$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/03dbd8a8-cf5c-3873-8738-6cb2473a4f6d.roa File: 03dbd8a8-cf5c-3873-8738-6cb2473a4f6d.roa (raw, json) Hash identifier: niixzLPQFx8Q4NxY2UIdYuawE8O6hUp9Lac8fP9S/VU= Subject key identifier: 34:A1:28:5E:40:EB:B9:C8:66:99:F9:32:B7:21:4F:97:B4:6D:0F:4F Certificate issuer: /CN=230a3802-b076-44ee-a0dc-8458662a269c Certificate serial: 010D0C9F4328584B7B220794A9D1F89486D4F5FC Authority key identifier: 93:F2:17:52:00:E8:BB:1B:D0:D9:72:73:E5:D0:E2:4A:E9:B0:11:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/03dbd8a8-cf5c-3873-8738-6cb2473a4f6d.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 637889 IP address blocks: 192.219.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/230a3802-b076-44ee-a0dc-8458662a269c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/230a3802-b076-44ee-a0dc-8458662a269c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:07:94:a9:d1:f8:94:86:d4:f5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230a3802-b076-44ee-a0dc-8458662a269c Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=156316c1-d593-4a55-b7f8-b5d7f52af801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:a6:41:04:3e:3f:a5:9e:f6:25:20:1a:a0: 10:08:ef:46:40:cd:c5:d7:a9:fb:49:df:06:53:38: da:3a:ba:32:00:9c:92:8b:c5:27:63:6c:fa:42:e3: 97:ac:61:d4:53:39:80:16:a5:ef:62:75:a0:b2:21: b2:21:bb:0e:d3:01:79:ae:27:da:05:ee:e1:56:29: 7c:5c:62:20:98:c7:3c:27:9c:31:51:9f:68:84:70: e2:2c:8f:25:6f:fb:22:40:50:c1:84:5f:19:3f:bc: 50:d8:c8:94:6c:a5:8e:b6:48:c4:a8:cf:3f:18:af: 51:37:51:f3:43:c2:49:89:e3:d2:ff:5f:96:5c:11: 64:ee:57:9e:15:a4:89:06:3f:43:a5:af:73:27:8b: 0f:44:8f:0f:93:ff:94:b6:2c:7e:3a:e3:60:3b:ef: 4b:2c:46:b8:fa:ba:bd:1b:b0:10:e8:9c:d2:c9:7b: c0:59:27:8e:7f:e6:9b:de:40:2b:d9:b1:4d:2e:46: 26:db:f8:66:03:4b:02:4e:23:ec:48:f6:f1:ea:46: c4:a6:ba:1d:5b:8a:fb:c2:38:a4:05:0a:a5:05:30: 29:77:1c:06:82:51:38:2f:38:25:37:dc:c5:34:6e: 21:bd:fa:09:89:c7:34:5b:73:b0:37:4c:d4:bc:19: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A1:28:5E:40:EB:B9:C8:66:99:F9:32:B7:21:4F:97:B4:6D:0F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/03dbd8a8-cf5c-3873-8738-6cb2473a4f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c/230a3802-b076-44ee-a0dc-8458662a269c.crl X509v3 Authority Key Identifier: keyid:93:F2:17:52:00:E8:BB:1B:D0:D9:72:73:E5:D0:E2:4A:E9:B0:11:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/230a3802-b076-44ee-a0dc-8458662a269c.cer sbgp-ipAddrBlock: critical IPv4: 192.219.