$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/48a559fa-0440-3c32-be38-c0a37ffddddb.roa File: 48a559fa-0440-3c32-be38-c0a37ffddddb.roa (raw, json) Hash identifier: BI5ievjkvluXaOuqsjCWbUXWLpChFyzuGEZFggcMPt4= Subject key identifier: AA:89:A1:29:FD:7E:D8:E9:2F:68:F8:5F:E5:5F:C4:8B:FB:F2:60:41 Certificate issuer: /CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf Certificate serial: 010D0C9F4328584B44B1B9BAFF40ABC1F53BED00 Authority key identifier: EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/48a559fa-0440-3c32-be38-c0a37ffddddb.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399224 IP address blocks: 168.100.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b9:ba:ff:40:ab:c1:f5:3b:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=f7a7e733-559f-4803-ba0d-c3dfd14775f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:81:33:3d:02:b9:92:73:31:0f:90:0f:e4: 87:2a:4f:b4:a4:5b:5e:82:64:41:6a:90:b1:84:e5: c6:4d:c3:b0:c4:91:d2:53:56:0c:c5:d3:7b:a7:03: 4c:69:6c:24:d8:4f:58:41:09:d2:ed:10:da:7d:5c: 66:94:77:51:a3:7c:38:09:53:05:77:47:54:2c:99: 3f:21:cb:55:e5:19:f1:69:43:1b:be:f0:d0:a2:a5: 51:2b:4d:c0:52:2e:2d:af:71:a2:2a:f7:f8:5a:5b: b7:3f:61:66:92:b3:99:f1:e1:2e:62:ca:2d:70:ed: ff:a5:70:d0:0f:d5:f8:cb:30:0a:05:98:13:d3:06: 41:21:cd:56:1f:fe:d9:ac:92:45:79:7c:84:bc:eb: 76:b2:50:c7:6d:f3:30:ca:85:d2:b4:c8:ed:60:81: 17:62:63:b5:cb:ac:1b:08:2f:42:a6:cc:c6:12:1b: 3b:6d:1a:3e:4a:56:7a:09:15:70:70:3b:81:fa:6a: 59:5c:c9:da:0c:2a:ec:62:0d:df:81:f7:46:5f:5a: 6f:98:65:23:12:20:bc:c2:62:ed:1d:55:a0:18:be: 8f:78:6b:a0:fb:ee:3b:14:37:a1:e2:3f:fa:7d:c9: 4d:69:2f:e0:f5:29:f9:13:36:17:05:50:3c:61:b5: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:A1:29:FD:7E:D8:E9:2F:68:F8:5F:E5:5F:C4:8B:FB:F2:60:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/48a559fa-0440-3c32-be38-c0a37ffddddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl X509v3 Authority Key Identifier: keyid:EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer sbgp-ipAddrBlock: critical IPv4: 168.100.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:eb:52:df:74:ff:53:4e:62:f3:ac:b5:4d:f1:3c:24:f3:24: 3f:83:2d:42:2a:8c:28:3e:a9:b3:92:11:29:ae:af:12:50:22: df:6f:19:99:1e:42:e3:19:d2:b1:61:06:23:3c:d3:a3:97:19: 51:ca:d4:a3:b1:af:f8:e6:a4:49:d6:3f:45:e4:f9:b8:39:17: 7c:e9:01:04:28:b3:0e:c8:18:20:7e:9b:51:5d:3a:1a:44:06: 71:64:22:d2:39:80:3c:f5:c0:a3:66:15:06:aa:11:bb:bf:2a: 36:eb:7f:5f:87:23:f4:35:59:8e:08:19:8d:5c:e0:ab:c5:dc: 01:82:ea:73:e9:28:9b:71:1e:f5:92:fd:10:d5:38:70:6c:81: d2:54:b7:3f:cc:1c:81:57:bf:30:87:30:8e:ee:9a:3f:91:d9: 8b:c8:f6:3d:2d:8c:a2:bb:3a:ff:ea:cc:09:5d:25:20:ed:74: 38:df:8d:89:a7:42:38:9a:0a:4c:85:6b:07:76:ff:dd:3f:4d: 0e:db:b1:2a:1f:9d:8f:9e:47:c6:fe:b5:e8:67:0b:3a:69:7a: 7a:42:6d:ad:88:e1:85:98:fe:cc:73:ab:4a:10:06:7e:df:ad: 7c:64:3d:94:79:eb:2e:0d:1c:48:0b:7f:d0:23:0f:4a:18:b9: a2:b3:c6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbm6/0CrwfU77QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZhZWY2NDQtZjNiNy00OTlkLTllZDgtY2QzOWJlMzMy NGJmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk ZjdhN2U3MzMtNTU5Zi00ODAzLWJhMGQtYzNkZmQxNDc3NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3iBMz0CuZJzMQ+QD+SHKk+0pFtegmRBapCx hOXGTcOwxJHSU1YMxdN7pwNMaWwk2E9YQQnS7RDafVxmlHdRo3w4CVMFd0dULJk/ IctV5RnxaUMbvvDQoqVRK03AUi4tr3GiKvf4Wlu3P2FmkrOZ8eEuYsotcO3/pXDQ D9X4yzAKBZgT0wZBIc1WH/7ZrJJFeXyEvOt2slDHbfMwyoXStMjtYIEXYmO1y6wb CC9CpszGEhs7bRo+SlZ6CRVwcDuB+mpZXMnaDCrsYg3fgfdGX1pvmGUjEiC8wmLt HVWgGL6PeGug++47FDeh4j/6fclNaS/g9Sn5EzYXBVA8YbWbhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqJoSn9ftjpL2j4X+VfxIv78mBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNmFl ZjY0NC1mM2I3LTQ5OWQtOWVkOC1jZDM5YmUzMzI0YmYvNDhhNTU5ZmEtMDQ0MC0z YzMyLWJlMzgtYzBhMzdmZmRkZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTZhZWY2NDQtZjNiNy00OTlkLTll ZDgtY2QzOWJlMzMyNGJmL2E2YWVmNjQ0LWYzYjctNDk5ZC05ZWQ4LWNkMzliZTMz MjRiZi5jcmwwHwYDVR0jBBgwFoAU7CJ8MHw53DNQa1HAGaKumcHmN24wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNmFlZjY0NC1mM2I3LTQ5OWQtOWVkOC1jZDM5 YmUzMzI0YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqGQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3rUt90/1NOYvOstU3xPCTzJD+DLUIqjCg+qbOSESmurxJQIt9vGZke QuMZ0rFhBiM806OXGVHK1KOxr/jmpEnWP0Xk+bg5F3zpAQQosw7IGCB+m1FdOhpE BnFkItI5gDz1wKNmFQaqEbu/Kjbrf1+HI/Q1WY4IGY1c4KvF3AGC6nPpKJtxHvWS /RDVOHBsgdJUtz/MHIFXvzCHMI7umj+R2YvI9j0tjKK7Ov/qzAldJSDtdDjfjYmn QjiaCkyFawd2/90/TQ7bsSofnY+eR8b+tehnCzppenpCba2I4YWY/sxzq0oQBn7f rXxkPZR56y4NHEgLf9AjD0oYuaKzxiI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:45 2025 by rpki-client