$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa File: 4d73d93c-8416-3f62-aa95-6e5853685568.roa (raw, json) Hash identifier: afvHvpeY8cxmOv+gAGv2XbY8udXmclpbtwKcvTzKqLY= Subject key identifier: CB:C2:A6:7C:23:2C:00:49:BC:A7:7C:53:0D:DA:1F:D0:F0:37:E2:77 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B95A789C854A59D6365F4FE20 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33558 IP address blocks: 192.228.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:89:c8:54:a5:9d:63:65:f4:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7662c7d1-0b75-42b7-9f37-3908637aba3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:59:e7:19:b5:55:ca:f7:0e:0d:10:34:1e: bc:f0:c0:d1:2d:2d:16:83:af:a1:18:3a:dd:d3:00: 06:50:82:20:29:eb:fa:d5:3e:ff:59:b3:61:b6:69: 67:26:d7:a7:20:dd:8a:83:54:cb:09:1c:fb:4f:1e: 15:bb:83:f1:de:5b:4d:12:b7:34:27:c0:20:79:4c: 15:b5:30:ee:e9:91:e7:62:50:ab:ea:ef:3a:05:db: 78:58:13:c4:ad:b6:20:4e:23:3f:80:cf:e9:4f:e0: 71:ba:ca:f7:4c:b0:70:f2:ff:48:02:c1:0e:53:77: c9:2e:16:5a:b3:3a:9b:45:19:58:f4:26:55:0a:15: 2e:1d:ef:a2:3e:0f:a1:34:fc:54:ce:93:d3:be:f6: 0e:05:19:07:62:a3:27:6e:15:48:5a:5e:0c:37:7b: 73:be:75:3b:59:53:f8:30:e4:4f:7a:7b:b9:9d:37: 42:ad:8e:ac:56:73:d9:be:b2:b4:2c:c0:0c:28:3e: f4:49:fa:39:9a:3c:58:ad:59:fe:17:21:c7:a2:99: d8:df:45:d0:dd:a8:30:b6:bc:52:f5:77:4d:52:f1: 3b:0d:12:bb:93:b2:fc:9c:01:8a:df:15:67:cb:c8: 67:b8:ee:32:95:c8:38:3e:0c:04:08:42:fb:3e:f0: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C2:A6:7C:23:2C:00:49:BC:A7:7C:53:0D:DA:1F:D0:F0:37:E2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2c:85:e0:77:98:c1:98:3f:45:d3:32:56:5f:1a:20:f8:c8: 53:c3:d2:db:81:32:2f:a0:45:00:64:a5:5f:cd:19:7f:70:2c: 83:9b:29:1d:50:02:cf:87:e4:24:29:4a:ad:71:72:89:09:2f: 71:9a:b7:e1:b0:f5:c8:bb:e3:8b:ba:d2:69:bf:f8:88:b7:ea: 64:a6:88:05:9e:30:d5:b2:b1:03:bd:f4:85:c4:44:17:81:9d: 8e:a0:5e:a4:2d:65:2d:72:8d:11:b3:f4:ca:01:ae:db:47:1a: f7:7a:27:83:82:d4:08:2e:56:0c:a9:16:1d:98:b7:c4:6c:2a: f0:1f:55:62:cd:34:49:5b:6a:d1:73:09:af:8f:d2:06:09:53: 97:1a:bb:53:fd:50:9e:d2:f5:46:a0:fa:99:71:a9:54:cc:9b: a4:26:eb:c7:43:99:33:7d:2d:c4:db:85:7d:0d:0c:de:f6:11: f1:40:20:41:55:3b:b8:81:bb:4b:78:54:39:fb:ee:95:af:5c: 89:c3:33:0b:21:5e:81:73:eb:16:4b:d9:b8:c5:47:b1:07:75: 4f:ec:e7:11:af:2a:45:f2:e5:e9:31:3c:41:57:67:c9:b2:6e: f3:e7:c6:8e:57:18:5e:87:b1:b8:ba:2b:5f:00:d7:b3:cc:2d: 54:d5:25:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4nIVKWdY2X0/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzY2MmM3ZDEtMGI3NS00MmI3LTlmMzctMzkwODYzN2FiYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtutZ5xm1Vcr3Dg0QNB688MDRLS0Wg6+hGDrd 0wAGUIIgKev61T7/WbNhtmlnJtenIN2Kg1TLCRz7Tx4Vu4Px3ltNErc0J8AgeUwV tTDu6ZHnYlCr6u86Bdt4WBPErbYgTiM/gM/pT+Bxusr3TLBw8v9IAsEOU3fJLhZa szqbRRlY9CZVChUuHe+iPg+hNPxUzpPTvvYOBRkHYqMnbhVIWl4MN3tzvnU7WVP4 MORPenu5nTdCrY6sVnPZvrK0LMAMKD70Sfo5mjxYrVn+FyHHopnY30XQ3agwtrxS 9XdNUvE7DRK7k7L8nAGK3xVny8hnuO4ylcg4PgwECEL7PvAtuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvCpnwjLABJvKd8Uw3aH9DwN+J3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNGQ3M2Q5M2MtODQxNi0z ZjYyLWFhOTUtNmU1ODUzNjg1NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIsheB3mMGYP0XTMlZfGiD4yFPD0tuBMi+gRQBkpV/NGX9wLIObKR1Q As+H5CQpSq1xcokJL3Gat+Gw9ci744u60mm/+Ii36mSmiAWeMNWysQO99IXERBeB nY6gXqQtZS1yjRGz9MoBrttHGvd6J4OC1AguVgypFh2Yt8RsKvAfVWLNNElbatFz Ca+P0gYJU5cau1P9UJ7S9Uag+plxqVTMm6Qm68dDmTN9LcTbhX0NDN72EfFAIEFV O7iBu0t4VDn77pWvXInDMwshXoFz6xZL2bjFR7EHdU/s5xGvKkXy5ekxPEFXZ8my bvPnxo5XGF6Hsbi6K18A17PMLVTVJcE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:42 2025 by rpki-client