$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa File: 50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json) Hash identifier: br0xQ5AyV0ScRXcHWgR1WQZrQ9EQrh1Q4NvpvjTIE7s= Subject key identifier: 49:24:EE:8D:97:4D:CD:F1:5A:9C:21:50:1C:E2:27:E8:D0:2C:A8:94 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C94CC0FB73CECC4CE9700 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:94:cc:0f:b7:3c:ec:c4:ce:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=d13f0ce8-e51d-40e2-9d00-7ad4a295f9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:5f:13:d8:83:71:6d:1c:45:17:27:8e:1c: ec:58:f1:77:38:ad:4e:40:3d:56:39:7b:33:ba:af: bf:06:4c:5d:c3:8a:a8:50:b7:d9:bc:8c:ea:0e:d2: 1e:99:a3:8c:79:c5:c8:72:54:b9:bc:00:36:47:0d: f4:f4:0d:bd:9c:ca:a8:91:b9:30:45:82:ca:16:a3: 37:b1:b2:c1:96:6c:ed:8a:0a:e3:9a:f0:03:6b:43: 67:59:b6:31:56:95:50:70:86:c4:76:5e:ce:ae:d6: 39:74:ba:0f:d4:2e:c0:66:88:f5:a6:05:dc:cc:f5: 85:08:f8:aa:ce:93:38:98:59:9e:87:24:86:80:ce: b1:c2:39:d3:48:cb:72:0e:79:c6:50:64:6e:07:34: 30:b7:63:73:aa:65:a4:72:73:ee:1d:91:f4:13:ed: ad:cc:68:36:0c:08:ed:a0:26:9e:39:2c:cc:e1:bc: 0b:17:8c:29:60:c7:87:03:0e:a0:25:91:7b:78:fd: 0d:02:e4:12:08:82:b0:f4:2e:34:da:d6:94:2e:9e: a9:0f:f3:f9:d1:42:13:41:1c:3c:15:dd:b9:9a:b5: c3:f5:9c:7d:97:3a:13:a0:9c:46:53:b0:d5:17:93: bc:15:22:c9:e0:09:dc:f5:47:ff:b5:43:c2:83:94: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:EE:8D:97:4D:CD:F1:5A:9C:21:50:1C:E2:27:E8:D0:2C:A8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fd:b1:c6:4b:c8:43:4d:27:be:d1:eb:ad:d3:93:e5:d4:54: c6:22:5e:35:a8:39:24:9b:3e:ce:2c:04:8a:35:e7:9c:eb:2f: 77:5e:2b:12:f0:7f:89:9c:c1:dd:97:90:36:4e:ba:59:10:d8: 7a:5a:87:5a:47:5d:0d:63:83:30:d4:d3:97:45:26:3f:00:03: d8:d7:0c:e1:f5:f6:a6:96:b3:4f:a0:cf:56:aa:12:1f:06:4e: 90:f9:91:4d:80:d4:29:d6:80:0d:87:15:6e:d7:ad:18:6b:6b: 3a:29:79:cc:9a:cf:80:10:7b:16:dc:60:a0:c7:a4:be:70:63: 74:b1:76:f8:25:5c:50:dc:ab:c0:b5:9c:1e:80:77:b7:de:f9: 9a:9d:09:1f:de:97:cf:2a:d4:d7:a5:19:45:da:55:88:d7:c3: 07:59:35:15:c3:3d:e5:04:9d:98:45:06:a4:b3:3e:37:8f:31: c0:32:3b:86:00:1c:78:50:24:48:a8:2e:64:09:40:8c:db:0a: f5:c6:94:1b:ad:c3:60:79:e4:dc:af:34:54:d7:f1:c1:19:6f: a3:c1:f7:a0:da:2e:ec:12:34:26:dc:d8:fa:5e:11:57:45:88: be:35:7f:51:83:6a:88:e9:71:d1:a0:65:27:22:06:9c:b2:60: 62:51:82:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJTMD7c87MTOlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDEzZjBjZTgtZTUxZC00MGUyLTlkMDAtN2FkNGEyOTVmOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BhfE9iDcW0cRRcnjhzsWPF3OK1OQD1WOXsz uq+/Bkxdw4qoULfZvIzqDtIemaOMecXIclS5vAA2Rw309A29nMqokbkwRYLKFqM3 sbLBlmztigrjmvADa0NnWbYxVpVQcIbEdl7OrtY5dLoP1C7AZoj1pgXczPWFCPiq zpM4mFmehySGgM6xwjnTSMtyDnnGUGRuBzQwt2NzqmWkcnPuHZH0E+2tzGg2DAjt oCaeOSzM4bwLF4wpYMeHAw6gJZF7eP0NAuQSCIKw9C402taULp6pD/P50UITQRw8 Fd25mrXD9Zx9lzoToJxGU7DVF5O8FSLJ4Anc9Uf/tUPCg5RujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkk7o2XTc3xWpwhUBziJ+jQLKiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTA2Mzg5ODUtMDFlZC0z N2I1LThmMWEtN2MzMjMwYTg2YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf9scZLyENNJ77R663Tk+XUVMYiXjWoOSSbPs4sBIo155zrL3deKxLw f4mcwd2XkDZOulkQ2Hpah1pHXQ1jgzDU05dFJj8AA9jXDOH19qaWs0+gz1aqEh8G TpD5kU2A1CnWgA2HFW7XrRhrazopecyaz4AQexbcYKDHpL5wY3SxdvglXFDcq8C1 nB6Ad7fe+ZqdCR/el88q1NelGUXaVYjXwwdZNRXDPeUEnZhFBqSzPjePMcAyO4YA HHhQJEioLmQJQIzbCvXGlButw2B55NyvNFTX8cEZb6PB96DaLuwSNCbc2PpeEVdF iL41f1GDaojpcdGgZSciBpyyYGJRgj0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:59:22 2025 by rpki-client