$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa File: 2b44fd08-b57d-3410-85f3-919317bfb40c.roa (raw, json) Hash identifier: 7oYZlaLIRB8bddDgSCJNGrhqKLUNGFBW24btCV3ooso= Subject key identifier: E8:20:17:5F:6C:D5:DF:9D:35:BA:91:3B:ED:65:8B:0B:D8:FC:EC:27 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584B34AF507A558E02C7A63A1180 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa Signing time: Mon 15 Sep 2025 19:22:58 +0000 ROA not before: Mon 15 Sep 2025 19:22:58 +0000 ROA not after: Sun 14 Dec 2025 20:22:58 +0000 asID: 2562 IP address blocks: 192.153.240.0/24 maxlen: 24 192.153.241.0/24 maxlen: 24 192.153.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:af:50:7a:55:8e:02:c7:a6:3a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 15 19:22:58 2025 GMT Not After : Dec 14 20:22:58 2025 GMT Subject: CN=16283763-5496-427a-a541-72eaa12c2f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:37:76:8d:c6:54:19:9c:85:7a:19:07:b5: 95:92:32:18:cb:cc:4e:a4:b3:db:36:09:8c:d0:47: ae:60:40:50:27:77:c1:2b:6e:e1:7e:b3:dd:14:30: 45:92:fc:b4:8f:a7:e3:1a:fa:b2:d6:09:dd:98:44: 1b:6f:c8:c8:e6:35:d5:e0:c0:17:a5:8e:b2:a0:4d: bc:db:11:d0:a4:85:ad:9e:19:df:7b:f6:c5:6e:68: 1b:67:f2:d2:18:cc:7c:e9:20:ec:4d:3e:b5:f6:14: 67:48:c5:9a:34:e0:0d:03:8e:8e:1e:97:36:6f:5b: 88:aa:66:1a:61:44:61:92:bb:64:f7:b6:4b:92:1a: aa:33:e7:e2:25:49:2d:f6:97:53:da:67:39:1a:cc: 76:23:31:89:24:92:6e:45:07:16:6a:f8:46:d1:cc: 49:df:cd:df:b6:24:73:53:1e:29:46:bc:14:89:10: dc:09:7d:70:9f:d6:94:cb:c2:4f:0c:04:5d:82:de: a8:fe:d3:ef:3d:56:f4:ac:47:28:65:80:99:92:c0: 60:8d:56:78:77:dc:c4:3f:5b:8b:9e:da:2e:69:92: 47:22:f3:06:4a:fc:5d:11:1f:6f:50:31:22:6a:57: 71:fc:70:1b:eb:fe:38:d2:46:f2:e0:4f:d3:60:5e: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:17:5F:6C:D5:DF:9D:35:BA:91:3B:ED:65:8B:0B:D8:FC:EC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.153.240.0-192.153.242.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6d:ca:62:39:43:3c:64:d3:e3:ab:2e:0d:de:a8:7d:71:3d: 4b:a6:9b:92:f9:33:95:fe:b1:35:b3:0e:f0:d3:c1:73:92:19: 8e:ac:6d:90:cf:29:35:6e:a9:03:66:d6:c3:1b:56:dc:1e:8e: 55:e3:82:9c:ba:52:e1:81:26:1e:44:52:8c:40:85:e9:7f:19: 66:5d:14:f1:96:3b:9d:1f:7a:f7:04:34:d6:ea:ba:29:e9:45: 57:bd:16:22:66:a2:3d:03:21:79:0e:0a:cd:67:6e:f6:08:06: 63:7e:19:5c:af:46:2b:02:be:21:2a:98:05:1e:d7:c6:7a:c1: 50:5d:0e:93:d1:18:d4:3f:30:87:69:db:4c:87:ad:99:d7:93: 94:90:a9:c7:39:ef:a1:f1:82:95:73:15:bf:32:49:58:97:69: 9c:d2:79:96:34:a1:3d:71:4d:10:08:34:14:65:66:9c:d9:e0: d7:49:c2:2a:8f:82:f2:04:b4:48:2e:fe:72:7c:52:2b:21:ca: b0:11:0f:42:bf:87:0c:04:41:45:70:35:3b:a5:68:8c:a7:22: 00:c9:6d:1c:16:37:ec:91:08:6a:cf:0d:dc:e3:bd:86:24:6a: ff:3b:ed:95:93:48:19:e4:65:ab:a0:f7:15:ec:77:79:30:fc: f7:8d:ea:8a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs0r1B6VY4Cx6Y6EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDkxNTE5MjI1OFoXDTI1MTIxNDIwMjI1OFowLzEtMCsGA1UEAxMk MTYyODM3NjMtNTQ5Ni00MjdhLWE1NDEtNzJlYWExMmMyZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ43do3GVBmchXoZB7WVkjIYy8xOpLPbNgmM 0EeuYEBQJ3fBK27hfrPdFDBFkvy0j6fjGvqy1gndmEQbb8jI5jXV4MAXpY6yoE28 2xHQpIWtnhnfe/bFbmgbZ/LSGMx86SDsTT619hRnSMWaNOANA46OHpc2b1uIqmYa YURhkrtk97ZLkhqqM+fiJUkt9pdT2mc5Gsx2IzGJJJJuRQcWavhG0cxJ383ftiRz Ux4pRrwUiRDcCX1wn9aUy8JPDARdgt6o/tPvPVb0rEcoZYCZksBgjVZ4d9zEP1uL ntouaZJHIvMGSvxdER9vUDEialdx/HAb6/440kby4E/TYF5zcwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOggF19s1d+dNbqRO+1liwvY/OwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvMmI0NGZkMDgtYjU3ZC0z NDEwLTg1ZjMtOTE5MzE3YmZiNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATAmfAD BADAmfIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACW3KYjlDPGTT46suDd6ofXE9S6abkvkzlf6xNbMO8NPB c5IZjqxtkM8pNW6pA2bWwxtW3B6OVeOCnLpS4YEmHkRSjECF6X8ZZl0U8ZY7nR96 9wQ01uq6KelFV70WImaiPQMheQ4KzWdu9ggGY34ZXK9GKwK+ISqYBR7XxnrBUF0O k9EY1D8wh2nbTIetmdeTlJCpxznvofGClXMVvzJJWJdpnNJ5ljShPXFNEAg0FGVm nNng10nCKo+C8gS0SC7+cnxSKyHKsBEPQr+HDARBRXA1O6VojKciAMltHBY37JEI as8N3OO9hiRq/zvtlZNIGeRlq6D3Fex3eTD8943qig== -----END CERTIFICATE-----Generated at Wed Nov 5 02:57:12 2025 by rpki-client