$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa File: 76f66401-c4fb-3b48-82d7-7873180a2d1b.roa (raw, json) Hash identifier: /3CCTZt+eACLqlfqTNjRQOgzkfbwe+2B4Ft+1w3TczQ= Subject key identifier: C5:C3:B7:31:DF:51:C2:AC:BD:75:B5:41:B1:D8:FC:A6:AE:9D:E6:19 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEF09DCD91954F4A99A00 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 192.151.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ef:09:dc:d9:19:54:f4:a9:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=dc33b24c-7169-4839-b15e-bfff1929657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:71:49:e1:57:f9:bf:11:44:88:c2:27:82: 6d:3a:22:1c:50:f2:8a:bc:50:e5:33:b6:99:65:3d: b7:8a:4c:58:51:06:b5:80:a5:22:26:06:8a:50:32: 48:a5:52:4d:66:17:e5:93:2b:ec:86:99:01:51:64: 8f:4a:11:05:83:6c:b4:02:15:20:e3:52:cf:84:82: 79:b4:b8:b8:c5:80:a1:94:83:54:67:c4:78:84:02: f7:88:39:0b:7f:74:f0:b3:f6:11:71:13:fb:c2:d9: b6:95:d5:d1:0b:4b:9f:e5:69:2d:88:a0:79:12:7e: 10:cd:80:bd:a7:5e:a9:56:10:d0:94:f7:87:d0:dd: ac:dc:81:40:d6:29:38:7c:8f:36:a4:25:40:6b:eb: 16:f9:f7:08:7e:9c:53:38:c6:92:38:12:d9:05:e3: 37:31:02:af:07:80:c6:80:94:3e:66:08:96:42:10: 2a:ec:db:c1:18:a6:62:0c:b9:b1:8f:db:4c:90:94: 4c:55:5b:00:c7:6e:98:29:83:81:62:df:62:10:b5: 69:35:a5:fb:a0:09:0d:53:bb:76:e6:8a:15:a3:60: d8:25:a9:25:26:a7:8a:d7:3c:b8:81:39:03:0c:69: 7a:39:d1:6a:a7:73:f3:fa:8a:c6:a2:e1:9b:3c:b6: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:B7:31:DF:51:C2:AC:BD:75:B5:41:B1:D8:FC:A6:AE:9D:E6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:60:63:99:08:fa:be:30:56:ae:45:6f:10:d9:b0:59:2d:50: 23:3d:a2:8a:d9:90:cb:05:49:18:d2:d5:10:d1:3a:e7:06:44: 51:12:f6:a2:33:78:34:27:50:69:e5:70:c8:f0:ae:86:12:13: 3a:e1:12:c0:4c:ad:f7:db:36:68:8a:6f:b8:95:c8:89:89:93: bd:26:76:16:30:7c:d7:ad:48:2c:c6:7f:a5:62:b2:27:90:3e: 16:0d:60:88:c5:10:01:0f:92:0d:c9:0a:ab:eb:30:c9:0e:a7: 47:1c:9c:83:e4:c8:d2:55:ea:ae:7d:0d:3d:28:3a:6f:e2:b2: cb:68:cd:21:77:d2:9d:e9:fe:58:4e:27:8c:e1:53:ca:c6:27: 9c:1a:e5:62:8c:82:32:84:07:d0:13:f3:74:3f:dd:4c:8d:15: 76:ce:09:d4:4a:33:69:15:34:e0:d6:a4:a3:17:ba:8c:45:65: 00:13:c3:4e:b2:32:eb:a7:81:6f:74:55:aa:95:0d:66:e5:7c: 81:a8:a8:8e:e1:b0:a9:80:ac:df:f9:7f:93:e9:4f:02:af:22: 84:f2:76:b0:08:1c:89:0c:e7:c8:17:90:90:ec:bb:78:fc:f3: cc:04:ec:5d:fc:5b:37:d0:90:f9:49:2b:d4:91:03:47:4d:32: 65:8b:76:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+8J3NkZVPSpmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGMzM2IyNGMtNzE2OS00ODM5LWIxNWUtYmZmZjE5Mjk2NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz95xSeFX+b8RRIjCJ4JtOiIcUPKKvFDlM7aZ ZT23ikxYUQa1gKUiJgaKUDJIpVJNZhflkyvshpkBUWSPShEFg2y0AhUg41LPhIJ5 tLi4xYChlINUZ8R4hAL3iDkLf3Tws/YRcRP7wtm2ldXRC0uf5WktiKB5En4QzYC9 p16pVhDQlPeH0N2s3IFA1ik4fI82pCVAa+sW+fcIfpxTOMaSOBLZBeM3MQKvB4DG gJQ+ZgiWQhAq7NvBGKZiDLmxj9tMkJRMVVsAx26YKYOBYt9iELVpNaX7oAkNU7t2 5ooVo2DYJaklJqeK1zy4gTkDDGl6OdFqp3Pz+orGouGbPLbl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXDtzHfUcKsvXW1QbHY/KauneYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNzZmNjY0MDEtYzRmYi0z YjQ4LTgyZDctNzg3MzE4MGEyZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRgY5kI+r4wVq5FbxDZsFktUCM9oorZkMsFSRjS1RDROucGRFES9qIz eDQnUGnlcMjwroYSEzrhEsBMrffbNmiKb7iVyImJk70mdhYwfNetSCzGf6VisieQ PhYNYIjFEAEPkg3JCqvrMMkOp0ccnIPkyNJV6q59DT0oOm/isstozSF30p3p/lhO J4zhU8rGJ5wa5WKMgjKEB9AT83Q/3UyNFXbOCdRKM2kVNODWpKMXuoxFZQATw06y MuungW90VaqVDWblfIGoqI7hsKmArN/5f5PpTwKvIoTydrAIHIkM58gXkJDsu3j8 88wE7F38WzfQkPlJK9SRA0dNMmWLdpI= -----END CERTIFICATE-----Generated at Wed Nov 5 18:03:59 2025 by rpki-client