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:99:75:32:04:66:a8:a0:9d:15:62:2c:b9:6b:47:b1:ee:86: 49:c5:ba:d2:b8:56:d8:6a:17:0a:e9:bf:90:64:a4:44:c6:69: e0:a8:9b:f0:18:1f:90:c2:93:91:9c:67:67:a2:95:ad:9c:a8: 40:86:57:cc:f4:1f:31:ca:70:77:96:63:53:a3:ca:94:c3:81: e4:40:a5:69:ee:11:7f:3f:20:10:75:a5:87:f2:7f:ca:12:70: 27:9e:13:b7:3d:23:94:50:3f:b8:5e:90:14:19:a6:93:63:ed: 12:85:90:e0:8c:33:08:ea:db:38:ea:75:77:e9:de:20:0b:79: 9a:12:fc:8f:4f:41:8c:4f:b8:ae:72:b4:78:2f:41:83:b9:a1: d5:b7:35:33:1e:3a:9f:62:ad:a8:b7:a1:28:ed:5e:0e:96:17: 9c:8d:dd:1e:04:eb:9d:ce:91:bd:b2:18:62:49:3b:27:2f:d6: 93:b3:9d:34:27:cb:1e:74:e7:b9:12:25:0e:19:0b:62:48:0a: 77:aa:22:8d:be:35:40:94:04:1e:90:43:9e:b8:2e:df:2a:2f: 6c:a4:18:bb:1a:ca:b7:6d:f7:27:83:fd:1f:9b:a3:59:59:8a: 4a:bf:96:07:db:e8:fe:89:7d:64:c7:fa:5d:08:ac:25:63:4f: 6e:05:d4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgeUqdH4lIbU9fwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMwYTM4MDItYjA3Ni00NGVlLWEwZGMtODQ1ODY2MmEy NjljMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MTU2MzE2YzEtZDU5My00YTU1LWI3ZjgtYjVkN2Y1MmFmODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+mQQQ+P6We9iUgGqAQCO9GQM3F16n7Sd8G UzjaOroyAJySi8UnY2z6QuOXrGHUUzmAFqXvYnWgsiGyIbsO0wF5rifaBe7hVil8 XGIgmMc8J5wxUZ9ohHDiLI8lb/siQFDBhF8ZP7xQ2MiUbKWOtkjEqM8/GK9RN1Hz Q8JJiePS/1+WXBFk7leeFaSJBj9Dpa9zJ4sPRI8Pk/+Utix+OuNgO+9LLEa4+rq9 G7AQ6JzSyXvAWSeOf+ab3kAr2bFNLkYm2/hmA0sCTiPsSPbx6kbEprodW4r7wjik BQqlBTApdxwGglE4LzglN9zFNG4hvfoJicc0W3OwN0zUvBkr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDShKF5A67nIZpn5MrchT5e0bQ9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMzBh MzgwMi1iMDc2LTQ0ZWUtYTBkYy04NDU4NjYyYTI2OWMvMDNkYmQ4YTgtY2Y1Yy0z ODczLTg3MzgtNmNiMjQ3M2E0ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjMwYTM4MDItYjA3Ni00NGVlLWEw ZGMtODQ1ODY2MmEyNjljLzIzMGEzODAyLWIwNzYtNDRlZS1hMGRjLTg0NTg2NjJh MjY5Yy5jcmwwHwYDVR0jBBgwFoAUk/IXUgDouxvQ2XJz5dDiSumwEfEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMzBhMzgwMi1iMDc2LTQ0ZWUtYTBkYy04NDU4 NjYyYTI2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKZdTIEZqignRViLLlrR7HuhknFutK4VthqFwrpv5BkpETGaeCom/AY H5DCk5GcZ2eila2cqECGV8z0HzHKcHeWY1OjypTDgeRApWnuEX8/IBB1pYfyf8oS cCeeE7c9I5RQP7hekBQZppNj7RKFkOCMMwjq2zjqdXfp3iALeZoS/I9PQYxPuK5y tHgvQYO5odW3NTMeOp9irai3oSjtXg6WF5yN3R4E653Okb2yGGJJOycv1pOznTQn yx5057kSJQ4ZC2JICneqIo2+NUCUBB6QQ564Lt8qL2ykGLsayrdt9yeD/R+bo1lZ ikq/lgfb6P6JfWTH+l0IrCVjT24F1KY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:54 2025 by rpki-client