$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa File: 617c09a2-b74a-348a-bb1b-065e2212399f.roa (raw, json) Hash identifier: atWKEZmRDgm2Nnr1Xdi6RNFsiSc+ZWzl3qFSL4YSoLE= Subject key identifier: D5:45:EF:85:0D:A8:5A:80:7D:78:06:B9:26:8E:8B:8D:3A:B1:2F:8E Certificate issuer: /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Certificate serial: 010D0C9F4328584AF9513C22339731CACB624980 Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 395635 IP address blocks: 192.101.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3c:22:33:97:31:ca:cb:62:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=06b3f641-12c0-4ec6-9cc3-0fa86b4b6a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:46:45:f1:16:9f:5c:ac:a4:a2:b8:7f:bc: 1f:b1:95:5e:45:ce:7d:95:a4:cd:ef:a4:0c:cd:c1: df:f5:68:33:4e:ea:cb:15:ea:36:58:a0:83:b3:30: 9d:85:26:69:57:64:6d:df:40:69:79:55:1e:26:bb: 54:76:96:f4:2d:1a:94:86:8d:5a:61:64:27:6b:c1: 6a:b3:31:ac:2f:1c:d7:c6:84:9a:6a:76:a3:70:cb: ba:58:f4:86:13:ab:ba:9a:72:cb:2c:7b:a8:8f:22: 57:72:81:d1:e4:7b:bf:1f:43:c5:0d:e3:20:83:cc: 37:26:ad:50:1b:46:0f:0d:4b:4d:50:b7:b0:4d:14: d3:d6:33:3c:f8:c5:4f:35:88:f6:b5:78:6a:4e:fa: 0c:79:c7:11:a6:00:bd:b8:02:6e:43:51:0d:42:c1: a1:a3:43:79:bc:93:b5:41:7c:f6:bd:cb:42:85:8a: 12:50:b8:66:0a:4c:7f:99:ab:ee:e6:5d:32:e1:51: e3:b6:99:63:fc:1e:93:42:04:e7:74:a4:11:47:0b: bf:c9:02:95:86:dc:26:5d:e7:58:b6:1e:fc:f4:ad: b1:91:66:63:b9:cc:fe:ed:05:98:78:52:6d:d1:70: dd:e2:d6:88:5d:72:02:57:1e:3e:d5:13:4c:11:de: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:45:EF:85:0D:A8:5A:80:7D:78:06:B9:26:8E:8B:8D:3A:B1:2F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl X509v3 Authority Key Identifier: keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer sbgp-ipAddrBlock: critical IPv4: 192.101.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:45:63:6b:99:41:3f:7f:9c:45:34:83:f6:96:83:18:8e:6f: d1:09:cc:d5:de:05:79:f0:34:0c:04:73:12:d7:95:97:90:11: ef:bc:2e:ba:8d:5e:0f:c1:63:b8:69:ac:d7:a6:79:f9:43:30: 22:1c:7e:85:57:fa:8e:57:bf:15:fc:cb:63:91:bf:b4:92:c4: 89:3d:04:54:87:20:e8:66:82:0f:10:31:97:09:5b:6b:90:2f: f9:ae:69:3a:7c:4f:df:1f:30:8d:53:bd:bc:ae:ea:6f:7b:82: 7e:e7:e0:8b:a3:2b:c6:01:6b:69:27:4b:ac:61:2d:00:0b:f8: cd:74:43:c2:cb:90:e6:5f:f1:6d:fc:22:09:54:f0:b7:81:03: 06:77:cd:37:59:e7:2a:31:74:8e:b9:6c:0f:b3:d3:ab:f8:0d: d1:54:3f:fe:e0:76:80:35:82:34:9b:a5:a2:66:e3:46:de:11: 51:e8:dc:92:f4:1c:a9:3d:f2:33:e2:94:81:53:5a:ee:f0:61: 50:42:04:37:d6:04:be:9d:d5:cc:e2:a9:e2:d8:09:dd:e6:ac: 4e:ef:26:18:59:ff:85:92:88:e1:ef:c5:e4:3a:ca:f7:bd:82: c1:fd:d8:04:e7:8b:1d:98:60:e6:74:a5:6e:2e:9c:f4:b4:c1: 54:6a:78:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTwiM5cxystiSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZjY2NkZjgtZTc3MC00YzRjLWFiZDEtYzhiNjMyMzg1 OTRiMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDZiM2Y2NDEtMTJjMC00ZWM2LTljYzMtMGZhODZiNGI2YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv25GRfEWn1yspKK4f7wfsZVeRc59laTN76QM zcHf9WgzTurLFeo2WKCDszCdhSZpV2Rt30BpeVUeJrtUdpb0LRqUho1aYWQna8Fq szGsLxzXxoSaanajcMu6WPSGE6u6mnLLLHuojyJXcoHR5Hu/H0PFDeMgg8w3Jq1Q G0YPDUtNULewTRTT1jM8+MVPNYj2tXhqTvoMeccRpgC9uAJuQ1ENQsGho0N5vJO1 QXz2vctChYoSULhmCkx/mavu5l0y4VHjtplj/B6TQgTndKQRRwu/yQKVhtwmXedY th789K2xkWZjucz+7QWYeFJt0XDd4taIXXICVx4+1RNMEd44uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVF74UNqFqAfXgGuSaOi406sS+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNj Y2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIzODU5NGIvNjE3YzA5YTItYjc0YS0z NDhhLWJiMWItMDY1ZTIyMTIzOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZjY2NkZjgtZTc3MC00YzRjLWFi ZDEtYzhiNjMyMzg1OTRiLzNmY2NjZGY4LWU3NzAtNGM0Yy1hYmQxLWM4YjYzMjM4 NTk0Yi5jcmwwHwYDVR0jBBgwFoAUeJRfTvj1o0JYuVXDwzkOF3DRE3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2 MzIzODU5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdFY2uZQT9/nEU0g/aWgxiOb9EJzNXeBXnwNAwEcxLXlZeQEe+8LrqN Xg/BY7hprNemeflDMCIcfoVX+o5XvxX8y2ORv7SSxIk9BFSHIOhmgg8QMZcJW2uQ L/muaTp8T98fMI1Tvbyu6m97gn7n4IujK8YBa2knS6xhLQAL+M10Q8LLkOZf8W38 IglU8LeBAwZ3zTdZ5yoxdI65bA+z06v4DdFUP/7gdoA1gjSbpaJm40beEVHo3JL0 HKk98jPilIFTWu7wYVBCBDfWBL6d1cziqeLYCd3mrE7vJhhZ/4WSiOHvxeQ6yve9 gsH92ATnix2YYOZ0pW4unPS0wVRqeAE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:23 2025 by rpki-client