$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: Qy4lYO3Z4BQ7DC7ndju2nAkQzR+J5b07Z6ttKGqpmT0= Subject key identifier: 5D:3A:3B:D3:FC:F7:2A:E9:F9:D6:D6:B4:B8:71:19:28:27:15:20:31 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584B8BE21F2719153A3B547FDF80 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1f:27:19:15:3a:3b:54:7f:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=6b684c0e-fd83-424c-9ee0-daf524429fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:40:ee:86:5a:f7:15:cc:68:b0:88:7a:53: b5:04:81:24:92:cc:8c:d0:1c:2f:08:87:d6:07:ac: f2:0c:ef:60:9c:10:7b:2c:4d:3a:c6:d5:c7:68:54: 9e:50:56:f4:b0:af:3e:ea:ee:6f:4e:58:e9:90:04: 4b:7c:ad:b1:60:af:f5:7a:e5:15:49:d4:05:aa:a8: e0:88:84:f1:5d:26:04:57:16:89:ee:00:cd:4e:b8: e8:fe:8b:1f:2d:5f:e3:90:ba:6f:0d:19:96:3f:70: 95:f7:48:78:fc:b3:a9:08:5d:db:1d:b1:f5:b8:5b: e5:fc:ff:d6:cd:9b:e3:38:29:35:7f:80:ec:5b:82: 89:47:ef:cb:4a:9f:ef:81:e1:71:ea:ff:9c:5f:66: 31:5f:97:dc:09:09:9f:01:f5:0d:3e:9d:18:bc:2a: 03:8e:84:9b:38:64:11:a9:2a:8d:81:29:ee:d6:19: eb:1b:82:af:b5:93:9d:80:89:57:0c:13:fc:51:b6: af:c6:83:6b:77:29:c9:d1:3f:1e:87:f9:91:e9:78: c2:5e:07:3f:cf:73:93:78:74:6f:61:5c:c6:92:2c: 5e:64:0e:90:1b:6d:6f:49:cc:94:43:eb:0a:ae:87: f9:1d:b0:69:28:84:4b:31:13:82:8d:d0:7c:2a:45: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:3B:D3:FC:F7:2A:E9:F9:D6:D6:B4:B8:71:19:28:27:15:20:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:1e:14:65:2e:29:bd:18:0b:76:e2:e6:0c:80:60:7d:6c: 4e:dc:50:1a:ef:e4:bc:23:e5:0f:0f:22:4e:d6:cc:37:eb:ae: f0:c0:d5:4b:9a:c5:76:f8:33:35:fc:84:eb:ca:a8:9f:2c:44: 7b:37:d4:e1:fb:aa:0f:73:37:bd:fa:37:ee:fb:a3:bc:e5:ff: 72:52:da:a5:92:59:cd:78:42:a0:30:30:40:81:3f:75:be:79: 8f:ac:ab:2f:cc:8f:68:05:d1:1e:0c:50:f7:e0:21:81:71:d3: 8e:1a:aa:00:9e:44:62:a6:1b:f9:68:6b:70:a3:2c:5d:7f:4f: ab:87:fe:4d:3e:79:56:19:93:89:ae:48:33:9f:c0:92:1e:be: 3a:16:06:f4:30:a3:ee:ba:30:e6:cd:f3:c0:55:ce:2a:22:76: fb:70:dc:33:03:8b:0b:4b:41:30:61:e8:9e:b2:58:4b:0d:37: 05:38:b5:a0:71:4c:36:97:d7:30:54:5b:ca:a8:c1:67:3c:d8: 64:2b:64:f7:11:09:3f:ef:d9:9d:c6:a2:cf:b8:d8:7a:dd:a0: b4:b5:dd:52:a0:84:8c:cb:d0:aa:52:a6:43:ed:d6:8c:26:bd: f1:e5:23:6a:d8:f0:83:a9:cf:0d:38:18:01:41:b7:16:34:ea: 30:a8:b9:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4h8nGRU6O1R/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NmI2ODRjMGUtZmQ4My00MjRjLTllZTAtZGFmNTI0NDI5ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngJA7oZa9xXMaLCIelO1BIEkksyM0BwvCIfW B6zyDO9gnBB7LE06xtXHaFSeUFb0sK8+6u5vTljpkARLfK2xYK/1euUVSdQFqqjg iITxXSYEVxaJ7gDNTrjo/osfLV/jkLpvDRmWP3CV90h4/LOpCF3bHbH1uFvl/P/W zZvjOCk1f4DsW4KJR+/LSp/vgeFx6v+cX2YxX5fcCQmfAfUNPp0YvCoDjoSbOGQR qSqNgSnu1hnrG4KvtZOdgIlXDBP8UbavxoNrdynJ0T8eh/mR6XjCXgc/z3OTeHRv YVzGkixeZA6QG21vScyUQ+sKrof5HbBpKIRLMROCjdB8KkWSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF06O9P89yrp+dbWtLhxGSgnFSAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZMHhRlLim9GAt24uYMgGB9bE7cUBrv5Lwj5Q8PIk7WzDfrrvDA1Uua xXb4MzX8hOvKqJ8sRHs31OH7qg9zN736N+77o7zl/3JS2qWSWc14QqAwMECBP3W+ eY+sqy/Mj2gF0R4MUPfgIYFx044aqgCeRGKmG/loa3CjLF1/T6uH/k0+eVYZk4mu SDOfwJIevjoWBvQwo+66MObN88BVzioidvtw3DMDiwtLQTBh6J6yWEsNNwU4taBx TDaX1zBUW8qowWc82GQrZPcRCT/v2Z3Gos+42HrdoLS13VKghIzL0KpSpkPt1owm vfHlI2rY8IOpzw04GAFBtxY06jCoubo= -----END CERTIFICATE-----Generated at Sun Oct 19 23:08:23 2025 by rpki-client