$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa File: 1b0ffaba-9563-309d-8325-7e01713b27c7.roa (raw, json) Hash identifier: 6IMS1NsUpFJBy6JwO2IJ41jwiWRMtEoc25pNzcK/Zsg= Subject key identifier: 58:AA:91:CA:B3:80:6D:4F:13:67:53:41:F2:2E:CB:8A:2A:3E:B3:39 Certificate issuer: /CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c Certificate serial: 010D0C9F4328584B92DCDF7F950911C56ECBC480 Authority key identifier: 18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 63126 IP address blocks: 192.42.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:df:7f:95:09:11:c5:6e:cb:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=e91fabbe-fadb-4828-bf9e-eccdc5eacd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:59:47:a9:4f:5a:38:27:37:cc:18:e8:66: dd:9c:0b:41:6a:99:ab:ba:d2:ac:5f:41:7d:d6:ce: 3a:8a:da:23:48:d1:ec:47:32:5f:8d:f7:ea:0d:9d: 84:b3:f5:f5:81:25:2c:25:27:0f:7f:e8:9f:c8:0f: 37:eb:b9:a6:69:a8:56:d1:bc:ed:a6:8e:87:aa:74: 20:30:a0:de:42:20:fe:1f:63:d4:13:4e:4e:e3:ef: fb:c5:8b:d9:52:9c:2b:3e:a9:af:d2:38:83:ae:c7: 82:f6:f7:3e:75:9e:0a:1d:f5:95:54:58:27:37:3a: c7:e6:d6:de:33:c5:88:8e:93:90:1e:ac:53:b0:8b: b1:41:52:d0:c3:b0:07:c0:ab:5b:cd:4a:54:11:c9: f3:31:47:dd:70:95:e3:a9:1d:7f:e5:cb:ce:84:bb: 7d:0e:57:4e:46:2d:87:95:06:23:4b:e8:71:13:e4: e2:19:56:04:af:ca:8a:94:c8:18:d1:e1:f4:ac:51: 09:ea:d2:ab:26:f6:54:bd:0a:5b:c5:32:95:5f:a7: 58:72:15:2f:51:11:5c:e7:ee:22:23:31:31:23:1f: db:aa:e7:fc:72:14:cb:75:10:02:46:02:02:48:86: 9a:4c:1f:c6:1d:5b:ab:ad:60:80:19:bc:ad:80:4f: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:91:CA:B3:80:6D:4F:13:67:53:41:F2:2E:CB:8A:2A:3E:B3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl X509v3 Authority Key Identifier: keyid:18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer sbgp-ipAddrBlock: critical IPv4: 192.42.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9e:61:6c:c1:4a:27:64:8b:89:56:07:19:0f:64:42:84:35: c8:b3:01:c2:31:27:33:b8:5d:38:d4:00:72:4c:36:a2:ec:cd: d5:da:d5:e7:25:4d:51:98:26:25:e8:2e:cb:ae:c2:db:96:27: a0:7a:b6:40:89:d5:f4:92:6f:46:4f:06:2b:9e:03:b8:5e:17: 22:78:7d:dd:30:ff:a7:18:3b:ea:11:01:2a:8c:3e:63:cb:45: 37:81:72:72:97:df:51:d8:2b:25:df:f4:1d:fd:a6:ed:6f:51: 0c:bb:7e:b0:3e:f4:48:c5:2b:cc:6a:fe:aa:17:40:0f:60:ca: a2:1f:79:a4:c6:55:ab:bf:79:02:a7:e0:47:dd:a9:c8:cd:de: 1d:da:5c:82:ac:8a:fb:f2:5f:25:b0:34:d1:c4:2d:ea:a7:4c: 15:be:e6:1b:1c:e2:a0:a2:99:29:ba:ad:8c:d0:9c:5d:4d:d7: a7:ee:3b:53:11:aa:25:79:e9:a8:d9:d2:5c:e5:30:3e:22:2e: 65:e5:37:be:a2:2f:3b:d5:a7:61:6a:d4:0e:4a:3a:75:65:f4: ef:73:97:07:c1:80:6e:27:2a:2d:37:76:30:ff:05:e6:f8:e6: 8d:c8:1a:fd:fd:5c:71:b0:01:35:77:3f:45:83:88:19:b9:6a: 12:6f:63:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3N9/lQkRxW7LxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzZWJhNzItYjRhNS00ZjMxLWFmMGYtODAxYTBmYjNi ODNjMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTkxZmFiYmUtZmFkYi00ODI4LWJmOWUtZWNjZGM1ZWFjZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn1ZR6lPWjgnN8wY6GbdnAtBapmrutKsX0F9 1s46itojSNHsRzJfjffqDZ2Es/X1gSUsJScPf+ifyA8367mmaahW0bztpo6HqnQg MKDeQiD+H2PUE05O4+/7xYvZUpwrPqmv0jiDrseC9vc+dZ4KHfWVVFgnNzrH5tbe M8WIjpOQHqxTsIuxQVLQw7AHwKtbzUpUEcnzMUfdcJXjqR1/5cvOhLt9DldORi2H lQYjS+hxE+TiGVYEr8qKlMgY0eH0rFEJ6tKrJvZUvQpbxTKVX6dYchUvURFc5+4i IzExIx/bquf8chTLdRACRgICSIaaTB/GHVurrWCAGbytgE9GnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiqkcqzgG1PE2dTQfIuy4oqPrM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OTNl YmE3Mi1iNGE1LTRmMzEtYWYwZi04MDFhMGZiM2I4M2MvMWIwZmZhYmEtOTU2My0z MDlkLTgzMjUtN2UwMTcxM2IyN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDkzZWJhNzItYjRhNS00ZjMxLWFm MGYtODAxYTBmYjNiODNjLzQ5M2ViYTcyLWI0YTUtNGYzMS1hZjBmLTgwMWEwZmIz YjgzYy5jcmwwHwYDVR0jBBgwFoAUGEvnzgIz1RMFMhlD4R8O7yj767UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80OTNlYmE3Mi1iNGE1LTRmMzEtYWYwZi04MDFh MGZiM2I4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGeYWzBSidki4lWBxkPZEKENcizAcIxJzO4XTjUAHJMNqLszdXa1ecl TVGYJiXoLsuuwtuWJ6B6tkCJ1fSSb0ZPBiueA7heFyJ4fd0w/6cYO+oRASqMPmPL RTeBcnKX31HYKyXf9B39pu1vUQy7frA+9EjFK8xq/qoXQA9gyqIfeaTGVau/eQKn 4EfdqcjN3h3aXIKsivvyXyWwNNHELeqnTBW+5hsc4qCimSm6rYzQnF1N16fuO1MR qiV56ajZ0lzlMD4iLmXlN76iLzvVp2Fq1A5KOnVl9O9zlwfBgG4nKi03djD/Beb4 5o3IGv39XHGwATV3P0WDiBm5ahJvY8Y= -----END CERTIFICATE-----Generated at Wed Oct 22 00:29:51 2025 by rpki-client