$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa File: 0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa (raw, json) Hash identifier: PQf+qzU+BTlaR164+BhHi2bD/oy+ywN5N1GLNsWYz24= Subject key identifier: D0:8B:63:55:B7:39:48:04:6E:AC:E0:5C:1C:3A:86:A9:C2:C3:8D:08 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F4328584AF2567AEF3EA0E4AC76D9E0C0 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 398427 IP address blocks: 185.172.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7a:ef:3e:a0:e4:ac:76:d9:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=64cfe63e-e4cd-4b9a-9058-0d2156e36150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:d8:bd:e0:a4:fd:1b:ad:04:87:cd:73:42: 68:5c:c6:9e:df:29:d0:60:74:3a:9d:ee:d8:1f:9d: 4d:e8:56:94:f8:95:91:da:53:18:fd:71:10:f9:04: 03:1c:84:6e:e4:55:79:88:1a:ae:45:ad:0c:bf:db: 5d:db:40:f9:b9:79:ea:8b:6d:2b:b5:6b:1f:21:1e: b3:c8:15:9c:a7:26:84:03:4a:13:a9:86:6f:90:43: 99:bd:6f:88:46:d6:17:aa:74:5b:d7:31:6b:66:ec: ad:22:e4:78:ef:7d:ee:ac:f9:6d:54:69:81:5e:16: 71:2f:65:14:27:c9:83:db:29:f8:ac:06:f4:4a:b7: b4:5c:5e:00:8a:3d:6d:17:15:e9:f2:4e:f2:96:08: 96:53:0e:38:42:e6:93:50:2c:b6:0e:cc:75:94:86: 96:83:0c:a8:d9:81:34:a6:54:55:1c:f3:7b:93:84: 6b:c1:64:39:fe:80:e9:92:3e:30:b6:d0:e3:89:2a: b3:61:fe:a8:60:01:31:05:29:0a:2b:01:e2:2b:e1: 74:5a:f9:55:36:d8:34:08:de:c4:a0:7b:07:9e:21: 8c:25:80:43:e0:29:39:07:4f:29:64:1a:ac:de:26: b4:9b:db:68:64:25:b8:0e:8b:48:6b:34:2b:1d:cc: 28:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8B:63:55:B7:39:48:04:6E:AC:E0:5C:1C:3A:86:A9:C2:C3:8D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.172.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:b0:1a:96:05:2e:ff:75:1c:59:d5:20:b3:5c:96:0c:c4: bc:56:5f:40:eb:cd:84:11:04:de:8b:b1:d3:03:26:0f:7f:c5: 90:c9:0e:5e:c6:01:14:ab:f7:ec:20:50:24:76:32:7f:73:4f: 6f:7b:c2:7a:eb:46:d3:96:9c:00:91:d6:64:8b:0f:33:97:4f: 91:eb:8b:3e:27:1b:ec:33:2d:84:ee:58:d0:fc:8b:82:2d:87: 88:0b:97:a3:4a:da:6d:a7:22:f9:8c:20:f9:ce:b6:89:41:b5: a4:a1:63:ab:1c:f6:30:7a:1e:24:a4:ad:b5:2b:3a:c5:6c:04: 2f:15:6c:f5:36:b3:ad:46:e1:64:79:ce:17:a3:05:f5:dd:93: 7a:03:2c:bb:de:0c:7e:b3:53:4b:05:8f:bd:2b:55:0e:d0:df: fe:7f:8e:3f:00:fa:ce:c2:40:9d:2e:c8:22:7d:ee:f7:2d:cc: 18:51:e8:67:e3:d8:69:e1:9f:eb:33:ef:e8:c4:9a:18:b3:9f: 7d:7c:2c:63:b8:6f:3d:10:25:ef:2c:ac:44:2a:ee:65:df:bd: c0:7a:51:35:05:bc:cc:09:15:85:1b:33:dd:ad:f1:29:44:32: 25:cb:59:48:f7:75:a0:0c:c8:d6:8f:4e:40:8e:5c:1a:d0:4e: 3d:44:dd:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnrvPqDkrHbZ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NjRjZmU2M2UtZTRjZC00YjlhLTkwNTgtMGQyMTU2ZTM2MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXYveCk/RutBIfNc0JoXMae3ynQYHQ6ne7Y H51N6FaU+JWR2lMY/XEQ+QQDHIRu5FV5iBquRa0Mv9td20D5uXnqi20rtWsfIR6z yBWcpyaEA0oTqYZvkEOZvW+IRtYXqnRb1zFrZuytIuR4733urPltVGmBXhZxL2UU J8mD2yn4rAb0Sre0XF4Aij1tFxXp8k7ylgiWUw44QuaTUCy2Dsx1lIaWgwyo2YE0 plRVHPN7k4RrwWQ5/oDpkj4wttDjiSqzYf6oYAExBSkKKwHiK+F0WvlVNtg0CN7E oHsHniGMJYBD4Ck5B08pZBqs3ia0m9toZCW4DotIazQrHcwoQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCLY1W3OUgEbqzgXBw6hqnCw40IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvMGFlZmJhMjItYTQ4ZC0z OWVlLTliYTQtNzFmMTA4MmIwOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuay+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmjsBqWBS7/dRxZ1SCzXJYMxLxWX0DrzYQRBN6LsdMDJg9/xZDJDl7G ARSr9+wgUCR2Mn9zT297wnrrRtOWnACR1mSLDzOXT5Hriz4nG+wzLYTuWND8i4It h4gLl6NK2m2nIvmMIPnOtolBtaShY6sc9jB6HiSkrbUrOsVsBC8VbPU2s61G4WR5 zhejBfXdk3oDLLveDH6zU0sFj70rVQ7Q3/5/jj8A+s7CQJ0uyCJ97vctzBhR6Gfj 2Gnhn+sz7+jEmhizn318LGO4bz0QJe8srEQq7mXfvcB6UTUFvMwJFYUbM92t8SlE MiXLWUj3daAMyNaPTkCOXBrQTj1E3bI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:31:07 2025 by rpki-client