$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa File: 7a1d4876-3def-3187-938f-10513510e226.roa (raw, json) Hash identifier: PeNzxlLgPfWkZPuHPJx2r3nxtA/lTRpbdtsx0ZSDuQA= Subject key identifier: 92:B2:53:82:7D:DE:23:E1:E6:63:ED:22:D2:6C:AF:F3:C2:3D:BD:1E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584B1AD177B4100AB7B23652EF30 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 192.19.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:77:b4:10:0a:b7:b2:36:52:ef:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=fc8bbedd-5624-419e-ae6a-ddd6484c2ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:f9:e8:3c:71:80:fb:b9:5d:05:98:45:64: ed:b1:da:42:32:2e:6b:1e:ca:94:b9:73:ab:43:7a: d9:ab:70:78:48:42:a2:ed:11:3e:04:c8:32:93:97: 02:18:b3:ac:b3:d9:0c:93:87:72:2b:ce:b8:c7:45: 34:62:d1:7a:4b:37:3b:17:8a:e3:8b:38:b6:73:ea: fb:07:48:a8:96:80:95:e4:23:55:c5:37:b4:d7:57: 28:fc:78:10:d9:d1:b0:5c:01:aa:80:4c:99:d4:a5: 13:9e:26:64:b1:c6:31:90:1f:fd:85:98:5d:7e:36: 9e:ae:0d:cf:34:7a:f2:ce:28:10:56:4c:d9:7a:8f: fd:53:4a:69:22:d5:63:da:ff:fb:12:03:bc:bd:a0: cf:d7:d2:7d:91:00:29:51:9d:72:fa:78:97:95:b6: 45:c4:0f:7f:28:b6:5c:f0:7c:c2:fb:ba:7f:fb:93: e4:2b:90:f3:31:7a:f3:e6:2c:f2:2f:b8:ff:f3:6b: a7:68:c3:55:38:a6:a9:5c:f7:c6:78:0f:2f:9f:5a: 82:7c:7f:a6:68:78:de:80:33:65:15:ce:87:b8:0a: 36:41:7d:c2:10:9a:89:03:25:43:64:f6:75:64:78: e3:44:16:3e:08:92:f0:ee:fa:d4:23:6b:dc:7d:49: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B2:53:82:7D:DE:23:E1:E6:63:ED:22:D2:6C:AF:F3:C2:3D:BD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9c:6b:52:cf:73:d3:0b:10:9b:f7:19:4f:19:a2:f5:2e:76: dc:1d:d7:c4:fd:2d:4e:9e:91:3e:97:f9:5b:73:b2:e7:c1:26: d8:62:e7:1d:69:f2:a0:65:de:44:70:f0:49:ef:0a:bb:9a:17: e1:01:3c:53:97:17:5c:d2:d9:3b:58:d2:71:9e:9a:13:4d:83: 70:03:4b:dc:b1:ee:71:5a:d7:cf:6f:52:5f:4f:cd:b4:77:bd: dd:f3:ec:dd:1f:61:87:66:4c:28:0c:7e:ff:2c:c0:9c:5a:ef: 89:68:86:45:01:8e:34:7d:4b:87:cf:ec:8f:b1:a3:ee:5a:e5: e0:01:9c:ef:1f:0e:80:92:5d:97:50:d6:50:77:6d:16:15:6c: 85:35:c3:8a:82:24:62:3e:1e:99:82:d2:4b:15:f4:0d:f7:32: 97:32:14:32:95:a5:73:4e:b4:ad:fe:be:97:47:da:7a:54:bd: 0b:0f:dc:1e:f8:ec:85:41:fe:58:69:08:cf:af:f0:c6:92:80: 96:76:95:2e:44:c4:49:c1:aa:18:3e:46:07:e8:c1:f4:16:1c: 4a:0a:79:98:4b:af:41:97:69:f2:84:ed:73:51:ac:6f:59:dc: af:57:b2:e1:69:8a:06:c3:bd:3b:32:52:94:f6:90:ed:c1:e5: 9b:b8:46:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xe0EAq3sjZS7zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmM4YmJlZGQtNTYyNC00MTllLWFlNmEtZGRkNjQ4NGMyZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQr56DxxgPu5XQWYRWTtsdpCMi5rHsqUuXOr Q3rZq3B4SEKi7RE+BMgyk5cCGLOss9kMk4dyK864x0U0YtF6Szc7F4rjizi2c+r7 B0ioloCV5CNVxTe011co/HgQ2dGwXAGqgEyZ1KUTniZkscYxkB/9hZhdfjaerg3P NHryzigQVkzZeo/9U0ppItVj2v/7EgO8vaDP19J9kQApUZ1y+niXlbZFxA9/KLZc 8HzC+7p/+5PkK5DzMXrz5izyL7j/82unaMNVOKapXPfGeA8vn1qCfH+maHjegDNl Fc6HuAo2QX3CEJqJAyVDZPZ1ZHjjRBY+CJLw7vrUI2vcfUlMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKyU4J93iPh5mPtItJsr/PCPb0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvN2ExZDQ4NzYtM2RlZi0z MTg3LTkzOGYtMTA1MTM1MTBlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSca1LPc9MLEJv3GU8ZovUudtwd18T9LU6ekT6X+VtzsufBJthi5x1p 8qBl3kRw8EnvCruaF+EBPFOXF1zS2TtY0nGemhNNg3ADS9yx7nFa189vUl9PzbR3 vd3z7N0fYYdmTCgMfv8swJxa74lohkUBjjR9S4fP7I+xo+5a5eABnO8fDoCSXZdQ 1lB3bRYVbIU1w4qCJGI+HpmC0ksV9A33MpcyFDKVpXNOtK3+vpdH2npUvQsP3B74 7IVB/lhpCM+v8MaSgJZ2lS5ExEnBqhg+RgfowfQWHEoKeZhLr0GXafKE7XNRrG9Z 3K9XsuFpigbDvTsyUpT2kO3B5Zu4Rh4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:52 2025 by rpki-client