$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa File: 9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa (raw, json) Hash identifier: ojRT3wPkfyAfgu9VZiIdMT1pGUTWSpCOmevuipmyDA0= Subject key identifier: 86:8E:EC:B6:E2:80:02:77:D1:D8:CA:D7:2E:D5:E6:2A:DD:F8:CC:D0 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C94ED204158BC2BC3EF80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 128.254.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:94:ed:20:41:58:bc:2b:c3:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=d8a47a85-b81e-4c8b-88a9-3c32a41581b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:2a:52:2f:60:01:3a:79:7f:cc:72:07:36: ee:6c:5e:f3:6f:3e:a2:a1:95:9e:2b:0a:38:b8:d9: 48:a2:29:07:43:7c:83:69:e9:99:18:be:ec:26:26: 6b:52:cf:16:90:91:a5:44:60:e0:36:a0:9f:bd:08: b3:cc:59:b0:ac:12:04:98:70:2d:d4:9b:9c:4d:77: 0f:0b:9b:f2:b0:4d:56:35:33:b8:74:01:1b:a4:a5: 6f:db:d9:57:3f:f7:a1:7d:6c:e2:e3:95:9a:b1:19: 1c:2c:54:cc:7b:ff:48:2f:5d:9c:48:be:ca:c7:7a: 4f:dd:be:fc:14:ba:f5:8e:a4:88:b1:8d:62:7f:22: 89:49:ac:0a:48:56:be:84:33:83:dd:07:40:3e:77: 82:9a:ec:91:75:14:82:30:36:22:94:2d:0c:85:b3: df:6c:40:67:6d:ec:aa:a6:dc:15:2d:ba:16:64:de: 56:31:8d:98:f3:25:0d:40:7b:67:6d:13:7f:f9:4f: b2:30:a3:d1:10:78:7c:11:90:d0:20:ee:a5:18:a0: 36:d6:f8:70:e0:88:5a:c7:4d:fe:58:db:1e:a9:04: e5:f0:6b:d4:12:c4:b2:dd:15:be:c7:c2:90:95:28: cc:83:70:dd:97:2f:67:0b:8f:31:7b:e0:c9:3a:01: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:EC:B6:E2:80:02:77:D1:D8:CA:D7:2E:D5:E6:2A:DD:F8:CC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:47:c6:29:6d:11:cf:4c:1a:07:a6:d6:57:a1:35:54:59:b7: 54:6d:b0:b4:f5:7d:fb:7a:90:49:81:da:14:c1:2d:3d:d3:59: 53:e5:0e:2e:11:69:8e:70:d8:01:39:3f:26:fe:68:59:db:d4: 61:08:33:54:74:05:0c:c7:6d:77:8a:fb:b4:b3:89:27:f9:54: bb:b1:07:99:74:46:c7:20:36:8a:34:50:35:4a:e3:d0:7d:f5: 45:f7:fe:d5:c6:5f:1c:2f:e9:3b:ec:1e:7a:76:66:3e:1b:b4: 3f:c7:58:ac:f8:a0:65:43:9f:5a:e1:c8:86:82:a3:02:eb:1b: 5a:97:2e:e9:59:e8:28:62:26:f1:4b:7e:04:f3:2d:86:46:3a: c2:fd:cf:6a:46:35:cf:b1:6e:39:ef:09:17:c0:29:c5:f4:42: 2e:bf:0c:2d:88:97:50:9b:01:a1:e3:7d:af:1d:17:80:37:31: 4e:8c:3f:65:db:96:18:45:bb:d7:1f:9e:8a:91:6b:25:34:2d: 4c:f5:ce:91:70:ca:04:30:61:4d:53:91:63:a6:31:dd:d6:bd: 2e:38:f3:a6:ac:80:12:61:8a:68:43:f9:6e:8e:06:a0:eb:0b: c9:5d:68:bd:73:9d:3f:7e:db:d5:e2:d6:b9:1d:99:20:69:cd: 6b:5c:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJTtIEFYvCvD74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDhhNDdhODUtYjgxZS00YzhiLTg4YTktM2MzMmE0MTU4MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgsqUi9gATp5f8xyBzbubF7zbz6ioZWeKwo4 uNlIoikHQ3yDaemZGL7sJiZrUs8WkJGlRGDgNqCfvQizzFmwrBIEmHAt1JucTXcP C5vysE1WNTO4dAEbpKVv29lXP/ehfWzi45WasRkcLFTMe/9IL12cSL7Kx3pP3b78 FLr1jqSIsY1ifyKJSawKSFa+hDOD3QdAPneCmuyRdRSCMDYilC0MhbPfbEBnbeyq ptwVLboWZN5WMY2Y8yUNQHtnbRN/+U+yMKPREHh8EZDQIO6lGKA21vhw4Ihax03+ WNseqQTl8GvUEsSy3RW+x8KQlSjMg3Ddly9nC48xe+DJOgFctQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaO7LbigAJ30djK1y7V5ird+MzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOWE0YjY3ZDgtMmNjMS0z YWI3LThmZmUtMWZmZThkM2FhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1HxiltEc9MGgem1lehNVRZt1RtsLT1fft6kEmB2hTBLT3TWVPlDi4R aY5w2AE5Pyb+aFnb1GEIM1R0BQzHbXeK+7SziSf5VLuxB5l0RscgNoo0UDVK49B9 9UX3/tXGXxwv6TvsHnp2Zj4btD/HWKz4oGVDn1rhyIaCowLrG1qXLulZ6ChiJvFL fgTzLYZGOsL9z2pGNc+xbjnvCRfAKcX0Qi6/DC2Il1CbAaHjfa8dF4A3MU6MP2Xb lhhFu9cfnoqRayU0LUz1zpFwygQwYU1TkWOmMd3WvS4486asgBJhimhD+W6OBqDr C8ldaL1znT9+29Xi1rkdmSBpzWtcf+s= -----END CERTIFICATE-----Generated at Mon Oct 20 23:18:35 2025 by rpki-client