$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa File: c0cae52e-f020-3204-8c02-c98f21b83298.roa (raw, json) Hash identifier: J9tvMLHvo72qWkUmQjzEzfFEAnTX6u7ZX/htxCVRr0g= Subject key identifier: 50:3C:90:B8:23:D8:42:61:4D:B8:C4:64:2D:1F:66:DE:34:59:1F:D6 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584B4081A30EA667E516741AA240 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a3:0e:a6:67:e5:16:74:1a:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ddee1bda-e465-4b25-97dc-93b4b7781c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:0a:16:b2:f3:47:ac:fb:98:d6:e1:3e:a0: 0f:65:cf:b5:c2:25:e3:70:55:20:4e:4a:4b:1b:ab: 57:74:84:30:63:45:9a:a9:66:fb:63:aa:76:b9:95: 75:5e:0c:91:89:bb:61:27:27:1b:11:0e:e7:de:90: 20:32:b9:45:c6:c8:4e:8b:54:06:09:24:27:2e:1f: bf:7e:1a:88:a9:e9:f7:3c:a3:a9:f0:58:80:2d:2e: 99:07:58:47:75:4e:9f:bc:47:e3:6f:42:9e:81:30: df:dc:d4:cf:42:74:bd:9d:c5:e7:dd:66:92:a2:e8: f2:83:2a:b8:0f:4b:22:15:df:16:12:bb:47:4c:26: d7:cf:c8:9f:de:a3:6e:a1:89:e7:31:e2:10:27:a1: c1:ec:4c:40:d1:df:05:49:2f:88:f6:8b:ce:be:ed: 6e:63:f9:ae:3e:53:91:b4:4f:7c:a3:a1:a6:58:79: ff:e7:79:4b:25:b2:05:64:ff:e5:ec:bb:52:cd:51: ab:5d:13:34:7d:74:9c:8d:86:63:ce:28:9a:70:78: 54:b5:60:cc:64:04:b7:f9:ca:90:4b:e6:c2:10:7e: 63:9b:ad:a6:d0:60:df:f5:98:4c:3b:f8:a0:7e:55: ec:6b:97:a5:d0:12:38:0b:76:53:b8:27:89:2c:42: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:90:B8:23:D8:42:61:4D:B8:C4:64:2D:1F:66:DE:34:59:1F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:33:f6:da:84:61:83:7e:0a:fb:86:ec:42:e4:d3:91:a4:14: 1a:5e:68:7b:98:6f:e4:2c:d9:b5:2c:12:23:d6:2b:12:4f:9d: 49:84:7a:df:50:75:68:c4:2f:71:f7:83:61:05:1b:4b:f0:05: e6:f9:ae:8a:ad:df:54:95:c1:1d:d5:48:21:2f:35:b3:5f:bc: ad:93:ed:61:96:f1:f6:58:c9:11:10:12:9a:d9:df:93:29:f2: fa:46:86:c5:f5:da:d8:f4:5d:06:6c:15:6a:e5:1f:bd:4d:2d: ed:34:58:9b:f6:5f:60:e6:79:97:2c:e2:c1:7d:b4:3a:75:8c: 5f:b3:fb:e9:d6:cb:71:d4:44:d4:ff:be:eb:c0:ef:f5:dc:47: 43:69:6c:8f:86:33:43:04:cf:cc:d9:66:ad:80:2c:96:b0:d0: aa:1c:dd:4a:1d:8b:c0:eb:95:e5:49:fa:97:e6:14:24:ac:4a: 4a:b4:8f:1d:a4:a6:1d:c2:7a:cf:25:7c:15:6e:df:c7:00:67: 5b:14:c8:2b:71:bc:04:16:da:bd:09:16:45:12:3f:6d:c8:ae: 79:a2:11:49:4a:59:01:44:8f:39:eb:9c:82:eb:9d:b5:e2:6e: 65:f0:fd:26:ca:40:f2:00:84:e5:c5:49:d6:3f:d5:62:f7:eb: 34:4e:87:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaMOpmflFnQaokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZGRlZTFiZGEtZTQ2NS00YjI1LTk3ZGMtOTNiNGI3NzgxYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwKFrLzR6z7mNbhPqAPZc+1wiXjcFUgTkpL G6tXdIQwY0WaqWb7Y6p2uZV1XgyRibthJycbEQ7n3pAgMrlFxshOi1QGCSQnLh+/ fhqIqen3PKOp8FiALS6ZB1hHdU6fvEfjb0KegTDf3NTPQnS9ncXn3WaSoujygyq4 D0siFd8WErtHTCbXz8if3qNuoYnnMeIQJ6HB7ExA0d8FSS+I9ovOvu1uY/muPlOR tE98o6GmWHn/53lLJbIFZP/l7LtSzVGrXRM0fXScjYZjziiacHhUtWDMZAS3+cqQ S+bCEH5jm62m0GDf9ZhMO/igflXsa5el0BI4C3ZTuCeJLEKLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA8kLgj2EJhTbjEZC0fZt40WR/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvYzBjYWU1MmUtZjAyMC0z MjA0LThjMDItYzk4ZjIxYjgzMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUz9tqEYYN+CvuG7ELk05GkFBpeaHuYb+Qs2bUsEiPWKxJPnUmEet9Q dWjEL3H3g2EFG0vwBeb5roqt31SVwR3VSCEvNbNfvK2T7WGW8fZYyREQEprZ35Mp 8vpGhsX12tj0XQZsFWrlH71NLe00WJv2X2DmeZcs4sF9tDp1jF+z++nWy3HURNT/ vuvA7/XcR0NpbI+GM0MEz8zZZq2ALJaw0Koc3Uodi8DrleVJ+pfmFCSsSkq0jx2k ph3Ces8lfBVu38cAZ1sUyCtxvAQW2r0JFkUSP23IrnmiEUlKWQFEjznrnILrnbXi bmXw/SbKQPIAhOXFSdY/1WL36zROhxw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:14 2025 by rpki-client