$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa File: 00a37318-afa8-384f-b4e4-90f8dd8523ea.roa (raw, json) Hash identifier: e0Sh+uKIFkY/kdAyDO0I0T0XTLS8mZk9bP75UNB+vXs= Subject key identifier: B3:73:7E:79:C4:7B:55:81:D3:57:7D:01:68:8F:5A:E2:4B:1B:C7:E2 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584B4D11E3894BCE7575D4A223E0 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 397373 IP address blocks: 192.154.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e3:89:4b:ce:75:75:d4:a2:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=a5297eb9-1420-4ac9-bfb6-23bdb6a4251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:57:78:1e:29:50:b2:7c:0f:8f:09:29:d5: ed:1a:b5:ac:31:88:df:b3:dc:ef:cc:92:de:df:2b: c1:4e:ab:b7:4b:12:30:2e:ed:5e:16:16:21:52:f7: 85:84:9c:99:a7:0b:bd:63:e2:c7:c2:c0:50:cf:d1: 52:5e:06:66:2d:71:12:a4:97:ec:cb:96:0f:ef:fd: 03:2c:a5:03:4a:f5:e2:40:c0:10:a5:b6:4d:3f:d7: 40:9d:17:86:ec:b8:4d:99:3d:6b:a5:84:04:7f:6c: c5:b7:f4:46:f0:9b:8a:ce:d7:a7:89:ab:dd:2e:28: 8b:0e:70:4d:03:0a:70:fc:b0:b9:af:f0:6d:59:dd: 7a:55:ff:f9:36:b5:57:bc:24:69:e5:72:88:18:50: d2:01:73:b9:02:e1:29:65:ba:1b:12:85:fb:b6:6c: 6d:cd:cc:83:33:84:54:a0:66:e5:22:3d:88:60:72: 04:14:98:c9:0d:2c:22:d7:5f:66:d4:8b:a2:2a:0e: 31:c2:97:6c:7d:d9:6a:bf:d0:a0:cf:57:af:2f:ca: 55:1b:cb:5c:88:03:8c:fc:6c:02:b5:88:22:16:bc: c0:89:f0:14:74:4f:54:2e:66:d8:42:aa:c0:93:cd: 3c:91:78:68:e2:12:09:c9:ea:38:e3:e7:bd:7a:f5: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:73:7E:79:C4:7B:55:81:D3:57:7D:01:68:8F:5A:E2:4B:1B:C7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0a:46:07:31:a3:d8:0f:58:a6:bd:6b:ce:7f:69:5d:37:f7: ec:1c:95:34:0a:c0:79:1d:27:5c:9c:75:ba:28:51:ab:7c:6e: a2:09:7c:c3:69:73:d8:12:3b:58:28:6b:82:bf:9f:7a:98:02: 17:4c:36:98:fa:8a:c3:ca:5d:c4:75:b5:d5:2d:ed:96:de:27: ea:c9:89:e7:61:40:ed:68:b6:31:56:64:71:87:fd:2e:65:0e: 07:c2:c4:50:44:32:74:57:90:16:a3:81:14:1a:9f:af:65:47: fb:a8:ed:e0:06:c4:29:77:3c:f8:67:cb:8c:d0:93:2a:9e:1c: f4:3e:d3:95:b8:0b:d7:8a:c8:b4:e3:bf:43:49:42:50:fb:8f: 5c:22:0e:0c:cd:ec:74:d0:88:7a:25:aa:e5:9d:e9:a4:01:a1: 9a:95:cf:1e:ce:76:d8:c3:e4:18:96:57:5e:98:fc:ed:d6:61: 03:11:cd:de:62:cf:5b:2d:ac:27:6a:15:bb:44:de:37:bc:c2: b6:82:66:16:ce:25:8c:10:f4:86:d4:10:23:d9:78:f4:9c:67: fc:68:54:df:c7:27:f0:64:d4:ed:3b:ae:9e:2a:4d:db:c6:61: 3a:df:eb:fa:bf:72:9d:4e:29:5c:04:fd:28:66:1e:22:b2:60: 2f:19:f0:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeOJS851ddSiI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YTUyOTdlYjktMTQyMC00YWM5LWJmYjYtMjNiZGI2YTQyNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwFXeB4pULJ8D48JKdXtGrWsMYjfs9zvzJLe 3yvBTqu3SxIwLu1eFhYhUveFhJyZpwu9Y+LHwsBQz9FSXgZmLXESpJfsy5YP7/0D LKUDSvXiQMAQpbZNP9dAnReG7LhNmT1rpYQEf2zFt/RG8JuKzteniavdLiiLDnBN Awpw/LC5r/BtWd16Vf/5NrVXvCRp5XKIGFDSAXO5AuEpZbobEoX7tmxtzcyDM4RU oGblIj2IYHIEFJjJDSwi119m1IuiKg4xwpdsfdlqv9Cgz1evL8pVG8tciAOM/GwC tYgiFrzAifAUdE9ULmbYQqrAk808kXho4hIJyeo44+e9evWooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNzfnnEe1WB01d9AWiPWuJLG8fiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMDBhMzczMTgtYWZhOC0z ODRmLWI0ZTQtOTBmOGRkODUyM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIKRgcxo9gPWKa9a85/aV039+wclTQKwHkdJ1ycdbooUat8bqIJfMNp c9gSO1goa4K/n3qYAhdMNpj6isPKXcR1tdUt7ZbeJ+rJiedhQO1otjFWZHGH/S5l DgfCxFBEMnRXkBajgRQan69lR/uo7eAGxCl3PPhny4zQkyqeHPQ+05W4C9eKyLTj v0NJQlD7j1wiDgzN7HTQiHolquWd6aQBoZqVzx7OdtjD5BiWV16Y/O3WYQMRzd5i z1strCdqFbtE3je8wraCZhbOJYwQ9IbUECPZePScZ/xoVN/HJ/Bk1O07rp4qTdvG YTrf6/q/cp1OKVwE/ShmHiKyYC8Z8Aw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:36 2025 by rpki-client