$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa File: a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa (raw, json) Hash identifier: IpVL1TPmKRib9CUguOcaOI8EKO32lXs4yN465i0QPTU= Subject key identifier: 20:83:9E:AF:92:68:D6:F7:8B:F9:DC:C9:4E:CB:B4:81:7B:F6:5C:4B Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584B821CD08F47FF61D910FA29A0 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22418 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d0:8f:47:ff:61:d9:10:fa:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d0420d44-ab92-4b71-ab91-52cbe844e4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:ca:6b:31:5f:ed:51:96:c1:73:8f:61:a1: 33:bb:68:4c:4c:9d:57:fd:ee:fa:ca:92:7a:00:db: 93:71:f9:98:10:5a:94:7e:45:0a:26:91:fa:44:8b: f2:dc:11:a1:ca:c7:d1:ce:4d:c4:36:8a:62:38:35: 18:a1:8c:0c:a8:4a:73:5a:dc:83:5b:f7:d7:a0:05: 3f:04:38:a6:26:d6:4e:c7:5d:f7:61:9b:39:fb:de: 19:78:11:42:21:c1:f7:d7:64:90:df:5b:6c:15:8d: 0b:fc:87:31:10:a4:09:64:e3:7a:3d:84:99:68:a8: 2a:43:db:13:5d:9b:a4:7d:c9:25:c5:1e:f3:2b:23: 98:f8:28:6f:f7:f8:57:05:0f:7f:44:26:ca:40:72: 21:88:70:94:4d:ef:cc:b2:9c:a5:04:96:4f:02:65: ab:51:21:f1:51:4f:12:76:7b:ed:df:ba:88:17:3d: 38:fa:37:e6:8d:7a:8f:9c:d2:ce:c9:d4:c6:42:18: 9f:57:b2:e1:50:24:a5:78:57:55:4b:6f:2d:32:8f: 75:12:20:73:84:59:86:2f:ef:2b:29:28:c1:59:39: 97:78:72:fc:ee:c7:c0:17:e5:7e:b8:7e:85:85:cc: c5:31:00:fa:56:e3:6d:66:79:a6:75:ff:98:b0:89: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:83:9E:AF:92:68:D6:F7:8B:F9:DC:C9:4E:CB:B4:81:7B:F6:5C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a0:65:c4:f3:ea:d0:9c:89:e9:a1:68:42:b6:7e:7b:dc:06: 49:19:0b:cd:af:45:cd:45:c3:bf:3c:6e:29:80:07:19:de:65: 7c:a3:b2:20:ff:a8:5e:c9:f2:7b:b0:c8:a4:fe:33:42:0c:39: 5e:f5:26:f7:b2:d4:32:9e:48:07:27:29:26:62:46:34:a3:9e: d7:e7:34:91:2b:b7:87:ca:3d:4f:cb:0d:8c:5d:5c:3a:7a:52: 5f:8e:ca:81:5e:bf:8e:d0:95:56:09:37:d6:4f:8b:bb:1c:df: 02:3d:61:1e:fe:95:9d:b9:27:e9:bb:12:f3:7b:b6:ce:16:0d: 20:9b:51:24:d6:59:46:ab:f7:59:8b:8e:2d:de:2e:cd:12:11: 06:40:ac:65:0e:54:12:06:45:5a:8d:f2:7a:4c:8f:a2:07:ba: b5:db:17:24:42:e6:e8:10:e2:77:01:1d:7f:51:c4:d6:b5:bf: a0:94:37:91:00:ea:05:1c:a1:08:80:b8:9c:06:2e:93:62:93: 17:07:4b:71:12:c5:7a:e2:08:54:c9:c4:12:ac:24:da:b6:0d: e4:f1:58:26:3e:2a:5a:64:de:17:f9:55:cf:95:ce:4d:f5:50: cf:9a:6b:fb:79:8a:ba:96:85:71:a8:4a:d0:5d:95:3a:b5:2b: b3:9e:a5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNCPR/9h2RD6KaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDA0MjBkNDQtYWI5Mi00YjcxLWFiOTEtNTJjYmU4NDRlNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk23KazFf7VGWwXOPYaEzu2hMTJ1X/e76ypJ6 ANuTcfmYEFqUfkUKJpH6RIvy3BGhysfRzk3ENopiODUYoYwMqEpzWtyDW/fXoAU/ BDimJtZOx133YZs5+94ZeBFCIcH312SQ31tsFY0L/IcxEKQJZON6PYSZaKgqQ9sT XZukfcklxR7zKyOY+Chv9/hXBQ9/RCbKQHIhiHCUTe/MspylBJZPAmWrUSHxUU8S dnvt37qIFz04+jfmjXqPnNLOydTGQhifV7LhUCSleFdVS28tMo91EiBzhFmGL+8r KSjBWTmXeHL87sfAF+V+uH6FhczFMQD6VuNtZnmmdf+YsIk9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCDnq+SaNb3i/ncyU7LtIF79lxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYTlhZjZhNGYtYzgxNy0z M2RmLThkNTYtMjJhZmFhYjVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6gZcTz6tCciemhaEK2fnvcBkkZC82vRc1Fw788bimABxneZXyjsiD/ qF7J8nuwyKT+M0IMOV71Jvey1DKeSAcnKSZiRjSjntfnNJErt4fKPU/LDYxdXDp6 Ul+OyoFev47QlVYJN9ZPi7sc3wI9YR7+lZ25J+m7EvN7ts4WDSCbUSTWWUar91mL ji3eLs0SEQZArGUOVBIGRVqN8npMj6IHurXbFyRC5ugQ4ncBHX9RxNa1v6CUN5EA 6gUcoQiAuJwGLpNikxcHS3ESxXriCFTJxBKsJNq2DeTxWCY+Klpk3hf5Vc+Vzk31 UM+aa/t5irqWhXGoStBdlTq1K7Oepa4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:50 2025 by rpki-client