$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa File: 8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa (raw, json) Hash identifier: 4wDuKnaivpF0PJi5PbnxKwJYG1t9oMoq0JB5vQIRAVM= Subject key identifier: D9:66:A9:2C:20:EA:2F:83:68:74:0C:1F:7E:85:1F:C5:16:EA:92:C6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B8EACF3E5930A59B1D3720F80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 192.46.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:e5:93:0a:59:b1:d3:72:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=897dbb39-4fe5-45fe-869c-0b30dbbe1601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:10:10:8f:1c:b5:93:8d:00:29:22:e1:bc: 76:52:7a:ab:29:07:94:5a:f0:7f:7e:37:5d:42:43: c0:c5:2b:a2:57:3d:37:16:86:d5:20:0e:58:08:08: b1:bd:a9:39:45:bf:17:aa:5e:ce:07:04:fb:ce:33: 75:c8:51:42:40:fc:97:92:7e:f0:c1:b3:79:bd:2b: 9e:90:54:b5:76:e1:bf:a9:0d:06:fa:72:48:62:6c: d3:24:10:fb:15:81:bb:61:d2:e0:85:42:5b:66:e4: 18:9f:4d:5e:c8:23:87:98:c6:64:13:6c:ea:15:dd: 03:07:fe:00:87:0b:2f:37:e4:37:17:1a:5f:a2:8a: a6:08:b8:21:e0:93:ed:9d:b3:e5:04:26:db:92:da: 85:0e:f7:ea:d9:41:da:be:aa:33:1a:04:e6:24:e0: c5:78:cd:15:5f:34:49:70:87:65:9c:b3:76:4b:60: 42:13:72:cb:1f:25:10:f6:f8:e3:3f:01:63:98:8b: 2c:4c:f2:ce:b2:a1:da:b7:0e:c7:4c:07:e7:86:89: 92:e5:46:bc:2c:b5:90:d5:6f:59:a0:5f:61:a7:f7: f4:94:ed:bd:9e:96:86:82:05:96:0a:af:92:d8:e6: 8d:e8:12:29:b0:2e:42:e8:55:cf:1c:e1:23:1b:4e: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:A9:2C:20:EA:2F:83:68:74:0C:1F:7E:85:1F:C5:16:EA:92:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c1:69:9d:b5:4d:de:07:7e:37:c7:bc:19:6d:e8:51:26:f4: a8:44:b1:53:31:07:3c:1e:98:aa:ad:63:03:bb:10:4b:78:a2: ac:51:fd:b1:53:28:fc:6b:81:61:0f:83:ec:d4:c7:f0:4c:1f: 2f:75:5c:81:ac:37:eb:30:7c:cd:d0:8c:7d:05:80:f1:15:c7: 17:45:e8:33:3c:0a:4e:48:59:47:da:e5:85:36:58:79:16:5f: 38:12:c4:f2:64:ed:9d:1a:8b:6d:ad:72:c5:5b:60:71:0d:1b: be:f8:49:db:49:5b:27:58:5a:77:14:1e:85:67:0d:ee:fb:50: 89:46:72:7c:e9:18:16:9a:35:d0:d7:87:3d:d6:7f:fc:01:d9: b4:6f:0d:ce:aa:c2:f3:71:da:63:29:30:7b:2a:66:18:c0:2d: 67:c5:e0:d9:35:f2:3e:28:52:c2:d8:bb:6e:b1:a6:d5:82:0c: ac:66:2d:6b:f4:27:cd:2c:e0:91:a3:3e:c4:97:4e:d1:20:a4: 62:25:71:57:46:0c:9b:46:62:56:17:39:4c:9b:e2:95:07:af: 11:73:45:be:ea:1e:f6:60:e7:b0:e2:23:17:4a:c1:6a:93:7c: c3:74:1f:62:6c:8e:92:5d:3e:e9:c4:95:d5:ed:a9:57:96:1e: 98:73:55:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPPlkwpZsdNyD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODk3ZGJiMzktNGZlNS00NWZlLTg2OWMtMGIzMGRiYmUxNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikgQEI8ctZONACki4bx2UnqrKQeUWvB/fjdd QkPAxSuiVz03FobVIA5YCAixvak5Rb8Xql7OBwT7zjN1yFFCQPyXkn7wwbN5vSue kFS1duG/qQ0G+nJIYmzTJBD7FYG7YdLghUJbZuQYn01eyCOHmMZkE2zqFd0DB/4A hwsvN+Q3FxpfooqmCLgh4JPtnbPlBCbbktqFDvfq2UHavqozGgTmJODFeM0VXzRJ cIdlnLN2S2BCE3LLHyUQ9vjjPwFjmIssTPLOsqHatw7HTAfnhomS5Ua8LLWQ1W9Z oF9hp/f0lO29npaGggWWCq+S2OaN6BIpsC5C6FXPHOEjG05j6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlmqSwg6i+DaHQMH36FH8UW6pLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOGE1NmMzNmYtNWY1Ni0z Y2QwLWFiZTYtNzVhMjg2ZGFmNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwC56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjBaZ21Td4HfjfHvBlt6FEm9KhEsVMxBzwemKqtYwO7EEt4oqxR/bFT KPxrgWEPg+zUx/BMHy91XIGsN+swfM3QjH0FgPEVxxdF6DM8Ck5IWUfa5YU2WHkW XzgSxPJk7Z0ai22tcsVbYHENG774SdtJWydYWncUHoVnDe77UIlGcnzpGBaaNdDX hz3Wf/wB2bRvDc6qwvNx2mMpMHsqZhjALWfF4Nk18j4oUsLYu26xptWCDKxmLWv0 J80s4JGjPsSXTtEgpGIlcVdGDJtGYlYXOUyb4pUHrxFzRb7qHvZg57DiIxdKwWqT fMN0H2JsjpJdPunEldXtqVeWHphzVdc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:00 2025 by rpki-client