$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa File: 934da524-4660-3a88-8460-1c35a63999e3.roa (raw, json) Hash identifier: R4GVVxSkRoVz2gD2cBwc4MQNpJyBFto/fq0cy4Jm6UA= Subject key identifier: 96:D3:9D:29:9F:E1:6C:B9:29:E5:30:BD:7C:95:05:13:C6:F5:44:E9 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584AA160DC3B020C606F04C58FA2 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22418 IP address blocks: 192.157.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dc:3b:02:0c:60:6f:04:c5:8f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=0fd964cf-588c-41a7-8f47-b4fad1084a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:1d:c5:ef:99:15:08:d2:60:16:5f:35:29: 14:d7:cc:67:72:3e:2e:89:f4:a6:ad:3e:59:fe:a6: 1f:ed:04:88:16:79:fc:ce:5b:a9:a7:8e:a6:06:d8: 2c:2c:e9:32:ac:a9:0d:b8:d4:b9:e0:d1:28:13:e2: 53:f5:48:ae:69:c8:91:2f:01:02:35:eb:02:68:69: 46:53:b7:54:5f:94:ef:69:4e:bf:df:ea:c3:44:1f: 67:27:f5:3b:42:d5:61:18:07:20:64:24:b5:4b:b3: 83:79:ac:76:8f:ac:0f:0e:44:44:3d:62:83:13:98: b8:05:23:85:9a:75:20:9d:28:83:34:72:f3:1c:34: b4:13:9e:36:56:fc:4a:f6:61:de:3f:e0:c1:27:df: ba:93:1c:70:10:a6:bd:db:8e:42:5b:93:9a:a2:ca: a3:b9:16:0c:38:48:27:df:fa:34:b6:58:a1:63:b1: 97:4c:73:19:7b:54:f1:da:b9:83:62:29:82:0c:53: b7:fa:83:03:7d:a5:06:fc:35:02:40:e7:72:d9:4d: 28:e9:22:e9:e0:7d:84:c5:72:0a:cc:06:fb:cb:a8: d7:7d:a7:1c:21:3a:a6:5d:47:b0:7f:fe:50:9a:60: cf:9e:c5:a8:ee:68:77:6e:74:b7:a3:09:e9:13:85: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:9D:29:9F:E1:6C:B9:29:E5:30:BD:7C:95:05:13:C6:F5:44:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fb:d7:53:2f:67:6a:43:05:58:a3:ed:db:e5:0d:31:16:cd: 0c:0b:2d:84:29:62:29:63:26:6c:8a:09:5c:fd:db:3f:78:13: 5c:ec:72:58:72:41:89:9d:82:0b:b4:a4:a4:f0:2a:9e:58:fd: 83:3a:d4:43:23:89:e9:fb:d1:67:0c:ed:ed:8a:e6:fb:94:90: 0e:8b:d7:37:c3:14:38:d9:12:a1:3a:71:42:82:b5:c3:ed:f9: a0:24:5d:dc:b0:cc:56:4b:91:5c:c6:5c:36:47:c6:26:f5:a1: de:ea:98:d0:aa:67:74:09:ee:ba:e0:8f:9f:b8:85:99:28:78: 9b:5a:b5:f1:0d:9b:b1:3a:27:02:01:88:de:33:f5:e8:32:4b: f3:74:94:2d:fe:7c:55:0e:57:38:43:64:5e:6a:cb:bc:54:dd: 01:3d:95:ef:d9:b9:29:2e:9d:25:85:42:e5:d3:c4:98:3b:29: b0:54:15:bc:c6:0d:93:8e:a5:9b:7c:fb:f8:65:59:47:63:31: 36:59:65:4a:41:b9:87:3b:75:a7:02:2a:eb:f9:20:77:2d:2b: 9a:fb:84:fc:8a:e7:ae:f7:b6:6a:5c:c3:a3:35:da:8a:9b:57: 22:4f:dc:90:41:99:87:bc:d8:2f:ad:13:f9:8d:5d:02:f6:cd: 77:17:1a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNw7AgxgbwTFj6IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MGZkOTY0Y2YtNTg4Yy00MWE3LThmNDctYjRmYWQxMDg0YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Mdxe+ZFQjSYBZfNSkU18xncj4uifSmrT5Z /qYf7QSIFnn8zlupp46mBtgsLOkyrKkNuNS54NEoE+JT9UiuaciRLwECNesCaGlG U7dUX5TvaU6/3+rDRB9nJ/U7QtVhGAcgZCS1S7ODeax2j6wPDkREPWKDE5i4BSOF mnUgnSiDNHLzHDS0E542VvxK9mHeP+DBJ9+6kxxwEKa9245CW5OaosqjuRYMOEgn 3/o0tlihY7GXTHMZe1Tx2rmDYimCDFO3+oMDfaUG/DUCQOdy2U0o6SLp4H2ExXIK zAb7y6jXfaccITqmXUewf/5QmmDPnsWo7mh3bnS3ownpE4XlywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbTnSmf4Wy5KeUwvXyVBRPG9UTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvOTM0ZGE1MjQtNDY2MC0z YTg4LTg0NjAtMWMzNWE2Mzk5OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn711MvZ2pDBVij7dvlDTEWzQwLLYQpYiljJmyKCVz92z94E1zsclhy QYmdggu0pKTwKp5Y/YM61EMjien70WcM7e2K5vuUkA6L1zfDFDjZEqE6cUKCtcPt +aAkXdywzFZLkVzGXDZHxib1od7qmNCqZ3QJ7rrgj5+4hZkoeJtatfENm7E6JwIB iN4z9egyS/N0lC3+fFUOVzhDZF5qy7xU3QE9le/ZuSkunSWFQuXTxJg7KbBUFbzG DZOOpZt8+/hlWUdjMTZZZUpBuYc7dacCKuv5IHctK5r7hPyK5673tmpcw6M12oqb VyJP3JBBmYe82C+tE/mNXQL2zXcXGpo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:44:25 2025 by rpki-client