$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa File: e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa (raw, json) Hash identifier: 2yrNqVl1/cWrIv0j4I+GJ63pnkDCJ4sRuA6O1lKwN8E= Subject key identifier: E2:6A:75:22:E2:45:3F:05:AD:93:8E:98:B5:29:AD:BC:20:EE:03:29 Certificate issuer: /CN=233d8eef-51df-487b-9edb-f16ba403f442 Certificate serial: 010D0C9F4328584B80B75C42FB26C025E8530480 Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 5645 IP address blocks: 192.102.255.0/24 maxlen: 24 2607:3380::/40 maxlen: 40 2607:3380:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5c:42:fb:26:c0:25:e8:53:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=ab66a699-e53e-4017-b04c-44ff7b0a469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:8a:d5:c0:0e:e1:78:9a:2b:7e:89:40:6e: f8:ee:19:cd:3a:35:4d:c7:2c:26:1a:12:9c:bc:ae: 55:68:a2:5e:e2:25:cd:ea:b1:a5:0f:84:04:d5:b9: 61:ce:e1:e6:b7:50:00:14:3f:5f:fa:58:a4:27:54: 1e:b5:ce:2e:ac:89:fe:5c:98:c0:05:95:a3:9a:52: 40:b5:ac:36:59:5f:a8:76:ad:83:d3:d1:06:b4:ce: 17:0c:e8:8c:a4:8b:42:86:4c:a0:a0:b3:88:f8:6d: 9d:73:06:29:05:29:b9:29:96:3c:04:9a:8b:a1:5a: 81:d4:85:6b:91:97:5e:77:c0:26:79:53:aa:94:be: f9:2d:54:a4:39:fc:a6:ad:3c:7b:ed:3d:39:37:41: 4c:59:86:bb:4d:a9:d0:cf:23:4e:87:16:25:b5:d2: fc:0b:64:89:ce:5e:dd:84:01:80:aa:b1:b3:e1:d8: 30:53:b7:85:4f:33:49:1b:a7:d1:ec:84:70:69:a1: 6f:cb:06:65:01:cd:46:4b:b9:fd:00:84:21:86:15: 01:eb:92:ae:67:86:88:3d:1f:1a:56:87:e3:5e:ef: 5a:6f:c1:d4:2d:03:f7:41:22:dc:5a:9f:e8:02:d4: e0:fc:4a:e0:9d:fd:dd:19:ed:aa:d3:54:dd:20:6d: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6A:75:22:E2:45:3F:05:AD:93:8E:98:B5:29:AD:BC:20:EE:03:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl X509v3 Authority Key Identifier: keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer sbgp-ipAddrBlock: critical IPv4: 192.102.255.0/24 IPv6: 2607:3380::/40 2607:3380:1100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:39:a4:8f:e3:f1:13:df:5a:c6:3b:a8:ed:76:de:ba:da: 20:15:8c:e0:a9:c9:f6:d7:8f:e8:28:ca:35:13:ed:5f:80:07: b2:da:08:27:a4:8b:bb:83:c9:17:81:dd:e0:10:a3:4f:1e:68: 74:e8:8b:00:fa:62:69:69:29:01:ff:b9:c6:10:3e:0c:db:9b: 41:53:71:b8:f1:61:0f:c7:b5:b0:d9:ef:72:f8:51:e5:45:ba: 2f:b6:e5:35:6b:af:b7:d7:92:ab:a8:7d:5a:d7:49:e5:bd:db: 92:3d:0b:7c:c2:76:b9:fd:5c:f1:2d:05:94:ef:0f:f6:87:52: b2:c5:7a:c1:cd:f2:42:19:db:56:1e:28:ee:f5:69:c6:d1:ce: 7c:1e:82:8e:b9:33:dd:41:0e:df:f4:34:eb:72:2a:c0:1a:36: a5:29:29:1d:c6:64:8c:27:54:68:bf:d1:07:5c:91:55:b0:3e: 90:18:d1:8b:e8:ef:e0:c0:9d:6d:38:c2:f3:24:64:12:d6:cc: 7e:b4:05:72:08:1a:9d:a7:e2:34:5b:c1:89:22:0c:a7:25:cc: 31:ca:cc:9b:7c:9a:bf:a0:c4:19:0d:29:13:e4:d5:1e:0e:7e: 8c:12:e2:b0:05:b7:b1:2c:1f:eb:1d:0f:5a:d1:fc:dc:28:3a: f0:41:0d:24 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEuAt1xC+ybAJehTBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMzZDhlZWYtNTFkZi00ODdiLTllZGItZjE2YmE0MDNm NDQyMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YWI2NmE2OTktZTUzZS00MDE3LWIwNGMtNDRmZjdiMGE0NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIGK1cAO4XiaK36JQG747hnNOjVNxywmGhKc vK5VaKJe4iXN6rGlD4QE1blhzuHmt1AAFD9f+likJ1Qetc4urIn+XJjABZWjmlJA taw2WV+odq2D09EGtM4XDOiMpItChkygoLOI+G2dcwYpBSm5KZY8BJqLoVqB1IVr kZded8AmeVOqlL75LVSkOfymrTx77T05N0FMWYa7TanQzyNOhxYltdL8C2SJzl7d hAGAqrGz4dgwU7eFTzNJG6fR7IRwaaFvywZlAc1GS7n9AIQhhhUB65KuZ4aIPR8a VofjXu9ab8HULQP3QSLcWp/oAtTg/Ergnf3dGe2q01TdIG0XDQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFOJqdSLiRT8FrZOOmLUprbwg7gMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNk OGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZiYTQwM2Y0NDIvZThhY2FiZTItMGQxOS0z YTQxLThjYTAtYjQ2MGQ4ZTBhOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjMzZDhlZWYtNTFkZi00ODdiLTll ZGItZjE2YmE0MDNmNDQyLzIzM2Q4ZWVmLTUxZGYtNDg3Yi05ZWRiLWYxNmJhNDAz ZjQ0Mi5jcmwwHwYDVR0jBBgwFoAUVoUG6oo0R7YSsaIf3t1ae2CBbzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNkOGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZi YTQwM2Y0NDIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwGb/MBYE AgACMBADBgAmBzOAAAMGACYHM4ARMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD+qOaSP4/ET31rGO6jtdt66 2iAVjOCpyfbXj+goyjUT7V+AB7LaCCeki7uDyReB3eAQo08eaHToiwD6YmlpKQH/ ucYQPgzbm0FTcbjxYQ/HtbDZ73L4UeVFui+25TVrr7fXkquofVrXSeW925I9C3zC drn9XPEtBZTvD/aHUrLFesHN8kIZ21YeKO71acbRznwego65M91BDt/0NOtyKsAa NqUpKR3GZIwnVGi/0QdckVWwPpAY0Yvo7+DAnW04wvMkZBLWzH60BXIIGp2n4jRb wYkiDKclzDHKzJt8mr+gxBkNKRPk1R4OfowS4rAFt7EsH+sdD1rR/NwoOvBBDSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:33 2025 by rpki-client