$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/21105ddc-2557-33d0-9dff-b5afeac8a621.roa File: 21105ddc-2557-33d0-9dff-b5afeac8a621.roa (raw, json) Hash identifier: GBZtZZnP719hcp4e5c2Wr1duHRsNYkkMgGP1fREolPc= Subject key identifier: D6:73:30:CF:72:AA:0D:8E:19:8C:AA:B5:78:D9:86:BF:26:84:03:BF Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584B4081AE7803763E524B341760 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/21105ddc-2557-33d0-9dff-b5afeac8a621.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 192.161.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ae:78:03:76:3e:52:4b:34:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5f381680-fa31-4a80-aa17-0cba17da54a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:c4:82:6b:f7:71:0b:13:f0:11:52:a7:53: 1e:c5:6d:54:62:08:3b:6a:42:cc:43:78:be:8d:cc: f9:ca:16:af:73:dc:39:aa:b2:83:a6:cd:2b:43:a1: 1f:31:87:b9:d9:e5:31:2c:41:5d:66:c8:c0:63:61: eb:f6:91:17:e8:01:ad:9f:16:cd:97:4a:41:ab:f4: df:00:4e:39:98:a7:8c:25:28:ff:a8:3e:a7:1d:e0: 46:38:4e:1a:75:4a:d1:83:64:1b:81:ae:be:af:74: f5:51:a7:0e:a5:93:45:78:71:34:4a:a6:ab:47:ad: da:9d:ce:7b:c0:14:08:91:a6:fd:34:9f:e3:d4:bd: 47:77:11:b6:98:81:19:46:5c:aa:5d:e8:07:f5:f9: 50:70:d1:df:14:a4:a2:64:d3:af:dc:5f:3a:dc:20: 01:73:ef:db:97:5e:22:b4:00:99:34:32:4b:0b:0f: 10:64:8b:6f:6d:27:63:c9:ee:35:63:a4:5d:9d:33: 84:09:2e:02:1e:e4:1f:30:bc:18:00:e2:a3:b0:09: 00:f4:a8:a9:3e:29:79:b3:d1:0a:b1:39:c0:43:8b: 06:3f:b9:57:ed:0f:ee:fc:e1:14:ec:27:3e:50:8d: 25:59:20:b7:61:6e:10:77:22:8d:26:04:85:cf:75: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:73:30:CF:72:AA:0D:8E:19:8C:AA:B5:78:D9:86:BF:26:84:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/21105ddc-2557-33d0-9dff-b5afeac8a621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:52:ae:de:48:c5:b8:25:2f:b3:ed:dc:31:e1:08:44:79:26: 8a:b7:ad:03:30:21:87:1a:a1:6a:8b:4d:9e:68:18:a7:1d:93: 22:02:88:cd:28:e4:f0:18:00:d0:4e:b8:2e:c8:6a:fd:c0:71: f3:aa:bd:a8:b4:44:06:8d:b7:a4:a9:54:d5:ac:ef:b8:ce:b5: 01:7f:b5:34:f5:76:b4:df:c3:94:33:13:c0:84:fe:1b:e9:9a: d1:62:10:12:c1:e0:43:4c:02:87:04:44:cb:0b:a2:89:6b:79: 05:95:1f:6a:33:97:50:96:4f:ce:55:5b:65:10:f8:88:c1:4a: 72:99:ff:b6:97:11:05:74:7a:0b:db:e0:b3:6b:66:66:dc:e0: 63:1b:bd:ff:6c:70:09:17:b9:1e:d1:70:5b:86:2d:32:6c:78: 37:0c:4d:cc:c9:2e:0c:d5:73:86:b0:77:75:23:f3:e2:d8:4b: b5:ca:e3:62:37:ba:32:1f:63:92:0d:3d:eb:d3:b5:67:37:df: 4a:db:f3:5a:57:b6:c9:3f:af:14:2b:79:b6:e3:aa:3f:fb:29: eb:77:0e:45:61:17:8c:b3:58:6e:37:0f:84:60:88:ae:09:a4: d1:b7:8f:28:b1:f8:86:53:72:25:de:80:11:37:38:2b:33:65: 26:af:5d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga54A3Y+Uks0F2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWYzODE2ODAtZmEzMS00YTgwLWFhMTctMGNiYTE3ZGE1NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguDEgmv3cQsT8BFSp1MexW1UYgg7akLMQ3i+ jcz5yhavc9w5qrKDps0rQ6EfMYe52eUxLEFdZsjAY2Hr9pEX6AGtnxbNl0pBq/Tf AE45mKeMJSj/qD6nHeBGOE4adUrRg2Qbga6+r3T1UacOpZNFeHE0SqarR63anc57 wBQIkab9NJ/j1L1HdxG2mIEZRlyqXegH9flQcNHfFKSiZNOv3F863CABc+/bl14i tACZNDJLCw8QZItvbSdjye41Y6RdnTOECS4CHuQfMLwYAOKjsAkA9KipPil5s9EK sTnAQ4sGP7lX7Q/u/OEU7Cc+UI0lWSC3YW4QdyKNJgSFz3UKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZzMM9yqg2OGYyqtXjZhr8mhAO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMjExMDVkZGMtMjU1Ny0z M2QwLTlkZmYtYjVhZmVhYzhhNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5Srt5IxbglL7Pt3DHhCER5Joq3rQMwIYcaoWqLTZ5oGKcdkyICiM0o 5PAYANBOuC7Iav3AcfOqvai0RAaNt6SpVNWs77jOtQF/tTT1drTfw5QzE8CE/hvp mtFiEBLB4ENMAocERMsLoolreQWVH2ozl1CWT85VW2UQ+IjBSnKZ/7aXEQV0egvb 4LNrZmbc4GMbvf9scAkXuR7RcFuGLTJseDcMTczJLgzVc4awd3Uj8+LYS7XK42I3 ujIfY5INPevTtWc330rb81pXtsk/rxQrebbjqj/7Ket3DkVhF4yzWG43D4RgiK4J pNG3jyix+IZTciXegBE3OCszZSavXWo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:12 2025 by rpki-client