$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa File: af253897-34b0-302d-99ea-bc80edc69de5.roa (raw, json) Hash identifier: 7CzghyFmnm/6GXDiqUmbxuhmj6MUWRnghe2TeZ2DWO0= Subject key identifier: B8:4D:43:23:BE:8C:00:F9:2D:56:5C:EB:EF:FA:95:43:FF:6F:A9:95 Certificate issuer: /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Certificate serial: 010D0C9F4328584AECC12E68A03FBE394ACAE980 Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 32450 IP address blocks: 192.107.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2e:68:a0:3f:be:39:4a:ca:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f39ef3d9-e54a-4e0d-ba7d-4e94cbbe81e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:5a:2f:92:2d:a9:d6:e6:0d:95:e0:d4:5c: e3:2a:89:f2:e9:d9:ef:6e:b0:5a:4e:3b:e5:d0:24: 21:7e:de:93:2f:ae:88:41:3d:de:d1:90:f9:af:6f: 02:0a:b9:62:5c:d2:16:a4:55:4a:51:c5:f8:3d:30: 7a:87:6b:e9:e8:67:83:78:6a:90:5c:ab:45:90:ec: 43:ec:85:08:c9:83:f9:70:d8:d5:2f:62:f3:53:f4: cf:0c:49:f3:49:bb:97:3c:12:fd:a4:68:ce:0a:9d: 18:cc:b8:e4:45:3b:dd:27:c7:c4:57:ef:5c:c9:08: 49:6e:24:05:4e:5d:67:f0:a9:92:a0:7d:08:1d:db: 16:83:0e:c8:78:47:90:f7:2d:b0:96:b0:c7:86:0b: 4d:ed:8a:fd:47:c3:2d:38:5b:ac:9e:c2:ae:c6:ea: 0a:82:7a:ba:cd:00:04:d4:55:ec:6b:a9:d1:3f:a7: ed:65:b9:fb:24:62:27:11:f1:2d:21:dd:6b:3c:e2: bf:d1:c1:d4:cd:e4:9c:a0:95:99:ce:b6:18:75:74: 9d:14:6b:ae:74:0c:ec:c5:44:35:a6:19:45:e5:a2: ae:36:e6:2a:a1:c0:6a:ca:95:23:57:20:00:c5:59: c1:e0:6d:4e:22:e4:28:a5:2f:c5:ae:0c:f2:bd:d4: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4D:43:23:BE:8C:00:F9:2D:56:5C:EB:EF:FA:95:43:FF:6F:A9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl X509v3 Authority Key Identifier: keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer sbgp-ipAddrBlock: critical IPv4: 192.107.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7d:e3:c6:5b:0d:a7:d6:64:0d:b6:f6:72:98:e7:a0:cd:67: 9b:fc:1c:ae:26:d0:7d:bb:e3:59:26:ac:06:89:c2:33:4a:f1: 0b:6e:85:a9:de:f4:1b:54:b3:51:8a:a6:53:ea:af:4d:c4:50: 10:50:25:00:57:ae:cc:9b:56:6f:92:10:d5:02:9e:7f:a1:22: 4f:7c:fa:3d:7c:0f:74:9a:8b:35:09:3c:c2:0d:11:70:29:50: fc:4a:40:00:cd:4f:91:5e:96:da:70:b3:26:e1:ec:89:fb:e9: de:d0:cc:a6:31:37:7c:c0:46:56:36:32:bc:aa:a9:bd:7d:a6: a7:eb:bd:aa:e4:89:70:9b:90:25:2a:23:26:70:38:8d:3d:49: d8:cd:ac:fc:de:17:a4:86:d6:e2:d7:c5:45:96:f0:c6:97:1a: 84:32:6e:0a:49:06:4d:ae:1e:e2:24:c2:c8:1d:da:54:df:d5: 23:c9:66:cf:52:fe:df:02:99:f1:dc:c0:18:24:76:8f:73:13: 23:94:cc:26:f4:10:bd:23:26:b5:fe:c8:bf:b0:7b:b6:aa:dc: 80:4c:b6:a9:35:09:f0:57:49:05:21:e3:81:80:ee:1e:73:43: a9:1b:77:5e:8c:34:b3:95:fc:9d:a2:48:db:67:e1:e3:4b:8e: 44:08:d3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswS5ooD++OUrK6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAyYTE3NzUtZTNlZi00ZDVlLWE5MzQtMWQ0MjA0ZTFj YTE4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjM5ZWYzZDktZTU0YS00ZTBkLWJhN2QtNGU5NGNiYmU4MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHhaL5ItqdbmDZXg1FzjKony6dnvbrBaTjvl 0CQhft6TL66IQT3e0ZD5r28CCrliXNIWpFVKUcX4PTB6h2vp6GeDeGqQXKtFkOxD 7IUIyYP5cNjVL2LzU/TPDEnzSbuXPBL9pGjOCp0YzLjkRTvdJ8fEV+9cyQhJbiQF Tl1n8KmSoH0IHdsWgw7IeEeQ9y2wlrDHhgtN7Yr9R8MtOFusnsKuxuoKgnq6zQAE 1FXsa6nRP6ftZbn7JGInEfEtId1rPOK/0cHUzeScoJWZzrYYdXSdFGuudAzsxUQ1 phlF5aKuNuYqocBqypUjVyAAxVnB4G1OIuQopS/FrgzyvdT7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhNQyO+jAD5LVZc6+/6lUP/b6mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJh MTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQyMDRlMWNhMTgvYWYyNTM4OTctMzRiMC0z MDJkLTk5ZWEtYmM4MGVkYzY5ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTAyYTE3NzUtZTNlZi00ZDVlLWE5 MzQtMWQ0MjA0ZTFjYTE4L2EwMmExNzc1LWUzZWYtNGQ1ZS1hOTM0LTFkNDIwNGUx Y2ExOC5jcmwwHwYDVR0jBBgwFoAUYDR67fAhJVvGkAa1VwaTNKpdNTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJhMTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQy MDRlMWNhMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9948ZbDafWZA229nKY56DNZ5v8HK4m0H2741kmrAaJwjNK8Qtuhane 9BtUs1GKplPqr03EUBBQJQBXrsybVm+SENUCnn+hIk98+j18D3SaizUJPMINEXAp UPxKQADNT5Feltpwsybh7In76d7QzKYxN3zARlY2Mryqqb19pqfrvarkiXCbkCUq IyZwOI09SdjNrPzeF6SG1uLXxUWW8MaXGoQybgpJBk2uHuIkwsgd2lTf1SPJZs9S /t8CmfHcwBgkdo9zEyOUzCb0EL0jJrX+yL+we7aq3IBMtqk1CfBXSQUh44GA7h5z Q6kbd16MNLOV/J2iSNtn4eNLjkQI02Y= -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:12 2025 by rpki-client