$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa File: a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa (raw, json) Hash identifier: KLrnKi2VN8Mf5QQ8181hrk/FMVvf5jsoqR7GrRgaGrU= Subject key identifier: 59:14:26:82:B1:A6:A3:F6:AC:BC:B6:09:A3:E0:A1:CD:7F:49:EF:7E Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584AA160DC0C6492EE1BC659D740 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22418 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dc:0c:64:92:ee:1b:c6:59:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d4212948-de0b-42c2-9d56-6ef9c3e62c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:87:32:f6:48:df:9c:05:e7:fc:56:1f:b8: c4:8f:0d:68:32:e0:d8:48:55:76:57:a9:34:c2:fa: e4:c4:9d:8f:b3:02:0f:6a:80:29:69:75:d9:4f:89: cd:68:b5:9b:41:38:aa:2e:5b:48:93:ca:8b:56:98: e9:3f:29:0c:4e:3a:72:2e:e8:f3:d8:61:c8:61:f2: 01:c8:03:d5:10:c1:7e:10:c3:da:ae:27:2b:75:e9: 7a:71:05:eb:14:b3:de:25:7b:ba:94:8d:df:b3:5f: 82:d6:f4:09:f5:05:19:8b:da:81:7d:eb:d8:98:0e: a6:bc:85:48:a9:3e:24:56:0d:bd:4a:0e:c0:40:ef: 94:82:52:06:36:29:b8:bf:0e:d5:fb:66:c9:5d:7a: 7a:c2:c1:91:14:65:ca:bf:0b:7d:7f:ca:b8:83:e5: 10:eb:10:f7:60:29:c4:28:d8:cd:ba:b9:e5:46:eb: 2e:a6:b7:2d:b9:16:0c:af:b0:bf:ae:82:ab:b4:4c: a6:23:63:54:23:7d:a1:a4:39:c9:c5:03:c3:22:fe: ed:3b:4a:0f:aa:3e:c3:54:c0:f7:f6:2a:ea:7a:f8: cf:ac:03:f7:1b:a8:0d:9a:1e:1e:dc:d7:90:0c:c2: df:f2:22:e0:0d:20:0e:26:f5:f1:fe:bc:df:53:60: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:26:82:B1:A6:A3:F6:AC:BC:B6:09:A3:E0:A1:CD:7F:49:EF:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:f6:86:e4:2e:04:35:7d:35:cb:92:bc:a2:c0:cc:4d:f7:9f: 1b:41:a0:a5:7d:11:e1:f0:ed:b2:86:69:66:2d:34:e6:37:f6: ca:40:6a:2c:a8:a7:40:ef:5d:78:6c:c9:88:26:e4:98:d3:7a: ff:0f:7c:b7:fc:62:89:e7:b9:5c:cf:f0:d5:67:ca:87:7d:da: d3:c2:4a:17:fc:21:32:06:7d:03:4b:5d:f1:a5:eb:85:32:3f: b9:df:76:f0:d6:c9:ef:c9:9f:ad:37:36:8d:06:2c:cc:f1:56: b8:94:4a:7f:4c:71:5b:2a:05:27:5d:92:fe:4a:5c:95:95:82: 45:0e:b1:20:ec:c5:06:6d:96:b9:9f:a4:38:93:21:e8:8a:e5: 8a:e0:df:b5:14:0f:44:df:02:7c:df:66:08:e1:b5:95:3e:13: 16:56:95:3e:5a:62:31:eb:c6:d9:b3:dd:77:09:74:30:c1:e9: e7:f0:4a:0f:7d:dc:72:3a:09:22:ee:68:b7:0e:16:e1:27:2f: e0:9d:8e:4e:ce:7b:cc:50:2e:94:fa:df:8e:f5:88:b1:ea:b2: 83:6e:43:66:27:d7:dc:f4:d9:f8:3f:3e:e5:4b:82:08:cb:b5: 27:b0:84:90:25:e5:5b:8c:7f:f9:47:41:49:a1:83:4e:c8:f4: a3:ec:e2:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNwMZJLuG8ZZ10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDQyMTI5NDgtZGUwYi00MmMyLTlkNTYtNmVmOWMzZTYyYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCGHMvZI35wF5/xWH7jEjw1oMuDYSFV2V6k0 wvrkxJ2PswIPaoApaXXZT4nNaLWbQTiqLltIk8qLVpjpPykMTjpyLujz2GHIYfIB yAPVEMF+EMParicrdel6cQXrFLPeJXu6lI3fs1+C1vQJ9QUZi9qBfevYmA6mvIVI qT4kVg29Sg7AQO+UglIGNim4vw7V+2bJXXp6wsGRFGXKvwt9f8q4g+UQ6xD3YCnE KNjNurnlRusuprctuRYMr7C/roKrtEymI2NUI32hpDnJxQPDIv7tO0oPqj7DVMD3 9irqevjPrAP3G6gNmh4e3NeQDMLf8iLgDSAOJvXx/rzfU2Bl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkUJoKxpqP2rLy2CaPgoc1/Se9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYTlhZjZhNGYtYzgxNy0z M2RmLThkNTYtMjJhZmFhYjVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALn2huQuBDV9NcuSvKLAzE33nxtBoKV9EeHw7bKGaWYtNOY39spAaiyo p0DvXXhsyYgm5JjTev8PfLf8YonnuVzP8NVnyod92tPCShf8ITIGfQNLXfGl64Uy P7nfdvDWye/Jn603No0GLMzxVriUSn9McVsqBSddkv5KXJWVgkUOsSDsxQZtlrmf pDiTIeiK5Yrg37UUD0TfAnzfZgjhtZU+ExZWlT5aYjHrxtmz3XcJdDDB6efwSg99 3HI6CSLuaLcOFuEnL+Cdjk7Oe8xQLpT63471iLHqsoNuQ2Yn19z02fg/PuVLggjL tSewhJAl5VuMf/lHQUmhg07I9KPs4vw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:06 2025 by rpki-client