$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json) Hash identifier: sKtmfEW/s+ZZ8wrQYU1idK/K9tX0YHFczfc+tkf+sfg= Subject key identifier: E7:E7:BF:98:92:58:A0:CF:B6:26:B7:41:C9:27:7E:36:E9:E9:2C:65 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C92E176C0B11F8E410C00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:92:e1:76:c0:b1:1f:8e:41:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=413c0e29-1675-46df-acec-260809348b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:67:31:05:93:63:e7:66:9a:ba:9e:7e:c8: 29:78:96:d1:a5:10:bf:d9:67:d1:ca:ef:6f:4f:22: 0d:e6:65:03:b8:a5:7e:4c:0a:74:29:52:56:df:8f: c6:40:cc:11:2d:f9:f9:a2:70:d7:6d:77:f8:b6:0e: 1f:c0:3d:42:63:cc:d6:99:e0:42:cb:a6:e9:f5:5a: db:00:57:27:d9:a4:56:a6:76:13:3d:ff:13:77:2f: bc:42:73:15:12:2b:de:55:ed:bf:53:32:0b:98:8a: 27:e3:c2:2a:22:c7:59:21:c9:b8:56:6a:ce:40:03: 71:4a:26:eb:2d:5c:c3:04:67:1c:3a:0a:85:ac:38: 40:9b:70:00:3e:66:7d:33:76:84:f7:3e:b9:95:43: 99:1a:2c:90:ae:95:22:7c:69:16:74:2c:6d:47:44: 0d:52:6e:d7:bc:67:a5:97:b3:f4:6a:bc:aa:50:57: 55:e6:19:ab:b5:d6:9a:60:73:7f:9d:52:88:c7:3a: ed:82:ee:c7:f2:3f:25:04:a2:f2:00:a2:49:67:fb: 74:20:f7:af:09:4a:60:7b:82:16:c0:9f:f1:56:55: 73:3c:d3:08:0f:d5:48:4c:ce:81:26:80:80:89:6f: 94:af:61:2e:7a:91:70:56:34:2b:61:27:e6:52:52: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E7:BF:98:92:58:A0:CF:B6:26:B7:41:C9:27:7E:36:E9:E9:2C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:84:29:34:52:48:91:01:fe:00:0e:b4:49:6f:a4:e9:51:9b: 89:0d:2b:1e:45:cb:75:86:fe:c1:66:4c:cf:2f:4a:c3:8c:81: ec:be:15:34:93:a4:53:bc:d1:aa:3e:50:49:09:01:5d:41:d7: 39:51:29:d1:ed:c8:96:af:36:b9:98:27:14:9c:50:f2:a1:d2: fb:2e:d0:d7:63:b5:7b:1b:b1:b0:a5:66:b1:e0:ad:81:2f:e7: b4:bb:de:37:eb:47:fe:0c:ee:be:5d:58:59:6e:1e:5b:bf:ac: 90:3d:68:29:88:f3:ce:53:bf:08:57:53:44:18:8d:0a:ca:79: b7:09:8e:41:57:94:ee:56:50:de:8b:88:3e:8b:c8:ed:89:2e: 7e:dc:48:f7:21:82:b7:c8:01:a1:55:c8:05:b2:0e:76:a3:c4: d6:0e:07:02:3f:15:08:95:8b:88:a7:52:e3:bc:7d:eb:f4:0e: 2c:a1:5f:2a:45:b9:b1:83:8e:49:de:55:93:1b:32:e4:4e:75: 9f:28:e8:3f:24:a2:08:b7:8f:a5:a2:69:3d:4e:5d:72:22:f3: 4c:0a:40:ab:99:42:88:12:76:16:cc:f5:15:68:a8:e3:79:9d: 0c:5c:77:c3:8f:92:db:eb:6a:02:e1:58:de:17:66:a4:2f:82: 40:23:df:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJLhdsCxH45BDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NDEzYzBlMjktMTY3NS00NmRmLWFjZWMtMjYwODA5MzQ4YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi21nMQWTY+dmmrqefsgpeJbRpRC/2WfRyu9v TyIN5mUDuKV+TAp0KVJW34/GQMwRLfn5onDXbXf4tg4fwD1CY8zWmeBCy6bp9Vrb AFcn2aRWpnYTPf8Tdy+8QnMVEiveVe2/UzILmIon48IqIsdZIcm4VmrOQANxSibr LVzDBGccOgqFrDhAm3AAPmZ9M3aE9z65lUOZGiyQrpUifGkWdCxtR0QNUm7XvGel l7P0aryqUFdV5hmrtdaaYHN/nVKIxzrtgu7H8j8lBKLyAKJJZ/t0IPevCUpge4IW wJ/xVlVzPNMID9VITM6BJoCAiW+Ur2EuepFwVjQrYSfmUlI1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfnv5iSWKDPtia3Qcknfjbp6SxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKEKTRSSJEB/gAOtElvpOlRm4kNKx5Fy3WG/sFmTM8vSsOMgey+FTST pFO80ao+UEkJAV1B1zlRKdHtyJavNrmYJxScUPKh0vsu0NdjtXsbsbClZrHgrYEv 57S73jfrR/4M7r5dWFluHlu/rJA9aCmI885TvwhXU0QYjQrKebcJjkFXlO5WUN6L iD6LyO2JLn7cSPchgrfIAaFVyAWyDnajxNYOBwI/FQiVi4inUuO8fev0DiyhXypF ubGDjkneVZMbMuROdZ8o6D8kogi3j6WiaT1OXXIi80wKQKuZQogSdhbM9RVoqON5 nQxcd8OPktvragLhWN4XZqQvgkAj3/c= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:10 2025 by rpki-client