$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa File: b4d4251a-34dd-3203-a15b-88e5870f7138.roa (raw, json) Hash identifier: 6bt011yxthW+d8jPBdybHdLuimJDkCEBq+GyEQlUGCg= Subject key identifier: D2:2A:93:09:26:ED:EB:C5:63:61:54:FD:B0:36:39:9D:EA:58:05:E3 Certificate issuer: /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Certificate serial: 010D0C9F4328584B8EACC323AA30110EF7A98700 Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 394731 IP address blocks: 192.131.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c3:23:aa:30:11:0e:f7:a9:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4f010692-7b43-41af-9a2d-d043444b2c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:02:5d:3a:fa:8f:3a:b8:2c:f7:35:23:5c: d8:a0:4a:f7:a0:85:52:a5:c8:3e:30:a2:91:f0:7a: d7:a8:6d:44:69:9d:3c:f3:92:c7:8c:83:0f:53:cc: ef:29:76:79:93:80:2d:6c:12:38:63:d9:e6:f3:ab: 67:5e:31:3d:e8:9a:8a:fd:6a:f9:b0:0e:90:cd:d5: a0:39:bd:88:49:b6:2e:33:23:cb:cb:c9:4c:4c:f0: d0:8b:de:7d:ed:9c:5b:5b:f5:e9:49:80:49:65:ad: b5:b8:6d:af:f9:24:e0:48:7f:93:02:d3:65:c4:37: 13:5f:f2:a1:9e:14:ea:67:94:b4:34:ff:6e:35:98: 2f:27:94:54:62:a3:90:61:f3:25:3f:c0:00:6c:c1: c7:e1:50:1f:15:98:db:d3:0c:ac:93:60:ff:10:04: c0:cb:b2:83:c5:c1:de:6b:cc:a5:bf:dc:a2:4c:45: 11:96:04:a3:54:0c:9f:be:82:53:53:42:a7:9e:b4: 74:c5:6c:47:5c:52:8c:38:77:4d:39:a3:1f:e3:75: 78:e5:dd:14:ab:2f:98:72:1b:a2:f3:31:72:45:ff: 59:3f:38:49:9c:de:16:11:52:c4:f3:0f:2c:01:a1: 29:11:69:35:81:8d:1a:3d:90:e6:fb:27:51:38:59: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:93:09:26:ED:EB:C5:63:61:54:FD:B0:36:39:9D:EA:58:05:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl X509v3 Authority Key Identifier: keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer sbgp-ipAddrBlock: critical IPv4: 192.131.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:83:aa:71:9e:3a:e0:84:9c:7a:e8:6c:29:ca:b9:89:03:82: 42:3b:90:e9:3d:35:5d:f6:24:a2:ec:3e:cb:38:19:47:bf:76: b7:28:91:28:4a:c3:13:50:a6:aa:e0:f1:42:85:0a:e8:c3:c4: 6c:22:f6:cf:f6:21:04:a5:dc:12:cb:29:03:3a:61:16:31:43: d3:71:b5:cb:0f:c0:9c:c7:ee:7f:e5:56:bf:d7:ba:90:17:4c: 3f:b4:b3:75:0a:54:50:44:de:57:48:b5:62:c9:a7:92:7f:2b: 89:85:bf:4b:15:ab:59:f0:a8:f8:95:45:1c:26:25:06:6f:95: 2e:a1:b4:e6:95:f6:56:39:dc:84:a3:96:78:59:75:1e:75:39: 41:81:ff:19:5d:2f:30:67:ad:58:af:6c:e7:af:b6:dc:dc:80: 87:54:27:09:14:85:9e:98:b3:08:64:0b:dd:40:43:81:98:35: f4:22:98:54:c7:48:ff:b5:03:1a:c6:4d:df:4b:08:32:94:6e: ad:9d:4a:26:ea:8a:d3:e8:ef:80:ab:da:79:4b:70:5f:9b:46: 9a:0a:79:00:7b:fe:39:2e:3e:b4:c3:6f:2f:c4:26:67:12:07: a9:9b:39:3c:17:14:be:73:25:a9:f6:8b:17:92:98:f1:5d:6c: 6e:8c:93:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMMjqjARDvephwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE2MzY1YjgtNmIwOC00MmIyLTllYzEtMThhNmIyZTM1 YjVjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGYwMTA2OTItN2I0My00MWFmLTlhMmQtZDA0MzQ0NGIyYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMYCXTr6jzq4LPc1I1zYoEr3oIVSpcg+MKKR 8HrXqG1EaZ0885LHjIMPU8zvKXZ5k4AtbBI4Y9nm86tnXjE96JqK/Wr5sA6QzdWg Ob2ISbYuMyPLy8lMTPDQi9597ZxbW/XpSYBJZa21uG2v+STgSH+TAtNlxDcTX/Kh nhTqZ5S0NP9uNZgvJ5RUYqOQYfMlP8AAbMHH4VAfFZjb0wysk2D/EATAy7KDxcHe a8ylv9yiTEURlgSjVAyfvoJTU0KnnrR0xWxHXFKMOHdNOaMf43V45d0Uqy+Ychui 8zFyRf9ZPzhJnN4WEVLE8w8sAaEpEWk1gY0aPZDm+ydROFlDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIqkwkm7evFY2FU/bA2OZ3qWAXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYz NjViOC02YjA4LTQyYjItOWVjMS0xOGE2YjJlMzViNWMvYjRkNDI1MWEtMzRkZC0z MjAzLWExNWItODhlNTg3MGY3MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE2MzY1YjgtNmIwOC00MmIyLTll YzEtMThhNmIyZTM1YjVjLzZhNjM2NWI4LTZiMDgtNDJiMi05ZWMxLTE4YTZiMmUz NWI1Yy5jcmwwHwYDVR0jBBgwFoAUORAQqKmVTu7NAWTGZktmnFJlTngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYzNjViOC02YjA4LTQyYjItOWVjMS0xOGE2 YjJlMzViNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyDqnGeOuCEnHrobCnKuYkDgkI7kOk9NV32JKLsPss4GUe/drcokShK wxNQpqrg8UKFCujDxGwi9s/2IQSl3BLLKQM6YRYxQ9NxtcsPwJzH7n/lVr/XupAX TD+0s3UKVFBE3ldItWLJp5J/K4mFv0sVq1nwqPiVRRwmJQZvlS6htOaV9lY53ISj lnhZdR51OUGB/xldLzBnrVivbOevttzcgIdUJwkUhZ6YswhkC91AQ4GYNfQimFTH SP+1AxrGTd9LCDKUbq2dSibqitPo74Cr2nlLcF+bRpoKeQB7/jkuPrTDby/EJmcS B6mbOTwXFL5zJan2ixeSmPFdbG6Mk+Q= -----END CERTIFICATE-----Generated at Tue Oct 21 05:52:44 2025 by rpki-client