$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa File: c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa (raw, json) Hash identifier: zuIvf7CYfJ8AVSJgF+/4P7GTARbDkswFJZcIECv8D+M= Subject key identifier: 58:B3:CC:FC:24:BB:9D:38:AE:11:E7:D8:4B:E7:3B:83:11:09:38:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B0018D0506583A835816B8DA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa Signing time: Wed 27 Aug 2025 23:17:42 +0000 ROA not before: Wed 27 Aug 2025 23:17:42 +0000 ROA not after: Wed 26 Nov 2025 00:17:42 +0000 asID: 31898 IP address blocks: 192.9.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:18:d0:50:65:83:a8:35:81:6b:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 23:17:42 2025 GMT Not After : Nov 26 00:17:42 2025 GMT Subject: CN=bd1d1feb-6448-4b85-9619-be14ab77b781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:f9:75:c8:18:53:91:c1:c5:24:5a:f5:6c: e2:4d:b8:41:14:d0:e2:8c:08:47:0b:60:35:ad:08: f8:02:12:00:db:ea:a0:7e:a6:48:6c:99:d4:19:3a: b8:d0:70:89:52:cd:8d:51:ec:59:49:5a:70:21:ee: 47:06:b4:ae:f7:03:2e:d4:2f:3d:87:e7:a4:3a:75: 10:4a:07:7e:b3:df:b2:24:de:e1:6b:13:bb:62:e0: ac:9b:77:8a:37:c2:74:15:3b:ff:ae:9d:3a:34:c8: 33:ac:9e:1d:33:13:97:73:1a:c0:6a:74:9a:6f:fa: 19:c3:20:9f:50:25:12:b0:d3:82:f5:00:42:24:75: 48:29:96:ad:5c:c5:5d:a3:6e:94:d2:af:ca:a2:ea: 21:48:f3:f7:07:ef:7e:e1:79:7a:a2:b7:eb:d5:40: 99:0b:24:53:f7:63:82:c7:42:ba:52:23:0d:bb:45: 1f:14:20:4f:46:64:03:ec:99:99:21:bf:fb:db:8f: 0c:60:72:3a:8e:7b:df:1c:c7:44:4a:68:a9:1f:e1: 1f:aa:33:96:41:63:b1:27:dd:5a:94:56:c6:c9:65: 81:41:de:c5:7c:35:c4:ba:5e:7c:e1:ef:f0:72:76: 73:30:a5:4e:af:1f:43:f3:f1:b9:cc:01:15:ba:3b: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:CC:FC:24:BB:9D:38:AE:11:E7:D8:4B:E7:3B:83:11:09:38:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.9.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fe:dc:f2:a6:c7:69:21:59:8a:07:29:0c:f7:eb:30:97:f3: de:c2:0b:40:cf:cb:d5:41:ec:cf:02:d8:41:b6:0a:36:be:df: ef:ae:f6:47:f4:7d:bf:27:a0:bb:a8:d5:c1:df:d3:28:d4:f3: 10:f1:d2:72:c5:a0:92:03:57:be:c9:bc:13:be:4c:62:b6:6c: 46:3c:aa:b1:d7:a6:c6:74:44:8a:2c:6f:23:a0:26:bb:dc:8c: c8:ab:60:cf:cb:e7:01:46:cc:18:cf:2a:a1:85:6a:16:84:10: 52:4f:b5:eb:39:9d:91:00:23:2e:1a:51:9e:e0:3b:a6:15:cd: ac:d6:ca:8e:59:00:b6:ac:6b:ba:ea:4d:5e:98:da:64:e1:1f: 16:40:05:fd:8e:8a:68:85:f3:f0:2a:a0:5d:d6:22:5a:fc:78: 20:cb:fc:6b:15:7b:19:e1:ce:ba:33:1b:99:ef:df:f8:cb:44: 01:cf:e9:cb:e4:d1:a5:fd:c5:03:d6:f7:0d:e8:3b:54:2a:39: 3a:60:17:96:5b:6e:69:ab:7d:3a:2f:69:9a:bb:07:dd:be:91: fa:bc:25:0f:3f:a1:1f:b3:4f:a6:73:d1:53:9d:35:28:02:57: 8e:b0:56:34:29:e9:f7:5a:98:31:25:ce:73:9a:b2:bf:c3:20: 28:a7:de:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAGNBQZYOoNYFrjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIzMTc0MloXDTI1MTEyNjAwMTc0MlowLzEtMCsGA1UEAxMk YmQxZDFmZWItNjQ0OC00Yjg1LTk2MTktYmUxNGFiNzdiNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Nn5dcgYU5HBxSRa9WziTbhBFNDijAhHC2A1 rQj4AhIA2+qgfqZIbJnUGTq40HCJUs2NUexZSVpwIe5HBrSu9wMu1C89h+ekOnUQ Sgd+s9+yJN7haxO7YuCsm3eKN8J0FTv/rp06NMgzrJ4dMxOXcxrAanSab/oZwyCf UCUSsNOC9QBCJHVIKZatXMVdo26U0q/KouohSPP3B+9+4Xl6orfr1UCZCyRT92OC x0K6UiMNu0UfFCBPRmQD7JmZIb/7248MYHI6jnvfHMdESmipH+EfqjOWQWOxJ91a lFbGyWWBQd7FfDXEul584e/wcnZzMKVOrx9D8/G5zAEVujtdbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFizzPwku504rhHn2EvnO4MRCThIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzJhNWRiNTgtMTZiMC0z ZjExLThhZmUtOGZmMWVjYTExMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7+3PKmx2khWYoHKQz36zCX897CC0DPy9VB7M8C2EG2Cja+3++u9kf0 fb8noLuo1cHf0yjU8xDx0nLFoJIDV77JvBO+TGK2bEY8qrHXpsZ0RIosbyOgJrvc jMirYM/L5wFGzBjPKqGFahaEEFJPtes5nZEAIy4aUZ7gO6YVzazWyo5ZALasa7rq TV6Y2mThHxZABf2OimiF8/AqoF3WIlr8eCDL/GsVexnhzrozG5nv3/jLRAHP6cvk 0aX9xQPW9w3oO1QqOTpgF5ZbbmmrfTovaZq7B92+kfq8JQ8/oR+zT6Zz0VOdNSgC V46wVjQp6fdamDElznOasr/DICin3mg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:30 2025 by rpki-client