$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa File: 009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa (raw, json) Hash identifier: 3aUB/XGfkiaQ6TCfkVfPGuRZrb1rihOlUJN6d1WgAo4= Subject key identifier: D7:72:6F:57:02:AD:35:95:EB:A0:97:3C:FD:2E:EA:37:9D:B3:37:9C Certificate issuer: /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Certificate serial: 010D0C9F4328584B89177EAF8A0A2C76D87BD480 Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 46641 IP address blocks: 192.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7e:af:8a:0a:2c:76:d8:7b:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=821518dd-2d43-4fed-9afc-2998da95529e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:cd:09:bf:d1:62:f3:75:8f:10:ec:3a:a3: 8b:9e:c4:73:59:d9:45:8f:f2:27:f7:f8:63:b1:29: 4b:0e:fc:f7:98:57:35:b1:7a:fc:8d:ef:c2:32:6c: 53:af:0e:e4:5a:78:5b:b9:5e:86:bf:24:52:7a:37: 9f:37:ca:30:08:fe:71:e4:73:2a:c8:3b:0f:75:31: 2c:e7:e9:e2:94:2d:0b:42:f9:64:07:3b:77:28:40: 1c:a2:e0:62:aa:67:4d:44:c5:c2:a3:7a:53:c1:2f: 98:a3:79:c2:af:d4:7d:ee:78:3d:3c:fb:3d:f5:61: fe:43:1f:ea:fe:66:fd:40:77:8a:71:68:c0:21:78: 05:17:93:eb:32:58:5a:72:3a:8b:e3:e6:59:68:f7: f9:3e:b6:c6:b4:f5:f2:ad:67:6c:bb:72:d9:da:42: 74:08:dd:e5:8b:94:c6:72:74:00:60:24:d3:e2:5c: 5d:bd:08:1e:68:79:e1:2d:ae:58:35:bf:b3:45:23: 88:af:47:81:4e:29:16:41:92:78:3f:10:c4:74:7e: 69:31:f0:54:47:dd:34:c7:11:f1:de:d5:b9:28:ff: 81:00:c9:8b:d8:14:6c:f4:9c:a7:24:8d:1b:bb:89: 85:83:4a:6b:f8:3d:2b:a0:64:61:f0:ba:7e:e6:3a: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:6F:57:02:AD:35:95:EB:A0:97:3C:FD:2E:EA:37:9D:B3:37:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/009f2b2f-a177-3aa5-a45e-16bf6ab14f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl X509v3 Authority Key Identifier: keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer sbgp-ipAddrBlock: critical IPv4: 192.68.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:cd:60:a6:a1:3f:0e:3e:45:9e:a2:66:ad:7c:8c:83:ae: 8a:ee:65:87:86:f4:44:e1:0e:95:58:92:45:42:8f:a6:17:82: d6:4c:d8:16:c0:94:9d:02:a4:39:4b:b0:11:b3:85:5a:61:3c: 4f:fc:70:47:84:de:c5:15:7b:9d:d8:8b:93:75:8d:e0:08:3e: 33:18:6f:21:b4:fa:72:44:f7:48:6a:6b:1a:0f:5a:b1:cc:79: d0:f3:62:21:50:d4:04:78:5d:ab:bb:ee:a8:92:e7:f5:9a:5e: 4e:cb:5a:b0:5e:c1:e6:64:60:9b:a0:28:ab:c4:b6:2c:86:78: 0d:31:ce:85:fa:4f:bb:05:6b:d9:96:0d:9f:85:3f:cb:f5:ae: 66:c9:bb:c0:c3:06:2a:4b:62:c2:d6:94:67:53:c9:36:46:3f: d7:49:83:52:cb:c4:f3:c0:83:da:ef:57:00:db:2f:f1:44:3b: e6:d8:4f:fd:dd:e8:86:d2:5a:3c:a5:43:f5:a4:a5:94:8f:df: dd:9e:58:05:3a:c4:fa:ff:32:3d:c2:07:fa:29:34:c2:e4:4b: 68:59:24:0c:2c:ca:8c:a5:5f:96:4c:86:29:ff:40:6b:6a:47: 4d:7e:3a:bd:2f:84:8a:3c:5b:2a:46:82:fa:ec:c6:d5:8b:3f: 52:0c:95:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF36vigosdth71IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVmMDRmYmItNDRkOC00ZDQ4LThkMjMtZTRiMjA4MzFh MGVjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODIxNTE4ZGQtMmQ0My00ZmVkLTlhZmMtMjk5OGRhOTU1MjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsobNCb/RYvN1jxDsOqOLnsRzWdlFj/In9/hj sSlLDvz3mFc1sXr8je/CMmxTrw7kWnhbuV6GvyRSejefN8owCP5x5HMqyDsPdTEs 5+nilC0LQvlkBzt3KEAcouBiqmdNRMXCo3pTwS+Yo3nCr9R97ng9PPs99WH+Qx/q /mb9QHeKcWjAIXgFF5PrMlhacjqL4+ZZaPf5PrbGtPXyrWdsu3LZ2kJ0CN3li5TG cnQAYCTT4lxdvQgeaHnhLa5YNb+zRSOIr0eBTikWQZJ4PxDEdH5pMfBUR900xxHx 3tW5KP+BAMmL2BRs9JynJI0bu4mFg0pr+D0roGRh8Lp+5johNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdyb1cCrTWV66CXPP0u6jedszecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYw NGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIyMDgzMWEwZWMvMDA5ZjJiMmYtYTE3Ny0z YWE1LWE0NWUtMTZiZjZhYjE0ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVmMDRmYmItNDRkOC00ZDQ4LThk MjMtZTRiMjA4MzFhMGVjLzRlZjA0ZmJiLTQ0ZDgtNGQ0OC04ZDIzLWU0YjIwODMx YTBlYy5jcmwwHwYDVR0jBBgwFoAUEi1E0ZJngVirE2Tins/kdrtSHJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWYwNGZiYi00NGQ4LTRkNDgtOGQyMy1lNGIy MDgzMWEwZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp5zWCmoT8OPkWeomatfIyDroruZYeG9EThDpVYkkVCj6YXgtZM2BbA lJ0CpDlLsBGzhVphPE/8cEeE3sUVe53Yi5N1jeAIPjMYbyG0+nJE90hqaxoPWrHM edDzYiFQ1AR4Xau77qiS5/WaXk7LWrBeweZkYJugKKvEtiyGeA0xzoX6T7sFa9mW DZ+FP8v1rmbJu8DDBipLYsLWlGdTyTZGP9dJg1LLxPPAg9rvVwDbL/FEO+bYT/3d 6IbSWjylQ/WkpZSP392eWAU6xPr/Mj3CB/opNMLkS2hZJAwsyoylX5ZMhin/QGtq R01+Or0vhIo8WypGgvrsxtWLP1IMlQU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:21 2025 by rpki-client