$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json) Hash identifier: SbrqKP3vbiNaC7pX79zCXrcCMp0AIew7VNzYns1ZUXo= Subject key identifier: 14:45:6E:6D:E9:06:AE:AA:2A:41:EC:23:0A:BE:B0:2E:E3:78:DC:8C Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Certificate serial: 010D0C9F4328584B031690039F5459F965456AC0 Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 198949 IP address blocks: 192.245.221.0/24 maxlen: 24 192.245.222.0/23 maxlen: 24 192.245.224.0/24 maxlen: 24 199.33.130.0/23 maxlen: 24 199.33.132.0/23 maxlen: 24 199.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:90:03:9f:54:59:f9:65:45:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=27b2230e-4125-4781-9f27-b17cd7f4abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:4a:ef:ad:62:66:73:31:a4:be:fe:12:46: 6d:5f:ac:f1:00:30:4f:f2:17:0a:00:c9:29:6e:98: f2:b0:ec:eb:73:a0:3b:39:a8:6a:03:8f:33:1a:8a: 9f:77:a0:8c:4b:b5:1f:1d:05:10:96:c0:c4:3e:87: b2:60:ba:b0:8e:91:a4:6b:02:fc:73:bb:35:d3:29: dc:42:1c:2b:82:61:3f:6f:9b:cf:d0:6e:65:c5:1f: 44:40:91:0c:96:d1:11:2f:f9:8e:9b:8c:19:ab:c4: 3c:03:73:4b:02:59:0b:18:ad:8f:55:89:d8:d9:1e: 27:30:50:c1:08:6f:21:4a:e9:8c:23:de:19:76:b1: a0:9b:ce:3c:8f:5b:79:72:af:bb:bf:a0:76:26:1d: 9b:08:b0:f1:59:b0:36:96:6b:d8:4f:e2:85:27:59: ad:7e:54:0f:ef:ef:b6:93:5a:6f:20:c1:fe:75:d4: 3f:0c:27:7c:21:5f:bf:0f:be:99:ce:23:00:b6:61: aa:4b:99:19:07:23:95:d2:6d:f9:5e:df:af:b1:f6: c8:ff:93:aa:e9:f1:bc:2f:54:43:97:59:c2:38:8e: e8:67:c2:65:68:a8:8b:4e:27:98:06:6f:f7:b4:75: 7b:d4:a1:6f:bb:85:5f:ad:39:44:66:de:8d:86:6a: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:6E:6D:E9:06:AE:AA:2A:41:EC:23:0A:BE:B0:2E:E3:78:DC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl X509v3 Authority Key Identifier: keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ca:62:e8:c4:a1:89:8a:c2:7d:cf:32:09:8d:4c:46:e2:60: 40:78:0c:64:87:31:ae:2e:f7:79:7b:6f:40:6b:fe:83:6d:94: 9e:8b:dd:b9:54:77:46:b6:c3:ad:90:c2:e5:ad:46:7b:30:1a: e3:5d:e1:19:c5:c0:e5:2d:7a:55:2f:fa:28:4b:66:e7:3d:be: 49:69:f4:71:39:6c:52:61:ec:4d:e5:1d:66:b4:4a:ed:76:e8: e8:62:be:73:54:80:fc:53:bc:ca:36:60:fb:7a:75:37:51:7d: 6c:04:29:d3:ca:6b:6c:f5:dc:8c:0e:ce:c1:96:72:6e:3e:0d: bb:21:5e:b5:c1:89:1d:7e:82:71:34:34:ac:33:01:e6:24:68: 28:83:a2:0a:0c:55:dc:af:82:df:c3:d5:c7:9a:cb:1f:c2:8c: 6f:67:99:5d:b5:fa:33:ea:01:3b:28:bd:23:08:67:45:58:fb: 2c:bb:9a:08:1d:1e:c4:9c:11:7d:a7:dd:f5:17:37:b6:1f:fb: b0:ab:4d:04:6f:3b:4f:3b:3b:04:91:9e:e1:2c:82:79:3d:4e: f8:e5:5f:24:8c:ce:34:1c:77:85:c5:6c:fc:a0:4d:07:89:8e: 16:d3:dc:97:4c:0b:ad:71:f8:b5:16:11:f7:de:8d:ed:82:26: e7:57:da:a0 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsDFpADn1RZ+WVFasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2 MmEyMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MjdiMjIzMGUtNDEyNS00NzgxLTlmMjctYjE3Y2Q3ZjRhYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwdK761iZnMxpL7+EkZtX6zxADBP8hcKAMkp bpjysOzrc6A7OahqA48zGoqfd6CMS7UfHQUQlsDEPoeyYLqwjpGkawL8c7s10ync QhwrgmE/b5vP0G5lxR9EQJEMltERL/mOm4wZq8Q8A3NLAlkLGK2PVYnY2R4nMFDB CG8hSumMI94ZdrGgm848j1t5cq+7v6B2Jh2bCLDxWbA2lmvYT+KFJ1mtflQP7++2 k1pvIMH+ddQ/DCd8IV+/D76ZziMAtmGqS5kZByOV0m35Xt+vsfbI/5Oq6fG8L1RD l1nCOI7oZ8JlaKiLTieYBm/3tHV71KFvu4VfrTlEZt6NhmrClwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBRFbm3pBq6qKkHsIwq+sC7jeNyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0 ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvYTkwM2U4MjQtMWI2Ni0z NjRmLThlYTQtOTM5M2VmMmRlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2Q1NGU1YmItMzBjZC00NjBhLWEz YWUtNGFiODNjMmY2MmEyL2NkNTRlNWJiLTMwY2QtNDYwYS1hM2FlLTRhYjgzYzJm NjJhMi5jcmwwHwYDVR0jBBgwFoAUDLC//MqdO5Z3qxRusYBcCS+cp0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4 M2MyZjYyYTIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADA9d0D BADA9eAwDAMEAcchggMEAMchhjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOymLoxKGJisJ9zzIJjUxG4mBA eAxkhzGuLvd5e29Aa/6DbZSei925VHdGtsOtkMLlrUZ7MBrjXeEZxcDlLXpVL/oo S2bnPb5JafRxOWxSYexN5R1mtErtdujoYr5zVID8U7zKNmD7enU3UX1sBCnTymts 9dyMDs7BlnJuPg27IV61wYkdfoJxNDSsMwHmJGgog6IKDFXcr4Lfw9XHmssfwoxv Z5ldtfoz6gE7KL0jCGdFWPssu5oIHR7EnBF9p931Fze2H/uwq00EbztPOzsEkZ7h LIJ5PU745V8kjM40HHeFxWz8oE0HiY4W09yXTAutcfi1FhH33o3tgibnV9qg -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:34 2025 by rpki-client