$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa File: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (raw, json) Hash identifier: 2rLI7MhoKO41b39FIIls5d/YkFNJVYByGat9HYzFwn4= Subject key identifier: C4:AB:5D:E0:50:9E:18:15:A6:ED:C5:19:EF:32:84:C0:4C:0D:7E:65 Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Certificate serial: 010D0C9F4328584B8EACE789DD885230D4F19700 Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 393877 IP address blocks: 192.133.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e7:89:dd:88:52:30:d4:f1:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=cf73dfcf-d014-4ee1-8034-ec9dd0603692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:b5:6d:46:d2:81:3a:a1:be:10:27:f1:dd: 17:21:97:b9:95:c3:f1:5a:3a:e7:db:cb:5c:af:07: d8:d0:1a:e7:5a:ff:a9:4b:7e:de:17:a2:37:d5:54: 4b:2c:b4:f5:7e:ac:45:ee:2c:f4:15:47:19:31:13: 2c:1b:a8:33:c0:6b:28:c2:74:12:c8:4d:4f:cf:7b: 44:de:90:10:20:16:36:aa:49:c5:df:82:be:2a:e9: 3a:95:df:46:21:5f:1e:43:d6:b8:7a:eb:95:f1:08: f5:f7:67:4d:55:0d:38:a2:e0:7c:e9:49:cc:c8:96: 52:9f:5f:9e:cd:46:90:14:d6:65:9e:5b:4b:8d:9d: 75:ad:6f:05:57:4b:04:ac:61:c7:e4:57:88:cb:a4: ee:86:cd:58:68:30:9f:55:03:e8:94:17:06:37:1e: 6c:92:cd:36:ce:a6:d8:2c:cb:13:1b:16:b3:4e:4a: f5:64:da:16:cc:61:d7:66:00:64:49:0a:df:59:ac: f0:ce:99:74:d0:01:0d:28:02:06:2e:a1:b2:64:59: 71:9b:a6:a2:13:19:ef:62:08:69:98:f1:b1:64:96: 71:b6:3d:d4:72:f0:ea:4f:64:70:13:0b:aa:95:92: 32:ab:0b:be:07:af:94:ec:5e:14:05:26:8d:69:1f: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:5D:E0:50:9E:18:15:A6:ED:C5:19:EF:32:84:C0:4C:0D:7E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl X509v3 Authority Key Identifier: keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer sbgp-ipAddrBlock: critical IPv4: 192.133.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:af:01:8b:05:b7:2f:27:11:9a:d0:66:d8:0a:ea:85:92:5f: bc:1a:aa:8d:e9:e5:13:40:31:9a:fc:ff:18:28:2d:45:d2:29: 96:0b:1f:98:e6:82:58:4e:c6:18:ce:57:b9:ed:90:3a:21:18: 68:a0:05:70:1e:d4:62:8d:ef:de:6b:53:9d:67:cc:4f:99:a6: 0f:dc:72:6f:4b:80:d4:72:19:f7:4f:5c:aa:6b:26:a8:1b:02: 65:fd:a4:ef:e1:8b:34:e1:b3:d2:ab:6f:a7:bd:60:23:de:d8: 8d:61:ff:d7:93:a4:78:9d:a8:c1:31:5d:f4:93:19:cd:09:dc: ab:54:6b:aa:72:14:30:90:ee:12:7e:9e:38:ec:6b:1f:48:ce: a8:33:94:0c:66:5c:a9:1d:bb:70:a8:13:27:b9:a2:6c:19:08: 64:0b:21:60:45:8b:cc:21:7a:5a:4c:dd:f9:9b:0c:8a:7f:20: 20:00:a6:de:1a:9e:fe:b2:41:1a:63:20:f5:ef:d4:55:17:4d: c1:dd:a3:c4:43:84:64:07:7d:71:cf:47:af:6b:a6:c3:1d:66: a4:a6:79:71:73:94:77:46:96:2b:09:2f:be:6f:b2:df:26:d2: c2:e1:50:08:50:96:ba:dd:6c:3b:36:b3:c2:7a:ca:2a:b7:79: be:e8:90:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOeJ3YhSMNTxlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZhMGFiZDUtN2NmOC00MmNmLThhNDYtNjI2YjUwZWZk MzBlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y3M2RmY2YtZDAxNC00ZWUxLTgwMzQtZWM5ZGQwNjAzNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/O1bUbSgTqhvhAn8d0XIZe5lcPxWjrn28tc rwfY0BrnWv+pS37eF6I31VRLLLT1fqxF7iz0FUcZMRMsG6gzwGsownQSyE1Pz3tE 3pAQIBY2qknF34K+Kuk6ld9GIV8eQ9a4euuV8Qj192dNVQ04ouB86UnMyJZSn1+e zUaQFNZlnltLjZ11rW8FV0sErGHH5FeIy6Tuhs1YaDCfVQPolBcGNx5sks02zqbY LMsTGxazTkr1ZNoWzGHXZgBkSQrfWazwzpl00AENKAIGLqGyZFlxm6aiExnvYghp mPGxZJZxtj3UcvDqT2RwEwuqlZIyqwu+B6+U7F4UBSaNaR9a3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSrXeBQnhgVpu3FGe8yhMBMDX5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEw YWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZiNTBlZmQzMGUvMjA5NGI0ZjMtOTcyMC0z YmVlLThmY2QtZTg1NGQzNjU0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZhMGFiZDUtN2NmOC00MmNmLThh NDYtNjI2YjUwZWZkMzBlL2ZmYTBhYmQ1LTdjZjgtNDJjZi04YTQ2LTYyNmI1MGVm ZDMwZS5jcmwwHwYDVR0jBBgwFoAU73PAu59X8k66/FW5U4oSDxo0itkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmEwYWJkNS03Y2Y4LTQyY2YtOGE0Ni02MjZi NTBlZmQzMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACvAYsFty8nEZrQZtgK6oWSX7waqo3p5RNAMZr8/xgoLUXSKZYLH5jm glhOxhjOV7ntkDohGGigBXAe1GKN795rU51nzE+Zpg/ccm9LgNRyGfdPXKprJqgb AmX9pO/hizThs9Krb6e9YCPe2I1h/9eTpHidqMExXfSTGc0J3KtUa6pyFDCQ7hJ+ njjsax9IzqgzlAxmXKkdu3CoEye5omwZCGQLIWBFi8whelpM3fmbDIp/ICAApt4a nv6yQRpjIPXv1FUXTcHdo8RDhGQHfXHPR69rpsMdZqSmeXFzlHdGlisJL75vst8m 0sLhUAhQlrrdbDs2s8J6yiq3eb7okAE= -----END CERTIFICATE-----Generated at Tue Oct 21 11:02:54 2025 by rpki-client