$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa File: 356bd502-68bb-3607-a737-1dd0380dea93.roa (raw, json) Hash identifier: 6TyyGtQcb/OntX6fmrYlhe2oFkVQyy9a7h0s/u4AUr8= Subject key identifier: D9:20:95:B3:18:CF:AE:F7:F7:F9:1A:53:60:58:FB:39:31:E9:D3:26 Certificate issuer: /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Certificate serial: 010D0C9F4328584BC270571AB48C87FD20162300 Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 21976 IP address blocks: 192.231.207.0/24 maxlen: 24 207.200.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:57:1a:b4:8c:87:fd:20:16:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=6c2fb79f-0391-4eb5-9868-0613a924ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:6b:43:91:48:5f:23:61:fd:f6:6e:68:35: 9b:2f:5f:de:76:e2:70:9a:cf:21:a0:e6:ec:6d:a8: 20:8d:04:ee:9f:03:9f:15:24:24:36:ec:0f:87:3b: 92:42:c6:e6:de:a9:65:e5:a3:d9:f9:96:65:c7:f1: 42:29:9c:24:ed:78:6e:67:8c:40:f7:cd:d8:3c:3f: 56:0a:95:eb:4e:e3:a2:db:43:64:a6:d1:50:14:f9: 5c:1b:c3:79:b3:92:86:53:6a:83:1d:4e:6b:8d:33: 19:7b:20:63:e2:00:06:3a:ea:80:34:0f:74:52:8a: 32:5b:ca:2f:de:a9:89:f5:3b:15:bd:b9:fb:90:3b: a2:0a:83:d9:b7:97:14:47:9d:fe:0b:79:0f:dc:93: 8b:c1:54:07:f3:6a:36:1c:eb:4d:a0:11:ca:ca:9b: fb:86:55:82:a8:21:5a:64:58:5a:48:62:08:f4:0c: 49:83:5c:c7:a7:20:af:44:15:17:5d:de:e9:10:f6: 3d:e4:f0:38:ac:6b:5a:31:cf:84:b0:29:f3:63:7d: c6:9d:93:a9:e8:d3:a0:47:90:a9:75:35:f0:4c:41: a5:f5:85:55:05:08:65:1a:a0:22:5c:46:ef:34:d9: c8:07:b2:43:bb:c1:df:5c:31:c5:ff:24:57:8a:93: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:20:95:B3:18:CF:AE:F7:F7:F9:1A:53:60:58:FB:39:31:E9:D3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl X509v3 Authority Key Identifier: keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.207.0/24 207.200.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4a:b8:c6:aa:dd:7d:3b:5c:b3:10:88:6d:96:d9:52:8e:61: 52:bf:37:43:8f:67:9e:71:a1:da:97:cc:01:24:80:69:21:74: ba:64:b1:e2:05:1d:55:42:19:0f:c0:e7:0e:68:cb:cf:2f:1c: 67:9b:f4:e5:16:f3:ad:1c:51:38:c4:8b:ed:d9:57:f6:33:b6: bb:39:3c:b6:18:d8:ad:d5:fa:97:e1:8b:be:60:dc:ae:6c:1a: 16:d0:ee:d3:2d:11:22:36:7a:87:4a:de:b1:6a:c9:14:41:64: 4e:09:85:7b:7b:30:01:74:7c:fe:fb:22:42:69:1e:56:32:9e: 0b:09:0e:e8:b2:63:01:d9:2f:e2:d0:99:54:f9:5a:e4:18:20: 11:f3:a9:1b:58:32:2e:d7:8f:d0:77:c9:c6:c1:58:a0:b7:84: 79:8b:c5:23:9d:63:b6:77:a8:ec:fa:81:98:d4:cb:6e:7c:e2: 2a:5c:4a:a0:a9:d0:0b:b2:3a:20:d5:82:33:96:72:9b:02:17: b0:69:86:49:d9:f4:dd:4c:5f:b4:6f:13:e7:60:75:86:d4:3b: 6f:93:5f:51:56:87:95:72:cf:57:f2:dc:ca:f0:49:92:fa:af: f5:8e:04:ea:62:a0:ff:38:bc:4c:0d:21:7b:60:cd:e2:e3:a7: 13:94:00:9a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvCcFcatIyH/SAWIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2 YjFiMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NmMyZmI3OWYtMDM5MS00ZWI1LTk4NjgtMDYxM2E5MjRhYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLxrQ5FIXyNh/fZuaDWbL1/eduJwms8hoObs baggjQTunwOfFSQkNuwPhzuSQsbm3qll5aPZ+ZZlx/FCKZwk7XhuZ4xA983YPD9W CpXrTuOi20NkptFQFPlcG8N5s5KGU2qDHU5rjTMZeyBj4gAGOuqANA90UooyW8ov 3qmJ9TsVvbn7kDuiCoPZt5cUR53+C3kP3JOLwVQH82o2HOtNoBHKypv7hlWCqCFa ZFhaSGII9AxJg1zHpyCvRBUXXd7pEPY95PA4rGtaMc+EsCnzY33GnZOp6NOgR5Cp dTXwTEGl9YVVBQhlGqAiXEbvNNnIB7JDu8HfXDHF/yRXipNbUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNkglbMYz6739/kaU2BY+zkx6dMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4 NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvMzU2YmQ1MDItNjhiYi0z NjA3LWE3MzctMWRkMDM4MGRlYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE3ODQxMTItM2JiZi00MWM4LTlj MzItYmRiODVhZTc2YjFiLzFhNzg0MTEyLTNiYmYtNDFjOC05YzMyLWJkYjg1YWU3 NmIxYi5jcmwwHwYDVR0jBBgwFoAULF2EmYFdLcMooozsBRSfKeS2FzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4 NWFlNzZiMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwOfPAwQE z8igMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHNKuMaq3X07XLMQiG2W2VKOYVK/N0OPZ55xodqXzAEkgGkh dLpkseIFHVVCGQ/A5w5oy88vHGeb9OUW860cUTjEi+3ZV/Yztrs5PLYY2K3V+pfh i75g3K5sGhbQ7tMtESI2eodK3rFqyRRBZE4JhXt7MAF0fP77IkJpHlYyngsJDuiy YwHZL+LQmVT5WuQYIBHzqRtYMi7Xj9B3ycbBWKC3hHmLxSOdY7Z3qOz6gZjUy258 4ipcSqCp0AuyOiDVgjOWcpsCF7BphknZ9N1MX7RvE+dgdYbUO2+TX1FWh5Vyz1fy 3MrwSZL6r/WOBOpioP84vEwNIXtgzeLjpxOUAJo= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:59 2025 by rpki-client