$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa File: 25438931-47eb-3745-8de8-a5736ce96be0.roa (raw, json) Hash identifier: Mnu3jV3+Dh2LanxxXlS8WKvViKmNrp9gwfTeYfBYHLc= Subject key identifier: 3E:B5:DD:F6:1D:B0:CB:D1:FC:35:71:28:8F:BD:1D:8A:88:DE:AD:38 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584B8EACDC2D7F9FA7A06C0C2B80 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 30148 IP address blocks: 192.88.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dc:2d:7f:9f:a7:a0:6c:0c:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4ae1037b-0892-4b9a-b531-29222519fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:4c:88:75:76:a8:cf:29:29:3f:1e:72:01: 01:f1:ee:d8:51:02:93:c3:61:db:a0:b6:27:fa:72: 62:ed:26:f5:32:45:c6:dd:ac:d8:da:e5:c6:fc:b5: fe:10:22:99:97:53:22:6a:74:e6:bb:0d:10:f3:8e: 4e:04:2f:ef:3f:87:9f:77:b9:6d:1b:9c:e4:06:b2: 26:e1:ae:71:6f:ca:04:91:48:59:07:86:0c:eb:36: 2e:ee:ea:63:47:98:87:72:1b:2f:1c:28:e8:70:ca: 80:cd:86:e5:3d:00:c0:63:ab:89:9a:40:c2:58:d0: f6:f4:c8:ee:a9:b5:5c:3f:22:cf:67:54:27:4c:84: 6d:26:ea:0b:c0:a9:b2:8e:b9:82:41:60:49:a6:74: 2d:ca:94:9b:76:81:83:63:29:d4:bb:c3:1e:1e:91: ab:ef:9a:f3:da:df:24:56:df:18:8e:5b:7b:6f:d5: 65:4b:cd:5c:c9:b6:48:60:2c:2b:45:f9:30:d2:c5: 7c:30:b1:6f:a8:61:d9:15:32:26:45:07:2c:5f:9d: ee:2f:77:78:3f:9c:13:26:4a:88:3f:f1:b5:14:49: 04:94:fc:ee:f1:1d:a2:18:7a:d8:9e:ac:fc:de:7b: ff:91:d8:f8:c5:89:d6:a0:7b:d7:54:60:9e:e0:65: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B5:DD:F6:1D:B0:CB:D1:FC:35:71:28:8F:BD:1D:8A:88:DE:AD:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.88.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:90:db:78:a8:fd:f6:3b:65:6d:bc:38:90:e2:b1:e7:38:2a: c9:d2:57:70:39:fc:4e:1b:33:95:db:7e:d1:ee:b8:54:b2:19: cb:0c:b9:81:29:74:5c:a4:6a:b9:69:fe:ed:63:99:98:98:cf: 93:02:bb:f1:9b:fd:0b:61:d2:2e:04:fc:5d:ef:5d:26:91:7b: 6c:3f:f5:cb:c6:11:21:2e:8b:78:ac:42:43:2a:f8:e2:d1:44: 1c:a3:5e:a6:b6:93:63:a6:b8:42:b0:18:64:69:9e:96:ce:d6: 2e:97:39:a9:5e:a4:6e:73:cd:5a:75:a5:77:eb:c2:b3:1b:83: 1c:6f:ab:f4:a3:af:0e:f0:7e:03:84:c7:70:15:6c:2e:2f:98: 49:ee:7c:cb:46:41:0c:d7:44:00:2d:f4:c8:71:b1:4c:78:3c: e3:39:0d:a0:af:71:b6:c9:a1:13:8b:52:91:01:49:d2:4c:63: 0a:28:77:57:e5:36:04:74:2f:b1:2a:ec:c9:17:28:9d:fa:be: 49:59:02:48:2e:c8:46:54:4c:89:50:71:02:1b:d3:4e:7e:0f: 9a:15:06:19:2a:d7:0c:cb:3a:82:cb:28:fb:31:20:d9:ba:53: 08:05:ef:e8:6d:03:5f:18:c1:ad:ef:cd:dd:b6:07:bb:cb:a5: 71:38:e9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNwtf5+noGwMK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGFlMTAzN2ItMDg5Mi00YjlhLWI1MzEtMjkyMjI1MTlmZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrxMiHV2qM8pKT8ecgEB8e7YUQKTw2HboLYn +nJi7Sb1MkXG3azY2uXG/LX+ECKZl1MianTmuw0Q845OBC/vP4efd7ltG5zkBrIm 4a5xb8oEkUhZB4YM6zYu7upjR5iHchsvHCjocMqAzYblPQDAY6uJmkDCWND29Mju qbVcPyLPZ1QnTIRtJuoLwKmyjrmCQWBJpnQtypSbdoGDYynUu8MeHpGr75rz2t8k Vt8Yjlt7b9VlS81cybZIYCwrRfkw0sV8MLFvqGHZFTImRQcsX53uL3d4P5wTJkqI P/G1FEkElPzu8R2iGHrYnqz83nv/kdj4xYnWoHvXVGCe4GXsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD613fYdsMvR/DVxKI+9HYqI3q04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMjU0Mzg5MzEtNDdlYi0z NzQ1LThkZTgtYTU3MzZjZTk2YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmQ23io/fY7ZW28OJDisec4KsnSV3A5/E4bM5XbftHuuFSyGcsMuYEp dFykarlp/u1jmZiYz5MCu/Gb/Qth0i4E/F3vXSaRe2w/9cvGESEui3isQkMq+OLR RByjXqa2k2OmuEKwGGRpnpbO1i6XOalepG5zzVp1pXfrwrMbgxxvq/Sjrw7wfgOE x3AVbC4vmEnufMtGQQzXRAAt9MhxsUx4POM5DaCvcbbJoROLUpEBSdJMYwood1fl NgR0L7Eq7MkXKJ36vklZAkguyEZUTIlQcQIb005+D5oVBhkq1wzLOoLLKPsxINm6 UwgF7+htA18Ywa3vzd22B7vLpXE46Vg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:47:52 2025 by rpki-client