$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: 9xjP1yEkyfa5RfXlKLQ9ZdJEcl7ftmtnxdRl5DeKymk= Subject key identifier: 52:E4:B4:B6:7E:8C:45:F3:D0:26:1A:F5:E1:B5:73:FC:39:C0:58:67 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C94B5DA67E0CC4C3F6380 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:94:b5:da:67:e0:cc:4c:3f:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=d0e16a7b-92e2-4486-8d68-4f1a0d141263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:e5:59:4d:ad:52:04:01:ba:b6:8a:e8:dd: 50:42:30:98:c1:dc:4f:26:2b:be:f9:37:11:ec:0a: e4:91:53:cd:ff:25:72:e6:f0:03:e1:63:65:95:b0: 95:87:c2:4f:b3:dd:0f:c6:2c:ed:7f:3b:41:af:83: fd:c6:17:52:41:2e:67:f4:35:fe:95:a1:d6:41:2c: 1e:94:4a:39:42:30:4b:3e:1a:ef:f6:7b:23:01:4d: 8e:b0:2e:b0:26:28:ae:d1:a5:21:d9:af:e9:da:63: 43:d7:dc:bf:78:4a:87:50:ad:25:3a:e8:3a:62:6d: da:1c:2f:51:fb:e1:a6:24:1b:c5:f6:af:7e:e7:de: c8:28:43:41:cc:12:fa:d5:ee:1d:c2:f3:d1:d6:94: 85:0f:90:50:f8:ff:63:7d:0c:e7:ba:3e:ca:71:c3: 58:3a:4b:d2:f9:4f:fb:ba:fa:d3:e3:09:3c:2a:a9: cd:bc:02:92:18:3f:d5:0c:62:80:39:f0:82:64:65: 13:55:68:fd:4f:fd:36:13:be:31:bd:76:d9:d5:f7: e9:ca:07:05:92:74:b8:7b:20:cd:77:68:2c:d3:37: 6f:85:06:1f:ff:e6:2a:61:fb:8c:9c:be:85:fe:12: 0a:e8:ec:e2:73:fb:be:83:9a:96:e0:97:03:94:84: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:B4:B6:7E:8C:45:F3:D0:26:1A:F5:E1:B5:73:FC:39:C0:58:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:20:23:64:f4:34:8b:2d:e8:be:04:be:81:39:64:7e:36:d5: 0b:84:2e:0d:43:b2:ce:d3:3f:7b:a0:47:b8:38:1b:6f:9f:a1: a9:86:f8:4a:5c:8f:78:12:c6:b2:47:1c:c2:27:ba:ea:80:44: cc:41:34:0d:c8:20:e4:51:d3:20:6a:34:c4:78:48:bd:74:00: 6f:0e:a6:f7:96:7a:6b:20:d4:a1:c3:4e:7e:58:e9:21:04:8d: fd:1c:2a:14:98:05:cc:b5:85:66:e5:a1:76:af:10:4d:52:e6: b0:40:c0:bb:59:ca:38:9d:bc:1b:91:4d:17:a0:f1:ca:3e:8c: fd:da:80:f5:97:68:df:10:42:d6:98:a8:92:f6:d9:67:ca:a2: 74:4f:b4:13:1c:9d:0f:2b:0b:f7:ea:b1:28:2e:97:dc:0c:4e: fc:ee:e6:a5:7e:41:0f:69:c7:c1:8c:77:aa:a6:36:b4:12:b0: ca:d5:54:c7:05:ab:8f:17:43:5f:ad:af:d8:94:6a:34:08:33: d1:db:e8:9c:41:01:95:f5:cd:1e:58:a0:21:32:83:70:fb:72: c0:b0:22:ec:b2:83:94:02:06:3f:65:d1:4a:87:38:a6:71:8d: 44:4a:ad:e5:22:fe:98:9c:30:78:ba:d8:29:52:37:ba:56:13: df:51:47:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJS12mfgzEw/Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDBlMTZhN2ItOTJlMi00NDg2LThkNjgtNGYxYTBkMTQxMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRXlWU2tUgQBuraK6N1QQjCYwdxPJiu++TcR 7ArkkVPN/yVy5vAD4WNllbCVh8JPs90PxiztfztBr4P9xhdSQS5n9DX+laHWQSwe lEo5QjBLPhrv9nsjAU2OsC6wJiiu0aUh2a/p2mND19y/eEqHUK0lOug6Ym3aHC9R ++GmJBvF9q9+597IKENBzBL61e4dwvPR1pSFD5BQ+P9jfQznuj7KccNYOkvS+U/7 uvrT4wk8KqnNvAKSGD/VDGKAOfCCZGUTVWj9T/02E74xvXbZ1ffpygcFknS4eyDN d2gs0zdvhQYf/+YqYfuMnL6F/hIK6Ozic/u+g5qW4JcDlIQ6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLktLZ+jEXz0CYa9eG1c/w5wFhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkgI2T0NIst6L4EvoE5ZH421QuELg1Dss7TP3ugR7g4G2+foamG+Epc j3gSxrJHHMInuuqARMxBNA3IIORR0yBqNMR4SL10AG8OpveWemsg1KHDTn5Y6SEE jf0cKhSYBcy1hWbloXavEE1S5rBAwLtZyjidvBuRTReg8co+jP3agPWXaN8QQtaY qJL22WfKonRPtBMcnQ8rC/fqsSgul9wMTvzu5qV+QQ9px8GMd6qmNrQSsMrVVMcF q48XQ1+tr9iUajQIM9Hb6JxBAZX1zR5YoCEyg3D7csCwIuyyg5QCBj9l0UqHOKZx jURKreUi/picMHi62ClSN7pWE99RRwk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:46 2025 by rpki-client