$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa File: 2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa (raw, json) Hash identifier: wEMzskzagflr8rYorilkKMsmZ1J3ehZz/6Z/UUm0Tqw= Subject key identifier: 16:0A:9F:99:9A:35:7C:91:E9:DD:4D:8B:9F:DA:09:5C:03:14:B5:A3 Certificate issuer: /CN=b02b5a1e-c575-48d8-ad0e-3a3e1d032110 Certificate serial: 010D0C9F4328584B0B769D4E86A9CE0A57FD7AE0 Authority key identifier: 2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 31830 IP address blocks: 192.40.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9d:4e:86:a9:ce:0a:57:fd:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b5a1e-c575-48d8-ad0e-3a3e1d032110 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=9dd7f474-3b3f-4ce8-8bad-b8775aa2afed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:e3:95:96:c2:15:7d:6b:44:ac:33:45:6e: 99:9b:81:47:ba:56:b4:4b:02:de:fe:70:58:d4:57: fe:ec:bd:5d:64:b2:f5:d3:c9:82:ec:e7:7c:a7:57: 96:af:eb:c1:0e:1b:31:8c:a5:9d:93:57:ae:94:0c: 40:c1:42:be:0a:4a:df:88:a0:a8:f9:6c:41:d9:83: 94:a2:12:0b:f4:78:35:01:23:30:7f:e8:d8:68:83: 4b:37:50:40:66:61:6e:23:a3:ce:14:bc:76:4f:11: 51:82:77:a3:9c:4f:b4:e0:2c:f4:4a:62:bb:22:23: 16:92:56:61:ee:06:9e:8a:75:fe:7e:65:58:ed:1e: 8d:dc:40:c7:7c:cb:06:b1:60:5b:a8:73:95:f6:ee: 32:58:6a:c3:ad:45:38:90:7c:ed:39:9b:0e:7d:78: 3f:62:2e:d6:13:cf:5c:54:7a:32:16:6c:1a:8e:48: 1b:02:60:8d:bf:bc:c5:26:33:7e:76:78:9b:eb:5c: 2e:b3:e4:e7:b2:da:bc:79:ab:97:a2:af:14:5d:f6: 0d:29:5a:b0:6c:a0:f9:a5:32:19:be:fc:46:b7:0d: 1a:6c:e9:e8:1c:c2:18:d3:0b:74:ef:7e:06:eb:ec: d9:77:d0:1f:ed:50:53:f3:a4:f4:8c:4c:66:4d:93: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:9F:99:9A:35:7C:91:E9:DD:4D:8B:9F:DA:09:5C:03:14:B5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/2ac3f1e9-5fa1-3480-be7e-6093481625b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.crl X509v3 Authority Key Identifier: keyid:2B:8B:68:E9:63:83:9C:CE:62:11:46:CC:6B:97:61:91:F7:0D:EB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02b5a1e-c575-48d8-ad0e-3a3e1d032110.cer sbgp-ipAddrBlock: critical IPv4: 192.40.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a7:dd:ed:92:88:61:f3:f2:83:bb:dc:cf:7c:2a:69:47:c2: 67:3f:91:14:5a:51:69:59:70:a7:9e:38:93:01:1e:f0:8e:b1: fe:7e:1f:c8:a2:4a:57:58:b8:9f:f4:35:ec:cb:09:8b:77:f7: bc:a1:f9:35:e0:9a:17:1c:2a:ea:b5:c4:c8:75:67:f3:9b:20: c9:9c:89:1b:d0:90:8f:3a:a9:8d:34:14:e9:01:8c:5f:18:42: 5e:6f:0e:1c:1a:9d:ae:6a:8b:7e:b4:fb:25:bf:4d:dd:fd:7c: 33:68:1f:d4:da:65:d4:d4:d5:e9:80:e3:e6:2b:47:a5:b8:81: 35:89:6d:e9:1c:a3:2f:39:f9:91:b6:9c:58:d4:6a:36:f9:02: bf:b8:a9:50:dc:3b:7a:b3:93:07:28:bd:07:16:cb:f1:3d:dc: 3b:ab:c3:73:c6:ee:41:96:77:39:4a:f7:43:b0:b3:2e:77:91: 6b:61:fa:5a:67:08:a1:e0:99:aa:ab:5e:4a:d7:2c:a8:49:57: 8a:f8:03:e9:44:c5:1d:d4:60:3e:04:5e:bd:54:88:db:45:91: 98:8d:31:df:f2:94:c2:22:94:49:08:11:6c:21:46:f2:d5:06: 38:8a:7b:ad:e0:19:b6:d5:a1:74:4e:48:84:c7:aa:ca:25:c2: 1b:2b:f1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp1OhqnOClf9euAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjVhMWUtYzU3NS00OGQ4LWFkMGUtM2EzZTFkMDMy MTEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OWRkN2Y0NzQtM2IzZi00Y2U4LThiYWQtYjg3NzVhYTJhZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAnjlZbCFX1rRKwzRW6Zm4FHula0SwLe/nBY 1Ff+7L1dZLL108mC7Od8p1eWr+vBDhsxjKWdk1eulAxAwUK+CkrfiKCo+WxB2YOU ohIL9Hg1ASMwf+jYaINLN1BAZmFuI6POFLx2TxFRgnejnE+04Cz0SmK7IiMWklZh 7gaeinX+fmVY7R6N3EDHfMsGsWBbqHOV9u4yWGrDrUU4kHztOZsOfXg/Yi7WE89c VHoyFmwajkgbAmCNv7zFJjN+dnib61wus+Tnstq8eauXoq8UXfYNKVqwbKD5pTIZ vvxGtw0abOnoHMIY0wt0734G6+zZd9Af7VBT86T0jExmTZNmywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYKn5maNXyR6d1Ni5/aCVwDFLWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJi NWExZS1jNTc1LTQ4ZDgtYWQwZS0zYTNlMWQwMzIxMTAvMmFjM2YxZTktNWZhMS0z NDgwLWJlN2UtNjA5MzQ4MTYyNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyYjVhMWUtYzU3NS00OGQ4LWFk MGUtM2EzZTFkMDMyMTEwL2IwMmI1YTFlLWM1NzUtNDhkOC1hZDBlLTNhM2UxZDAz MjExMC5jcmwwHwYDVR0jBBgwFoAUK4to6WODnM5iEUbMa5dhkfcN67IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJiNWExZS1jNTc1LTQ4ZDgtYWQwZS0zYTNl MWQwMzIxMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGn3e2SiGHz8oO73M98KmlHwmc/kRRaUWlZcKeeOJMBHvCOsf5+H8ii SldYuJ/0NezLCYt397yh+TXgmhccKuq1xMh1Z/ObIMmciRvQkI86qY00FOkBjF8Y Ql5vDhwana5qi360+yW/Td39fDNoH9TaZdTU1emA4+YrR6W4gTWJbekcoy85+ZG2 nFjUajb5Ar+4qVDcO3qzkwcovQcWy/E93Durw3PG7kGWdzlK90Owsy53kWth+lpn CKHgmaqrXkrXLKhJV4r4A+lExR3UYD4EXr1UiNtFkZiNMd/ylMIilEkIEWwhRvLV BjiKe63gGbbVoXROSITHqsolwhsr8ZY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:08:47 2025 by rpki-client