$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf28dc6d-a78e-383c-b0ee-fea4327ef126.roa File: cf28dc6d-a78e-383c-b0ee-fea4327ef126.roa (raw, json) Hash identifier: udQnJXJU8CEfBmD9TITqnCIjEFVmDgKjwqPEfsvTQ6g= Subject key identifier: 8A:CF:7C:FA:3C:AC:53:90:11:D6:CE:59:01:CE:28:E7:B6:FD:BA:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2A0D4734F17A12A16080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf28dc6d-a78e-383c-b0ee-fea4327ef126.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 199.192.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2a:0d:47:34:f1:7a:12:a1:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ec4257b2-691a-49b7-a024-feae0a573475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:2d:7c:ad:3e:ec:35:16:8f:ae:b6:6e:93: fe:59:71:90:c8:2e:bb:b3:f9:67:69:49:f7:98:51: 83:ab:d6:8c:1a:ad:bc:75:ca:cc:ef:d2:e7:5e:32: 7b:08:95:8d:ac:3c:ec:4b:1b:33:c4:e9:17:49:c0: b8:8e:58:10:34:b2:67:48:ef:bf:fb:89:57:91:22: f9:83:9c:63:6a:52:06:3c:22:af:fd:0d:d2:82:8f: 25:f4:ca:27:46:01:b5:70:c6:c8:d6:51:47:4b:8a: eb:8c:35:08:e9:90:13:8d:59:ba:29:81:5a:82:c9: 13:06:94:92:2d:c7:a0:19:ef:24:f7:50:16:b0:be: 03:5a:fd:f3:ca:6f:5e:c3:5f:fa:c2:b0:b2:03:85: d2:df:b7:ce:00:9b:c3:be:6c:8d:35:51:ea:8b:73: 98:7e:04:7b:53:1e:da:d6:1d:12:29:2d:c3:8d:2d: 3b:c4:ef:3d:8e:05:1b:55:ea:1d:cc:6f:4c:45:1e: c4:25:ee:f0:c6:36:ab:14:a5:e6:12:27:7c:fc:91: be:5c:e1:c8:13:f7:be:fd:90:79:03:06:b8:9e:05: 1e:0c:0c:5f:0c:da:21:9d:7a:f8:b1:90:66:32:4d: 6c:eb:dc:07:9e:11:18:3d:ac:c4:b2:01:5f:43:46: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:7C:FA:3C:AC:53:90:11:D6:CE:59:01:CE:28:E7:B6:FD:BA:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf28dc6d-a78e-383c-b0ee-fea4327ef126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.192.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:be:ed:09:cd:cd:32:e5:06:ce:b2:b5:d1:03:2c:4d:53:f8: e0:43:03:d4:1d:09:94:03:ce:4b:bb:d8:d0:65:9b:74:60:b0: a6:28:cd:8a:7e:e2:a0:5f:fd:96:cb:65:29:fb:7c:c3:88:bb: 83:b8:1f:fd:7f:bc:09:d2:55:e5:e9:24:0c:2d:33:5c:cc:b4: 16:da:97:31:57:d0:20:e3:82:fe:7c:fe:ea:8f:58:d9:fa:50: 8a:81:17:be:8b:13:42:f7:33:e2:81:1a:3d:58:95:21:58:56: b9:98:7a:53:29:7a:07:07:a2:f9:da:c6:a0:1e:e8:09:b5:af: 07:15:46:c2:8c:ed:d8:ff:e4:eb:0d:8f:a9:1c:6c:36:ea:e7: 12:b9:cf:4f:14:b2:f7:60:73:75:7f:87:35:9d:2f:61:45:e6: 7d:ea:a8:55:a6:10:46:2f:84:af:3a:bd:61:5d:80:02:6c:8c: 06:66:e2:3d:28:64:fd:32:0e:d8:b6:1c:6b:7c:24:31:e8:19: 66:4b:b9:e2:df:da:17:06:2d:a0:11:0a:8e:c7:58:ab:d3:7a: 06:6f:b7:77:f3:af:86:fc:65:ef:ce:3a:fe:38:0f:c9:05:2a: 8e:d8:a5:8a:06:c4:11:80:0a:e6:f0:80:00:51:9e:85:87:b9: f4:e6:74:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzioNRzTxehKhYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWM0MjU3YjItNjkxYS00OWI3LWEwMjQtZmVhZTBhNTczNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTYtfK0+7DUWj662bpP+WXGQyC67s/lnaUn3 mFGDq9aMGq28dcrM79LnXjJ7CJWNrDzsSxszxOkXScC4jlgQNLJnSO+/+4lXkSL5 g5xjalIGPCKv/Q3Sgo8l9MonRgG1cMbI1lFHS4rrjDUI6ZATjVm6KYFagskTBpSS LcegGe8k91AWsL4DWv3zym9ew1/6wrCyA4XS37fOAJvDvmyNNVHqi3OYfgR7Ux7a 1h0SKS3DjS07xO89jgUbVeodzG9MRR7EJe7wxjarFKXmEid8/JG+XOHIE/e+/ZB5 Awa4ngUeDAxfDNohnXr4sZBmMk1s69wHnhEYPazEsgFfQ0Y/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrPfPo8rFOQEdbOWQHOKOe2/bqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2YyOGRjNmQtYTc4ZS0z ODNjLWIwZWUtZmVhNDMyN2VmMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8BzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW+7QnNzTLlBs6ytdEDLE1T+OBDA9QdCZQDzku72NBlm3RgsKYozYp+ 4qBf/ZbLZSn7fMOIu4O4H/1/vAnSVeXpJAwtM1zMtBbalzFX0CDjgv58/uqPWNn6 UIqBF76LE0L3M+KBGj1YlSFYVrmYelMpegcHovnaxqAe6Am1rwcVRsKM7dj/5OsN j6kcbDbq5xK5z08Usvdgc3V/hzWdL2FF5n3qqFWmEEYvhK86vWFdgAJsjAZm4j0o ZP0yDti2HGt8JDHoGWZLueLf2hcGLaARCo7HWKvTegZvt3fzr4b8Ze/OOv44D8kF Ko7YpYoGxBGACubwgABRnoWHufTmdJ0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:46 2025 by rpki-client