61dce2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:56:ba:80:61:65:e9:e7:e6:61:32:27:f6: f4:c1:fe:c7:d9:c7:51:9e:2c:72:db:67:43:8c:22: 07:47:f5:b3:4f:8a:58:83:c5:32:47:3a:c7:09:5f: f1:7e:fe:1b:34:3a:8e:74:fa:91:08:06:78:cf:c3: 78:66:d7:8a:b0:02:50:12:ea:f5:bf:bb:ce:e5:bc: 9a:53:25:d7:10:95:18:5a:11:02:d1:20:72:ea:85: 17:1f:60:40:82:40:e5:5a:60:12:54:1e:e4:18:25: cb:e7:14:92:3f:f9:3f:cd:91:78:96:cd:bd:f2:26: ff:87:f9:51:cb:1c:df:9a:1d:74:1d:23:02:2f:42: 2f:64:00:86:8e:d0:53:8d:43:bf:17:6f:16:65:ee: 73:15:a4:f6:7a:64:18:9e:e1:ce:17:41:83:21:83: e6:3a:23:90:fa:37:84:48:bc:aa:d9:75:a5:cd:a6: 2b:48:21:e1:b1:6c:6b:17:7c:dd:5b:85:60:88:1d: fc:a1:24:c7:6d:68:76:e6:40:f2:86:ed:7f:ae:c3: f5:f8:ab:d3:04:c9:f3:72:02:08:75:f2:9b:91:03: 3a:00:ef:b1:f9:d4:5f:ed:56:ab:b9:63:fb:df:18: 19:b3:67:cb:4f:16:8f:6b:09:eb:d4:d0:60:86:7a: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F7:5C:EC:94:7C:B7:E0:F2:B2:99:18:C6:C6:93:1F:B1:4E:22:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:31:55:34:22:9a:bf:1f:0f:15:53:ac:ac:56:51:bf:c9:53: 07:d6:0e:fd:af:8e:44:90:13:5f:e9:36:29:a9:f0:87:b7:a2: d5:79:1d:8e:1a:22:c1:dc:c1:6f:0e:a9:00:ee:14:ce:22:e9: 19:ce:91:9e:c9:5a:87:fb:6c:68:a5:43:d1:36:3c:23:aa:24: 8e:bc:48:b7:a4:2b:75:f9:98:8f:53:46:43:48:83:5c:97:01: d4:a8:20:5f:9d:ce:5d:d4:22:af:35:87:d5:e6:5f:28:3f:32: 04:6c:81:5b:8b:52:eb:8d:c3:db:80:48:5f:dc:6f:ef:7a:2d: 0f:66:8e:b4:c2:32:65:19:f7:48:99:ce:45:89:7e:16:19:93: da:89:7e:0d:c8:12:6e:7d:1c:19:8a:28:4d:b3:cd:cb:e0:ae: 71:b0:7e:ff:c8:e9:89:c0:25:9b:3e:18:12:6c:61:7a:62:ce: f1:40:2d:75:b4:c1:a3:4d:d2:63:70:a2:03:b6:62:35:0c:15: 2e:04:49:f7:12:ac:e5:83:42:38:d1:17:c7:e4:95:d7:ad:06: 71:3d:b4:49:53:4d:86:de:f5:24:67:27:5f:5e:18:45:fa:bf: c7:7d:dc:7c:a4:5d:e9:6b:78:36:56:91:e3:c6:ad:03:e3:f6: 62:c6:0e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNDZBn1jnTZlW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MjFmNGQ1OWMtOWZkNy00MjBkLTk4YmYtOGU2MWQ2MWRjZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuxWuoBhZenn5mEyJ/b0wf7H2cdRnixy22dD jCIHR/WzT4pYg8UyRzrHCV/xfv4bNDqOdPqRCAZ4z8N4ZteKsAJQEur1v7vO5bya UyXXEJUYWhEC0SBy6oUXH2BAgkDlWmASVB7kGCXL5xSSP/k/zZF4ls298ib/h/lR yxzfmh10HSMCL0IvZACGjtBTjUO/F28WZe5zFaT2emQYnuHOF0GDIYPmOiOQ+jeE SLyq2XWlzaYrSCHhsWxrF3zdW4VgiB38oSTHbWh25kDyhu1/rsP1+KvTBMnzcgII dfKbkQM6AO+x+dRf7VaruWP73xgZs2fLTxaPawnr1NBghnqeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/3XOyUfLfg8rKZGMbGkx+xTiLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvMWVhODJjNDEtZGY1Ny0z NGY5LWIyMmYtMTIzMTA2ZDg4NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUxVTQimr8fDxVTrKxWUb/JUwfWDv2vjkSQE1/pNimp8Ie3otV5HY4a IsHcwW8OqQDuFM4i6RnOkZ7JWof7bGilQ9E2PCOqJI68SLekK3X5mI9TRkNIg1yX AdSoIF+dzl3UIq81h9XmXyg/MgRsgVuLUuuNw9uASF/cb+96LQ9mjrTCMmUZ90iZ zkWJfhYZk9qJfg3IEm59HBmKKE2zzcvgrnGwfv/I6YnAJZs+GBJsYXpizvFALXW0 waNN0mNwogO2YjUMFS4ESfcSrOWDQjjRF8fkldetBnE9tElTTYbe9SRnJ19eGEX6 v8d93HykXelreDZWkePGrQPj9mLGDno= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:42 2025 by rpki-client