$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa File: c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa (raw, json) Hash identifier: 2phjaiVHwGEzDhJo9QssF4myoF8LVh0zWTOpPk8TRXY= Subject key identifier: 33:79:DB:2F:7C:AB:D1:75:E5:28:04:A8:0C:E9:C0:60:6E:71:9B:C8 Certificate issuer: /CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc Certificate serial: 010D0C9F4328584BAA97B7448601F0C9A9B66300 Authority key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 65003 IP address blocks: 192.75.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b7:44:86:01:f0:c9:a9:b6:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=87842a87-67bb-41fa-8619-11699fa2bfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:ea:ca:e5:31:06:8b:42:94:3a:ea:60:7d: 2f:78:f2:dd:25:57:11:ff:07:8b:b9:e4:46:c2:f2: f2:66:72:d5:80:6b:45:4a:56:78:4b:81:b4:26:c6: d7:38:2e:bc:6e:99:64:6c:45:b0:5e:74:8b:f2:1a: b6:f6:f7:d7:c8:ed:d4:7e:1b:12:df:20:f4:f8:b3: 6a:4f:68:2c:47:80:29:4d:63:1e:15:75:4a:eb:0e: 1e:ce:43:0e:7b:e2:d6:9f:b4:e9:82:54:9f:9f:ed: 22:79:da:e4:80:42:03:ef:35:39:41:dd:10:81:64: b5:b4:93:db:24:50:e5:6e:cb:40:73:bf:09:03:88: 94:a3:24:bd:02:2f:e9:25:de:17:36:fc:1c:98:ce: af:7f:af:5f:6e:43:26:65:95:c6:a2:b1:b3:0c:ac: a3:b3:f0:0f:53:ad:31:a0:3f:d7:c6:59:68:66:59: dc:39:c0:1c:36:1c:d1:2c:07:4d:24:9b:af:d9:f9: 75:54:39:f4:4b:13:78:f6:ff:c1:bf:d7:c0:59:a4: 9f:37:5a:a2:ea:cb:e3:ba:d6:1d:68:b0:9d:76:e5: 13:44:56:87:76:5a:9b:1a:f8:c9:8a:b7:cd:2a:3e: b8:b3:74:63:78:dd:ac:3c:7e:cd:69:18:bb:88:2e: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:DB:2F:7C:AB:D1:75:E5:28:04:A8:0C:E9:C0:60:6E:71:9B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl X509v3 Authority Key Identifier: keyid:8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer sbgp-ipAddrBlock: critical IPv4: 192.75.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f1:0d:11:a4:ca:77:0c:d6:6b:50:11:7a:56:a4:76:fc:a4: 73:cb:e3:3a:52:54:ae:de:e6:fc:73:25:b6:05:9c:4d:86:e3: d1:1a:f9:13:fb:41:ce:fe:20:01:c5:ce:69:24:ca:7c:5f:78: 03:9e:c2:da:ee:2f:3d:d0:39:5c:23:5e:0f:f9:54:39:15:ca: 95:db:6c:9b:79:8c:24:2d:43:40:e3:b0:2e:c5:84:b4:61:a4: c1:78:e2:73:59:d2:6b:f6:f0:45:31:96:21:98:5c:db:fa:02: 07:29:d5:ca:44:7e:d3:69:39:d0:d5:30:5d:48:12:a1:85:4d: 52:4a:6c:c0:5d:d2:05:c4:b2:7d:1e:72:16:4c:0f:68:70:2f: 8e:5f:ce:72:b1:eb:9f:29:73:f6:69:d7:69:50:d9:23:09:31: 3e:1f:df:55:d6:f0:3d:9b:bb:dd:52:2a:aa:3e:0c:31:3b:d0: fd:b4:07:1f:92:66:74:c6:93:5c:f7:4d:fe:97:ad:c6:98:ed: 8c:42:79:ed:46:c7:1d:92:be:c2:37:cc:14:e0:a2:62:16:f2: 34:75:4f:46:1e:10:e1:36:df:be:a8:df:30:ef:3e:b9:ed:21: c8:55:a6:05:7c:35:56:dc:20:2b:0f:85:6e:9b:d8:b3:51:a5: e8:b0:60:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7dEhgHwyam2YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliN2ExYWYtMTBiMy00ZDI1LWJkM2QtMDYzOTcxYjZh ZmJjMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ODc4NDJhODctNjdiYi00MWZhLTg2MTktMTE2OTlmYTJiZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXqyuUxBotClDrqYH0vePLdJVcR/weLueRG wvLyZnLVgGtFSlZ4S4G0JsbXOC68bplkbEWwXnSL8hq29vfXyO3UfhsS3yD0+LNq T2gsR4ApTWMeFXVK6w4ezkMOe+LWn7TpglSfn+0iedrkgEID7zU5Qd0QgWS1tJPb JFDlbstAc78JA4iUoyS9Ai/pJd4XNvwcmM6vf69fbkMmZZXGorGzDKyjs/APU60x oD/XxlloZlncOcAcNhzRLAdNJJuv2fl1VDn0SxN49v/Bv9fAWaSfN1qi6svjutYd aLCdduUTRFaHdlqbGvjJirfNKj64s3RjeN2sPH7NaRi7iC5g5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN52y98q9F15SgEqAzpwGBucZvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zOWI3 YTFhZi0xMGIzLTRkMjUtYmQzZC0wNjM5NzFiNmFmYmMvYzllNGU4ZjQtZWMwZS0z NGIyLTkyNzAtMmNjMzFjNmM1M2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzliN2ExYWYtMTBiMy00ZDI1LWJk M2QtMDYzOTcxYjZhZmJjLzM5YjdhMWFmLTEwYjMtNGQyNS1iZDNkLTA2Mzk3MWI2 YWZiYy5jcmwwHwYDVR0jBBgwFoAUjRrLyzyTdpOd8UmTIjaRJFSrYI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zOWI3YTFhZi0xMGIzLTRkMjUtYmQzZC0wNjM5 NzFiNmFmYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLxDRGkyncM1mtQEXpWpHb8pHPL4zpSVK7e5vxzJbYFnE2G49Ea+RP7 Qc7+IAHFzmkkynxfeAOewtruLz3QOVwjXg/5VDkVypXbbJt5jCQtQ0DjsC7FhLRh pMF44nNZ0mv28EUxliGYXNv6Agcp1cpEftNpOdDVMF1IEqGFTVJKbMBd0gXEsn0e chZMD2hwL45fznKx658pc/Zp12lQ2SMJMT4f31XW8D2bu91SKqo+DDE70P20Bx+S ZnTGk1z3Tf6XrcaY7YxCee1Gxx2SvsI3zBTgomIW8jR1T0YeEOE2376o3zDvPrnt IchVpgV8NVbcICsPhW6b2LNRpeiwYKQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:19:47 2025 by rpki-client