$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: 2VgKr94sxWAvXCjZ2Dl1qK8NfDnQrmaa1e4kU6TEFXY= Subject key identifier: 49:4C:CA:EE:D8:3C:07:BE:6A:6C:92:28:73:94:C3:C6:B2:A2:A9:1C Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B583C8EED39B433F18E8E5280 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:ed:39:b4:33:f1:8e:8e:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=073f7fc9-c6aa-4ec4-a05c-864aa2b9b18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:b8:7e:54:2f:be:b0:fc:e4:5b:9a:0f:ca: 0e:79:b5:cc:4b:c3:e0:bf:d5:f9:b5:40:26:b7:b9: ad:59:58:77:c4:41:6d:ea:09:45:90:cb:d7:2e:4f: df:b4:76:11:3b:56:a3:95:15:4e:4b:0f:29:f0:96: d9:81:8a:1f:01:50:b1:d7:21:da:56:1e:cc:a8:70: 35:b6:40:bc:9b:39:52:93:48:de:1b:01:19:7d:a9: 7d:7d:09:fa:12:50:5f:13:3b:e1:35:5a:7d:38:c1: fa:4f:6b:e3:32:74:bd:07:1b:cf:83:03:43:27:2c: 5a:2b:1c:9f:c3:b3:94:f3:8c:f2:98:99:af:35:4c: bb:71:db:bf:47:d4:22:0c:0f:57:69:62:75:26:a8: 5a:c0:3b:fa:3b:4d:90:df:d7:d5:c4:01:33:ec:be: 52:fb:0d:5f:d6:bc:f3:5e:71:ef:77:90:a1:c1:a1: d3:ac:00:10:2c:4d:59:f6:1a:6e:e5:4d:5b:9f:5c: 73:4a:e0:b3:ab:50:79:b6:41:09:0f:89:b5:03:14: f4:e4:21:db:75:25:ec:26:f1:ef:42:bb:4d:b0:3c: de:af:07:66:52:59:19:bb:06:25:d3:3e:3b:e3:79: 3a:80:69:91:37:74:2d:b0:bc:6d:9d:c4:d4:39:b0: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:CA:EE:D8:3C:07:BE:6A:6C:92:28:73:94:C3:C6:B2:A2:A9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d8:b1:b4:56:8e:2d:3b:93:99:c0:56:fc:44:d8:fd:8e:f6: 6c:08:4d:d2:4a:7d:89:1a:1a:2e:46:b2:bf:cb:72:78:30:b7: 96:7a:a2:95:91:e8:f7:f8:3b:2c:30:8b:1d:56:74:c1:98:a1: 4e:9c:e0:15:3a:42:38:8e:53:ae:e9:86:c4:db:a1:92:32:2b: 5b:2d:0a:17:9e:08:3b:56:70:37:79:82:84:7d:f7:0e:8f:45: 35:82:ef:13:98:de:f1:2a:cb:b1:b8:bd:89:83:70:e5:c1:1f: b4:13:53:6c:0e:e0:8f:54:cc:ab:10:f5:43:36:b1:5a:cf:32: fd:5f:c7:b9:58:ff:9d:a3:d2:64:cf:f3:85:e6:ed:1f:ad:61: 14:68:8d:9d:19:f3:c9:2f:cd:40:1c:12:4a:58:bd:94:e4:c2: ff:82:4b:5b:6b:e9:f0:52:28:23:1a:37:0e:45:04:e5:d1:76: 8e:2c:c7:b7:bb:8e:2c:46:a8:54:83:3a:8e:1e:a5:32:75:fe: 68:2a:ac:d2:a5:18:7e:64:14:ac:a7:f7:cd:ad:63:13:0e:63: 44:a4:c8:46:a1:ea:d2:c6:02:f9:8b:43:90:e0:d5:0d:44:06: 03:42:4d:2a:b3:ca:4c:73:27:38:95:4a:d1:55:c6:d1:e2:61: 53:a8:c7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI7tObQz8Y6OUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDczZjdmYzktYzZhYS00ZWM0LWEwNWMtODY0YWEyYjliMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/+4flQvvrD85FuaD8oOebXMS8Pgv9X5tUAm t7mtWVh3xEFt6glFkMvXLk/ftHYRO1ajlRVOSw8p8JbZgYofAVCx1yHaVh7MqHA1 tkC8mzlSk0jeGwEZfal9fQn6ElBfEzvhNVp9OMH6T2vjMnS9BxvPgwNDJyxaKxyf w7OU84zymJmvNUy7cdu/R9QiDA9XaWJ1JqhawDv6O02Q39fVxAEz7L5S+w1f1rzz XnHvd5ChwaHTrAAQLE1Z9hpu5U1bn1xzSuCzq1B5tkEJD4m1AxT05CHbdSXsJvHv QrtNsDzerwdmUlkZuwYl0z4743k6gGmRN3QtsLxtncTUObBnAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElMyu7YPAe+amySKHOUw8ayoqkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbYsbRWji07k5nAVvxE2P2O9mwITdJKfYkaGi5Gsr/Lcngwt5Z6opWR 6Pf4Oywwix1WdMGYoU6c4BU6QjiOU67phsTboZIyK1stCheeCDtWcDd5goR99w6P RTWC7xOY3vEqy7G4vYmDcOXBH7QTU2wO4I9UzKsQ9UM2sVrPMv1fx7lY/52j0mTP 84Xm7R+tYRRojZ0Z88kvzUAcEkpYvZTkwv+CS1tr6fBSKCMaNw5FBOXRdo4sx7e7 jixGqFSDOo4epTJ1/mgqrNKlGH5kFKyn982tYxMOY0SkyEah6tLGAvmLQ5Dg1Q1E BgNCTSqzykxzJziVStFVxtHiYVOox0U= -----END CERTIFICATE-----Generated at Thu Nov 6 09:01:34 2025 by rpki-client