$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa File: 1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json) Hash identifier: 5EMCaBMTUvVFWW33OeEKINbVDjfVSrV/6z2Q5qiWkMU= Subject key identifier: 78:A9:27:15:7A:2E:7D:FE:B8:CA:E0:90:5B:95:1B:C3:91:A5:0F:7E Certificate issuer: /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Certificate serial: 010D0C9F4328584B004BF17B896DEADAF62E8F00 Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 61317 IP address blocks: 192.48.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:7b:89:6d:ea:da:f6:2e:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=df245a54-95ab-4b02-b16e-a18b7e8e4760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:0d:3a:d4:1b:fa:ba:b3:b1:31:fd:3c:cc: 0d:ac:52:50:1e:0d:8b:98:e1:cb:f4:db:7e:dc:73: d2:81:92:46:db:08:e1:51:15:ff:de:16:af:22:3f: 77:52:4f:f1:ca:db:06:5a:97:1f:2a:23:2e:8d:62: 9c:b0:26:98:5b:fe:2c:a8:f9:2f:b4:23:4c:3e:4c: ef:82:2d:be:02:57:d1:6c:19:16:85:d5:82:22:24: f6:05:fd:02:3e:3d:7e:66:ef:9d:09:a2:45:e6:ed: e2:1e:82:a5:61:3a:cb:b1:ee:c0:39:5c:a2:17:95: 72:46:2b:58:83:3e:d7:2c:1e:0f:fa:df:24:73:e7: 1f:7e:ba:58:83:ea:e0:ba:65:30:d8:af:8d:e8:ad: db:6c:d3:d9:85:a5:36:5d:27:bd:8f:52:5c:fd:fe: 57:45:b7:2c:89:9d:c3:93:67:4d:5d:df:e5:c4:59: 8b:6a:f6:01:b4:c4:60:c3:40:42:72:7c:e7:c8:25: d5:18:2e:bc:22:0f:aa:4e:66:9b:74:91:6a:54:00: 71:b2:9d:20:8b:8a:b1:5f:3f:80:82:e6:9a:04:9a: 7d:e0:a8:34:86:68:55:b6:f3:89:c7:62:31:e6:23: c3:ec:c3:db:30:28:13:b4:3e:d8:86:f1:f2:ab:2f: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A9:27:15:7A:2E:7D:FE:B8:CA:E0:90:5B:95:1B:C3:91:A5:0F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl X509v3 Authority Key Identifier: keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer sbgp-ipAddrBlock: critical IPv4: 192.48.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d1:8e:87:08:3b:75:ba:f8:2d:bf:94:43:38:3c:31:6b:5d: 60:25:d9:9c:26:bc:58:3a:27:45:7e:9d:66:25:cd:7e:79:89: 9a:9a:fe:cc:75:4d:85:61:a0:23:35:6f:e0:ca:b5:5e:f3:b1: 0f:1f:65:c6:b2:57:8e:66:96:47:ca:58:89:0e:b1:8c:48:c3: 4e:2b:21:18:ce:a8:dc:c5:16:ed:ce:75:11:d1:0d:e3:02:20: 8d:cc:77:29:44:44:78:fb:28:6c:b2:6f:c5:1c:e1:89:94:52: 10:d7:22:44:8b:2e:57:9b:cd:0d:8b:45:e8:cd:b9:41:25:80: d8:62:39:61:5d:9b:b0:25:0f:c9:22:0e:ee:13:fe:51:e6:9b: da:73:36:bc:1b:0f:b7:26:f7:b2:08:de:3b:3e:3b:98:22:d9: f0:bc:61:e2:3d:d8:95:99:4c:a0:16:fa:26:ae:d3:6d:81:84: f7:5d:b1:54:6c:73:44:36:1b:27:71:cc:1c:a7:0b:c2:60:bb: 61:ac:0a:ed:78:de:07:76:73:03:ea:d3:22:bf:26:66:53:45: 59:37:74:32:82:fb:6d:bb:74:62:f4:1c:11:2d:e1:e3:5a:55: 98:07:7b:20:9d:c9:18:75:73:ea:9c:b5:fc:53:0d:20:60:fc: b8:8d:42:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/F7iW3q2vYujwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2 ZWIzMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGYyNDVhNTQtOTVhYi00YjAyLWIxNmUtYTE4YjdlOGU0NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0NOtQb+rqzsTH9PMwNrFJQHg2LmOHL9Nt+ 3HPSgZJG2wjhURX/3havIj93Uk/xytsGWpcfKiMujWKcsCaYW/4sqPkvtCNMPkzv gi2+AlfRbBkWhdWCIiT2Bf0CPj1+Zu+dCaJF5u3iHoKlYTrLse7AOVyiF5VyRitY gz7XLB4P+t8kc+cffrpYg+rgumUw2K+N6K3bbNPZhaU2XSe9j1Jc/f5XRbcsiZ3D k2dNXd/lxFmLavYBtMRgw0BCcnznyCXVGC68Ig+qTmabdJFqVABxsp0gi4qxXz+A guaaBJp94Kg0hmhVtvOJx2Ix5iPD7MPbMCgTtD7YhvHyqy+8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHipJxV6Ln3+uMrgkFuVG8ORpQ9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5 NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMWU1YTRhZGEtZGI1Yi0z MWE0LTg0OTItNzIwZDVlNWM5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0 ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3 NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2 ZjM1NzZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHRjocIO3W6+C2/lEM4PDFrXWAl2ZwmvFg6J0V+nWYlzX55iZqa/sx1 TYVhoCM1b+DKtV7zsQ8fZcayV45mlkfKWIkOsYxIw04rIRjOqNzFFu3OdRHRDeMC II3MdylERHj7KGyyb8Uc4YmUUhDXIkSLLlebzQ2LRejNuUElgNhiOWFdm7AlD8ki Du4T/lHmm9pzNrwbD7cm97II3js+O5gi2fC8YeI92JWZTKAW+iau022BhPddsVRs c0Q2GydxzBynC8Jgu2GsCu143gd2cwPq0yK/JmZTRVk3dDKC+227dGL0HBEt4eNa VZgHeyCdyRh1c+qctfxTDSBg/LiNQpU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:57 2025 by rpki-client