$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa File: d2fd1299-c743-3306-b786-763bde2fea18.roa (raw, json) Hash identifier: Amf7UJvhsmBMhrrhwiL9/8d/twSmcAOOB6LIQx0yXtY= Subject key identifier: 42:F1:DD:AF:BE:47:AE:8B:AC:AB:83:02:8D:1B:37:27:E7:56:6B:89 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584B110C04CBCC1AAD8B02F04580 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 399444 IP address blocks: 192.228.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:cb:cc:1a:ad:8b:02:f0:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=e69e7440-1a63-4aaa-b8f0-100d9bfe7693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:ff:30:11:6a:c1:a6:57:78:07:6f:f1:eb: 53:a1:73:70:7f:2b:bb:59:73:cc:05:03:e4:eb:da: 41:47:3a:68:6f:b5:5a:e6:a7:f0:2b:ed:40:b8:8b: 53:19:04:4a:a6:0a:f2:52:d1:92:21:0f:57:10:ad: 61:74:a5:27:9c:72:21:13:69:c0:5e:00:60:29:77: 15:f7:bb:57:c1:90:ff:2a:0c:ed:b2:a8:76:fa:42: 39:ba:af:7a:af:00:06:8c:94:da:e0:ef:8b:c0:77: 48:dc:32:af:6a:fb:6c:aa:27:d6:09:de:d3:fb:bc: 6d:48:7c:18:d7:d8:b9:ca:8a:40:db:cb:f0:27:70: d0:66:a6:7e:05:b1:19:09:61:0f:33:52:29:f5:54: 63:37:f0:e9:8a:2f:0d:88:25:52:62:80:ef:cd:5b: b8:9e:a4:b3:00:5c:e5:7b:c0:49:a4:82:0c:99:13: 16:4b:ba:01:9d:3b:fe:3f:53:51:9a:70:33:25:20: e8:46:2e:ed:8b:d5:c2:b1:1e:1c:05:37:29:83:a6: ce:0c:12:e2:c3:f8:75:ad:7d:fd:10:6e:da:34:af: 9c:a4:d6:b3:56:f6:3d:69:14:63:91:56:e0:6e:e9: 72:21:4e:8d:c0:59:ba:f9:2f:9d:c9:2a:76:bd:7b: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:DD:AF:BE:47:AE:8B:AC:AB:83:02:8D:1B:37:27:E7:56:6B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 192.228.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:70:16:4f:36:9c:c0:bc:75:a6:42:a1:49:8c:3b:2b:1f:fb: ba:9f:b0:b8:09:30:95:a8:6b:47:a4:b7:de:0d:35:4d:8a:a0: 7c:ca:28:0b:1d:71:90:a6:70:26:fd:d7:fa:bd:88:3f:0b:56: 82:49:18:34:cb:11:5f:81:42:75:21:3a:a7:a2:74:9e:dc:58: 96:1c:9d:ef:fb:da:18:e7:28:23:f4:12:e1:74:20:ee:f1:b6: f2:07:c0:42:16:44:16:e6:70:75:1a:d3:74:d5:0d:11:04:87: 85:43:6d:f2:48:dd:7d:ec:26:1d:77:95:75:01:85:79:a7:3b: ba:df:65:2d:24:9d:d7:86:03:a6:dc:7f:0a:5c:06:c9:31:29: 5d:4c:57:b1:42:9b:45:75:33:d1:4b:e2:6c:fd:ef:0d:a8:0c: fe:0a:f8:ff:20:70:a8:26:00:a9:62:7d:e9:2e:63:ee:21:5d: 18:dc:85:c8:94:0f:b9:68:b6:be:b2:fb:da:28:40:58:84:0e: 3c:77:3b:77:d8:38:38:06:8a:66:3c:30:60:fb:ea:61:26:60: 25:03:88:4c:ef:15:ea:83:40:85:52:83:29:b6:d8:45:7c:7a: 4e:86:10:ac:77:88:72:39:ef:34:3c:cb:5f:b1:66:2d:4d:6f: a0:ba:20:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDATLzBqtiwLwRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTY5ZTc0NDAtMWE2My00YWFhLWI4ZjAtMTAwZDliZmU3NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovj/MBFqwaZXeAdv8etToXNwfyu7WXPMBQPk 69pBRzpob7Va5qfwK+1AuItTGQRKpgryUtGSIQ9XEK1hdKUnnHIhE2nAXgBgKXcV 97tXwZD/Kgztsqh2+kI5uq96rwAGjJTa4O+LwHdI3DKvavtsqifWCd7T+7xtSHwY 19i5yopA28vwJ3DQZqZ+BbEZCWEPM1Ip9VRjN/Dpii8NiCVSYoDvzVu4nqSzAFzl e8BJpIIMmRMWS7oBnTv+P1NRmnAzJSDoRi7ti9XCsR4cBTcpg6bODBLiw/h1rX39 EG7aNK+cpNazVvY9aRRjkVbgbulyIU6NwFm6+S+dySp2vXv0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELx3a++R66LrKuDAo0bNyfnVmuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZDJmZDEyOTktYzc0My0z MzA2LWI3ODYtNzYzYmRlMmZlYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFwFk82nMC8daZCoUmMOysf+7qfsLgJMJWoa0ekt94NNU2KoHzKKAsd cZCmcCb91/q9iD8LVoJJGDTLEV+BQnUhOqeidJ7cWJYcne/72hjnKCP0EuF0IO7x tvIHwEIWRBbmcHUa03TVDREEh4VDbfJI3X3sJh13lXUBhXmnO7rfZS0kndeGA6bc fwpcBskxKV1MV7FCm0V1M9FL4mz97w2oDP4K+P8gcKgmAKlifekuY+4hXRjchciU D7lotr6y+9ooQFiEDjx3O3fYODgGimY8MGD76mEmYCUDiEzvFeqDQIVSgym22EV8 ek6GEKx3iHI57zQ8y1+xZi1Nb6C6IC8= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:31 2025 by rpki-client