$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa File: adb992f1-1226-30cc-9ac8-4a06351806b6.roa (raw, json) Hash identifier: 94ALBiz+OENCaaWJxOkuUpCxRZRL5O+wJ6mUi+IcLU4= Subject key identifier: E3:E1:10:99:41:BF:AE:5E:1B:CD:0F:5A:E8:20:A0:23:15:10:03:BF Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584B1806E6526AFF871A42837D00 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 3855 IP address blocks: 192.40.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e6:52:6a:ff:87:1a:42:83:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=643d2d0b-c623-4432-9c74-d686598a44fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:59:0f:37:8d:a2:93:c2:9d:be:42:9d:5e: 5f:0b:69:a2:0e:6f:f5:b5:71:2a:b2:4e:0f:e7:31: 59:8e:1f:a8:13:33:24:81:2b:9c:b7:25:4f:74:c8: 39:3a:9f:f8:8b:90:69:48:ba:36:1f:97:13:00:ce: ba:ec:26:39:d7:84:15:6e:71:0d:02:a9:ae:7b:1e: 9f:96:ab:65:1e:ba:e6:d7:8d:0f:29:b9:78:db:43: be:c7:92:26:96:e7:9d:10:71:83:d5:e1:74:53:d1: d8:a6:e9:95:8d:b8:da:c0:b9:82:15:a3:54:6f:43: 20:ed:20:21:aa:99:78:48:74:99:4c:93:a7:ff:af: 2e:af:ba:3d:59:c7:3d:96:0d:72:5f:f4:fe:84:12: 01:e3:1c:3a:5c:20:2b:00:5e:a1:dc:c0:bb:62:08: 98:87:94:3c:ce:5e:c5:32:1a:25:20:ed:3f:e7:07: b9:01:6a:87:24:f1:bb:8b:eb:da:c6:6c:c2:90:4c: c2:45:6f:31:c4:a6:bd:27:6e:1e:24:19:ea:33:3d: 1f:6f:df:2b:8c:69:87:91:dd:c7:31:13:54:d5:5d: 0a:1b:6f:df:98:6f:cd:1f:83:76:8b:63:c2:58:bf: e8:ec:3b:2d:7f:bb:44:e9:dc:d7:85:53:6f:fc:ee: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:10:99:41:BF:AE:5E:1B:CD:0F:5A:E8:20:A0:23:15:10:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv4: 192.40.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b0:c0:90:36:3f:90:f1:cd:2c:c1:4e:5a:32:74:eb:ea:42: eb:7f:dd:04:23:2e:0c:17:b3:fb:4e:b6:16:f7:77:b5:af:ca: 13:5b:b5:e6:c9:5c:70:1a:30:f2:15:27:78:82:17:a6:12:02: 7e:7b:9b:07:e9:e5:a5:83:3c:cd:95:a0:46:36:bb:33:df:3e: 48:04:1a:a9:fe:61:da:30:a6:62:ca:dd:52:07:5b:8c:39:f1: 6b:0f:e8:70:de:8f:80:e8:bd:22:a2:da:a2:45:c9:80:fc:e2: d6:f9:8d:37:89:16:0a:3a:aa:44:e7:cc:05:3f:f9:97:21:3b: a6:30:75:fb:a1:50:91:33:ac:71:f2:ea:98:6d:02:53:b3:57: 12:8b:a4:4d:d0:71:9c:a2:7e:fc:9c:b9:af:32:3b:8f:22:46: 80:4c:85:45:2d:ac:9c:7a:23:fd:66:fa:b7:76:b8:90:57:6b: 84:77:12:85:66:01:64:8d:30:1d:a1:44:6c:c1:9a:b0:df:4e: 5f:31:ef:22:b3:90:25:7b:7c:b2:a5:5e:cd:0c:68:c6:2f:fd: 9e:3c:8a:92:02:3f:b9:7c:50:05:bf:92:ce:83:ed:90:07:83: 3d:0f:a5:9f:89:6a:82:62:1e:ef:9d:71:7a:72:d9:c3:f9:46: 5a:05:b7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuZSav+HGkKDfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjQzZDJkMGItYzYyMy00NDMyLTljNzQtZDY4NjU5OGE0NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66tZDzeNopPCnb5CnV5fC2miDm/1tXEqsk4P 5zFZjh+oEzMkgSuctyVPdMg5Op/4i5BpSLo2H5cTAM667CY514QVbnENAqmuex6f lqtlHrrm140PKbl420O+x5ImluedEHGD1eF0U9HYpumVjbjawLmCFaNUb0Mg7SAh qpl4SHSZTJOn/68ur7o9Wcc9lg1yX/T+hBIB4xw6XCArAF6h3MC7YgiYh5Q8zl7F MholIO0/5we5AWqHJPG7i+vaxmzCkEzCRW8xxKa9J24eJBnqMz0fb98rjGmHkd3H MRNU1V0KG2/fmG/NH4N2i2PCWL/o7Dstf7tE6dzXhVNv/O5XcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPhEJlBv65eG80PWuggoCMVEAO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvYWRiOTkyZjEtMTIyNi0z MGNjLTlhYzgtNGEwNjM1MTgwNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwChUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSwwJA2P5DxzSzBTloydOvqQut/3QQjLgwXs/tOthb3d7WvyhNbtebJ XHAaMPIVJ3iCF6YSAn57mwfp5aWDPM2VoEY2uzPfPkgEGqn+YdowpmLK3VIHW4w5 8WsP6HDej4DovSKi2qJFyYD84tb5jTeJFgo6qkTnzAU/+ZchO6YwdfuhUJEzrHHy 6phtAlOzVxKLpE3QcZyifvycua8yO48iRoBMhUUtrJx6I/1m+rd2uJBXa4R3EoVm AWSNMB2hRGzBmrDfTl8x7yKzkCV7fLKlXs0MaMYv/Z48ipICP7l8UAW/ks6D7ZAH gz0PpZ+JaoJiHu+dcXpy2cP5RloFt38= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:34 2025 by rpki-client