$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: xf+VT3qdMo26LMfnCe+/3Ig9BTXO4Xg8I5EoG97f1/U= Subject key identifier: 06:1F:EA:56:9A:B8:95:D4:68:96:57:0B:6E:3E:5D:4B:64:57:C3:2E Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B864CB539626CC131D1EF5580 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b5:39:62:6c:c1:31:d1:ef:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=16b19ef5-159b-4bd1-b8a3-1b181711c0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:08:7b:01:98:52:f9:39:08:57:ae:4c:55: ac:23:6e:13:87:2c:d1:85:ad:f1:74:5e:67:c4:85: c6:07:e7:92:fb:5d:78:e3:7b:e4:8b:fd:5c:99:10: 4f:db:7f:3b:06:64:ad:d2:20:06:f1:eb:88:85:83: 01:8b:27:75:9d:62:3f:0c:4c:0c:7f:74:a6:86:c2: 5d:99:c9:54:3f:e1:13:de:1a:1c:74:1e:e0:b4:a0: 5c:d3:2b:fa:44:a0:58:cb:34:f9:0f:5c:f8:5f:3a: b1:9b:6f:a7:a0:77:18:f0:0d:4d:43:5e:53:dd:02: 63:a0:ed:da:6b:48:d6:0d:23:32:84:d9:8d:e2:ad: 83:e4:71:5d:80:31:33:58:13:87:5e:38:21:b4:86: 0b:7c:f0:6e:f2:37:1a:23:42:1e:30:dc:fa:c4:75: 66:e1:ce:45:b1:a7:11:c0:a7:cd:f2:d4:aa:d9:57: e2:9d:6f:22:16:27:62:7d:d1:4a:fa:58:93:6c:e0: 48:b4:1b:6a:41:ee:c5:23:c1:37:e8:7c:3e:a5:70: 46:eb:75:f3:8e:4c:e3:c4:8d:55:d9:cc:04:fb:c5: a4:9a:bb:d8:75:fb:18:e9:e4:c6:59:96:77:79:a9: 28:18:4b:f3:58:0a:f2:ec:c5:9d:51:d7:7c:68:c2: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1F:EA:56:9A:B8:95:D4:68:96:57:0B:6E:3E:5D:4B:64:57:C3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3a:c9:50:34:76:e5:17:51:9a:50:ae:23:75:ba:90:e4:c9: 01:4b:ce:5f:09:a1:9d:fe:01:12:85:1e:69:22:b4:1e:a0:9d: d4:6e:ad:ef:7f:80:df:96:f1:31:f9:1f:bb:eb:34:78:40:e0: 06:28:88:d8:89:61:66:2f:2b:d6:a1:f2:b0:60:d9:cc:a1:f1: d6:20:ca:5e:79:6e:b4:9b:de:12:c1:65:d0:43:94:b0:a5:a1: 0d:68:53:1e:fc:ad:df:93:95:14:ff:49:22:34:0f:bb:03:fe: a0:41:4b:3b:9f:9b:11:b1:0d:50:a9:2c:07:b9:f9:8c:14:e6: 7e:c0:38:d2:28:82:04:ff:53:37:ff:a0:a0:9f:53:2a:6f:84: 18:c3:56:df:82:07:25:e7:d5:4d:ff:dd:dc:5e:68:24:e8:df: 98:ba:5c:ce:b4:c0:2a:53:40:64:bf:19:5f:5f:21:9e:09:57: a1:3b:e1:52:bf:a0:dd:00:71:fb:8e:88:f9:6a:eb:9a:b9:cd: d2:94:9d:5b:7f:d8:3e:aa:54:37:77:32:9b:84:1c:37:e7:9d: da:0a:b4:4e:fc:91:a7:fd:85:b4:55:0a:3c:64:6a:ed:21:bb: a5:8a:63:33:0d:29:43:12:5d:5d:43:f9:ec:d4:0d:fe:3a:11: 98:ef:1a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLU5YmzBMdHvVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk MTZiMTllZjUtMTU5Yi00YmQxLWI4YTMtMWIxODE3MTFjMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil8IewGYUvk5CFeuTFWsI24ThyzRha3xdF5n xIXGB+eS+11443vki/1cmRBP2387BmSt0iAG8euIhYMBiyd1nWI/DEwMf3SmhsJd mclUP+ET3hocdB7gtKBc0yv6RKBYyzT5D1z4Xzqxm2+noHcY8A1NQ15T3QJjoO3a a0jWDSMyhNmN4q2D5HFdgDEzWBOHXjghtIYLfPBu8jcaI0IeMNz6xHVm4c5FsacR wKfN8tSq2VfinW8iFidifdFK+liTbOBItBtqQe7FI8E36Hw+pXBG63XzjkzjxI1V 2cwE+8WkmrvYdfsY6eTGWZZ3eakoGEvzWAry7MWdUdd8aMIJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYf6laauJXUaJZXC24+XUtkV8MuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA6yVA0duUXUZpQriN1upDkyQFLzl8JoZ3+ARKFHmkitB6gndRure9/ gN+W8TH5H7vrNHhA4AYoiNiJYWYvK9ah8rBg2cyh8dYgyl55brSb3hLBZdBDlLCl oQ1oUx78rd+TlRT/SSI0D7sD/qBBSzufmxGxDVCpLAe5+YwU5n7AONIoggT/Uzf/ oKCfUypvhBjDVt+CByXn1U3/3dxeaCTo35i6XM60wCpTQGS/GV9fIZ4JV6E74VK/ oN0AcfuOiPlq65q5zdKUnVt/2D6qVDd3MpuEHDfnndoKtE78kaf9hbRVCjxkau0h u6WKYzMNKUMSXV1D+ezUDf46EZjvGiU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:07 2025 by rpki-client