$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json) Hash identifier: uVDMriFn0+R3dsb6fmJUws2Io0fehUMerAamP5e45HA= Subject key identifier: 35:79:9E:28:98:E9:A5:80:E8:A9:37:2E:C9:C7:7F:FA:79:2D:3D:E4 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B4D11D6A9DD827F670F260BC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 203 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d6:a9:dd:82:7f:67:0f:26:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=2517c569-5b33-415f-9990-6db277db718c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:58:ab:6c:16:29:16:33:b4:a2:97:ad:47:58: bf:e0:dd:36:6f:f4:f0:29:3e:5f:69:68:b8:30:1f: 80:9e:a4:51:47:c7:98:11:15:82:2e:ac:54:c2:b1: 2c:af:e5:38:3d:95:2a:cd:70:c5:13:00:21:c5:5c: 06:a3:e4:dc:ec:fa:f7:8f:6f:6b:c6:24:2c:cd:aa: 13:07:39:c5:7b:d5:aa:97:24:00:6a:57:00:64:df: 95:87:8d:1a:23:b1:60:f6:bb:80:51:8d:0d:94:8f: f9:05:82:5b:f5:82:c2:15:37:ab:d8:bb:e6:a0:b9: 5f:e2:3b:f3:65:ae:9d:5e:f8:61:c8:0e:a3:92:20: ac:d0:d2:71:07:36:f5:7d:6d:59:54:ca:63:92:cf: 90:26:b1:e0:b4:d2:65:3f:12:a8:ba:f3:7f:43:8e: 54:2c:45:48:2d:62:02:34:d3:0f:20:38:cc:7e:99: 0d:8b:5d:0c:14:4d:16:fa:dd:82:60:31:6f:2f:a6: 5b:04:80:03:36:14:3b:b5:9e:4f:0d:93:7f:4f:92: c1:d0:4e:50:68:7b:95:ba:64:01:70:9e:47:0c:fa: 51:b4:db:76:7f:ca:ba:b9:01:55:db:a5:4f:1b:2a: 59:f9:d0:f9:13:f3:28:2f:f9:3c:fc:25:9a:e7:c4: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:9E:28:98:E9:A5:80:E8:A9:37:2E:C9:C7:7F:FA:79:2D:3D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:39:14:c6:07:79:18:cc:48:21:5b:b7:b3:55:c5:72:d9:09: 63:a6:12:b5:2a:26:5f:ed:47:13:71:2b:90:ab:d8:d8:c4:25: d8:be:97:97:03:5d:71:a6:f7:f0:a4:c2:f3:a0:ef:6d:de:a6: 4f:7b:59:bf:5f:a2:e6:14:e2:c7:1a:38:af:a7:62:8c:5e:2a: ae:0f:4f:ba:d6:7f:32:99:e8:fe:d7:96:eb:c8:e3:0c:ab:32: 29:db:c1:a4:97:66:55:e4:8a:fa:26:a4:36:10:16:6b:b3:f6: 75:77:82:4b:b5:65:b9:20:33:14:b8:6e:cd:fd:51:ee:53:13: 5c:50:af:a1:1d:39:cf:07:0b:d5:41:89:85:d0:bb:2e:79:ff: a7:44:95:56:d4:e4:44:90:25:62:c6:7a:73:24:e1:44:4e:48: 84:23:33:b6:1a:ce:9e:c2:46:1b:32:c3:1d:c1:83:5c:ae:19: 26:e3:08:45:5e:cb:ef:27:21:6b:8d:3f:f0:7e:dc:9b:a0:27: bf:38:e6:4d:04:af:2f:cb:df:34:a5:3e:e3:4c:f5:50:7f:fc: 39:19:06:ac:bc:33:59:5f:44:01:56:b3:e2:bc:20:b3:a7:fd: 1b:62:d4:95:94:67:70:ac:52:3b:54:82:82:60:58:c1:5a:12: bc:ed:7a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdap3YJ/Zw8mC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MjUxN2M1NjktNWIzMy00MTVmLTk5OTAtNmRiMjc3ZGI3MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlirbBYpFjO0opetR1i/4N02b/TwKT5faWi4 MB+AnqRRR8eYERWCLqxUwrEsr+U4PZUqzXDFEwAhxVwGo+Tc7Pr3j29rxiQszaoT BznFe9WqlyQAalcAZN+Vh40aI7Fg9ruAUY0NlI/5BYJb9YLCFTer2LvmoLlf4jvz Za6dXvhhyA6jkiCs0NJxBzb1fW1ZVMpjks+QJrHgtNJlPxKouvN/Q45ULEVILWIC NNMPIDjMfpkNi10MFE0W+t2CYDFvL6ZbBIADNhQ7tZ5PDZN/T5LB0E5QaHuVumQB cJ5HDPpRtNt2f8q6uQFV26VPGypZ+dD5E/MoL/k8/CWa58SRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV5niiY6aWA6Kk3LsnHf/p5LT3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGI2MTk1ZmQtMTkzOS0z YjZlLWFkMzYtZDBhODM1OWQ4MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg5FMYHeRjMSCFbt7NVxXLZCWOmErUqJl/tRxNxK5Cr2NjEJdi+l5cD XXGm9/CkwvOg723epk97Wb9fouYU4scaOK+nYoxeKq4PT7rWfzKZ6P7XluvI4wyr MinbwaSXZlXkivompDYQFmuz9nV3gku1ZbkgMxS4bs39Ue5TE1xQr6EdOc8HC9VB iYXQuy55/6dElVbU5ESQJWLGenMk4UROSIQjM7Yazp7CRhsywx3Bg1yuGSbjCEVe y+8nIWuNP/B+3JugJ7845k0Ery/L3zSlPuNM9VB//DkZBqy8M1lfRAFWs+K8ILOn /Rti1JWUZ3CsUjtUgoJgWMFaErztemE= -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:08 2025 by rpki-client