$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa File: b362f402-f840-31ad-9a3b-aed78a08f528.roa (raw, json) Hash identifier: sinJZlKeM1Vr84aMYJeT+IP2+xB48O5TApOgk9RV+B8= Subject key identifier: 84:AB:5A:E2:52:DE:00:74:A2:92:C8:2C:01:67:80:E9:C5:CE:0B:50 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B4E7713C2B10D6D91F2611A00 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 211321 IP address blocks: 192.228.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:13:c2:b1:0d:6d:91:f2:61:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=45ce5d64-eb4a-4798-8ade-6285e582f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:11:d8:fe:e6:e6:9a:75:01:b0:3a:d4:0d: 0e:4c:26:c1:c7:3e:e9:32:bb:19:df:bc:71:9f:c3: bf:ff:42:f4:8c:8a:77:b8:62:70:eb:f0:45:b4:a6: db:51:1f:f2:d2:c1:73:94:8a:24:06:4d:c6:07:08: 17:28:11:f9:8d:31:12:92:bd:f0:ca:0e:3d:31:21: 8c:3c:f6:93:5e:4f:40:c0:bb:43:a5:f0:18:09:f6: d4:71:2c:9a:55:4b:ba:af:3d:49:40:24:eb:b9:03: 66:66:7b:ab:eb:f1:85:39:bf:ae:d3:06:7e:9a:5b: 4f:e9:84:1f:d8:54:d3:7d:3e:f8:b1:b0:03:d2:ff: 4d:2a:12:05:72:e2:a4:91:ae:68:1b:2b:d0:61:53: b0:d4:a1:c5:46:b9:eb:07:a0:ae:0b:59:5f:ff:98: 0b:37:a3:6b:00:55:4d:66:31:27:75:23:9b:d6:3a: 1a:62:8f:fc:b2:2f:85:b5:59:a0:8a:c0:9b:fa:e1: 30:cd:3a:15:76:cb:c4:ad:41:a8:1e:1c:01:0d:58: 0a:c4:e1:61:b3:82:2c:4d:40:31:3b:fa:c9:56:e1: 39:9a:a2:33:e0:49:9b:0f:1e:e7:56:7d:08:a6:8d: 44:2a:1f:7d:d1:e0:b0:46:ad:8b:27:73:ec:01:17: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:5A:E2:52:DE:00:74:A2:92:C8:2C:01:67:80:E9:C5:CE:0B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2b:32:a1:0f:33:b8:ce:06:46:7c:d7:96:02:b7:1a:7b:91: d9:0b:b7:dc:9a:6b:d1:27:ac:01:2e:80:20:fd:66:4d:4b:de: 23:72:90:41:23:af:34:b7:05:35:b7:f3:2f:69:f8:e7:00:0c: b2:ab:bd:a9:24:38:df:d3:9c:06:98:77:de:17:f6:a5:cf:16: 9f:c9:24:53:7d:72:39:d7:20:9e:9e:26:8c:a0:e2:71:c7:d4: 19:13:ef:b8:05:d8:8f:c5:66:25:bf:a9:f5:42:0e:14:50:0c: d2:95:d6:10:dc:68:7e:97:60:b1:b7:37:5b:4c:fe:ae:24:2b: 6b:c8:d3:4e:a7:4b:ba:2f:af:cf:cd:49:74:ed:7b:a9:3f:85: c9:6f:7d:8e:3b:27:d5:8b:49:9e:af:2b:97:c3:f7:fb:9e:50: d6:3a:67:c3:b6:12:40:3a:34:c3:9d:00:e9:42:f3:90:e3:8a: 14:9d:d7:db:9a:57:e1:b3:c3:c2:71:3b:ef:3f:6b:d5:db:59: e0:cf:c5:7e:db:99:4c:f3:c1:a1:09:e3:17:4c:02:4e:5d:69: eb:d3:16:97:28:16:a0:00:ce:07:0c:17:a7:63:06:1e:1b:d6: 87:70:df:77:bb:d0:f2:46:ec:cc:14:80:84:b9:98:52:0f:95: 0d:ba:0d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxPCsQ1tkfJhGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NDVjZTVkNjQtZWI0YS00Nzk4LThhZGUtNjI4NWU1ODJmNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0QR2P7m5pp1AbA61A0OTCbBxz7pMrsZ37xx n8O//0L0jIp3uGJw6/BFtKbbUR/y0sFzlIokBk3GBwgXKBH5jTESkr3wyg49MSGM PPaTXk9AwLtDpfAYCfbUcSyaVUu6rz1JQCTruQNmZnur6/GFOb+u0wZ+mltP6YQf 2FTTfT74sbAD0v9NKhIFcuKkka5oGyvQYVOw1KHFRrnrB6CuC1lf/5gLN6NrAFVN ZjEndSOb1joaYo/8si+FtVmgisCb+uEwzToVdsvErUGoHhwBDVgKxOFhs4IsTUAx O/rJVuE5mqIz4EmbDx7nVn0Ipo1EKh990eCwRq2LJ3PsARcAHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISrWuJS3gB0opLILAFngOnFzgtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYjM2MmY0MDItZjg0MC0z MWFkLTlhM2ItYWVkNzhhMDhmNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgrMqEPM7jOBkZ815YCtxp7kdkLt9yaa9EnrAEugCD9Zk1L3iNykEEj rzS3BTW38y9p+OcADLKrvakkON/TnAaYd94X9qXPFp/JJFN9cjnXIJ6eJoyg4nHH 1BkT77gF2I/FZiW/qfVCDhRQDNKV1hDcaH6XYLG3N1tM/q4kK2vI006nS7ovr8/N SXTte6k/hclvfY47J9WLSZ6vK5fD9/ueUNY6Z8O2EkA6NMOdAOlC85DjihSd19ua V+Gzw8JxO+8/a9XbWeDPxX7bmUzzwaEJ4xdMAk5daevTFpcoFqAAzgcMF6djBh4b 1odw33e70PJG7MwUgIS5mFIPlQ26DfE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:24:16 2025 by rpki-client