$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa File: 00e98e8d-0bf4-3203-b397-ab28caeccb32.roa (raw, json) Hash identifier: pOvWHKHQ6l5lNna3FxS/DAdJcxcHs/EmnX/FjNfrctY= Subject key identifier: 6C:DE:FD:6F:4A:E2:35:B8:97:C8:61:71:67:35:68:AB:12:C5:4F:FB Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B852828139DA9CB19DAD20880 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa Signing time: Tue 14 Oct 2025 15:11:07 +0000 ROA not before: Tue 14 Oct 2025 15:11:07 +0000 ROA not after: Mon 12 Jan 2026 16:11:07 +0000 asID: 13511 IP address blocks: 192.155.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:28:28:13:9d:a9:cb:19:da:d2:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 15:11:07 2025 GMT Not After : Jan 12 16:11:07 2026 GMT Subject: CN=78d31386-e8ce-45a4-acd3-7b4a895eb929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:3b:38:8d:3d:e6:9a:3c:b0:03:3b:48:d6: d9:88:78:29:ed:1a:0b:89:0c:0b:92:9e:67:00:ab: 49:a7:a1:4c:1c:9a:9f:23:33:4f:8b:e5:b0:ff:55: 42:4e:ac:91:d6:8a:b3:ae:78:c5:8c:83:a7:ff:9e: 41:d7:e4:0d:5f:67:0d:93:2e:a1:63:4c:a3:a3:ec: 98:11:34:57:e2:7f:33:c1:02:c3:f7:d4:4b:a6:ef: ad:88:27:6e:dd:c8:2b:5f:69:81:49:62:50:7b:c3: 90:53:c5:9a:ed:56:8c:be:cc:59:47:5c:11:ed:b1: 5b:d2:e0:1d:d5:4a:34:f3:77:0a:00:ce:e5:99:74: cd:4a:56:c2:55:a8:09:60:49:dc:c2:e7:f8:13:9e: 83:68:8d:5e:32:b5:99:e2:e4:5b:de:ae:05:1a:32: 44:50:c8:79:52:ab:b9:fd:3c:ac:c0:06:c5:ce:64: bb:e6:33:f1:8b:1e:6f:99:03:cc:c6:04:cb:38:48: f5:24:5b:1c:f5:83:3e:c2:83:4d:71:7c:b9:47:59: 61:74:b1:0f:67:e0:56:0e:a2:bc:e0:fd:f4:fa:ba: bd:ff:35:44:2a:a1:08:5c:fd:38:86:49:97:f9:9e: eb:2c:af:0c:c8:be:c3:3f:b2:9c:db:be:7f:43:63: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DE:FD:6F:4A:E2:35:B8:97:C8:61:71:67:35:68:AB:12:C5:4F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7b:0d:c8:58:7e:4a:4f:59:85:eb:15:2c:59:c9:8a:05:80: b1:6b:7a:38:ea:39:43:2b:dc:f2:77:38:cf:98:72:13:47:e1: c6:d2:02:01:35:ab:18:50:0c:62:3e:f6:ee:61:f0:2f:93:e9: ff:0c:3c:cb:1a:43:9d:cf:18:fd:d9:85:8e:f0:8a:fd:93:b9: c5:9f:a8:6b:ce:ff:0b:09:9c:da:71:33:c7:76:83:38:ec:c5: bd:c3:f7:76:13:09:b1:32:fd:a0:6f:55:0f:ac:47:fb:54:c3: 3d:3b:4f:8f:bb:ca:3f:ca:cb:4d:d4:0f:7b:e7:65:cc:7b:c1: f9:12:5e:d3:4d:fd:61:6c:14:96:21:e1:59:24:f8:5c:bb:0d: 69:f5:df:c8:49:68:7e:76:bc:48:62:22:55:11:dc:91:2e:30: f5:79:c7:63:3d:b1:f4:96:e6:23:5d:30:59:cb:ae:ef:d2:19: 34:bd:ef:cb:a9:d9:d7:52:37:19:20:14:fa:b9:4c:a8:3b:81: fd:35:1f:39:6b:6e:0b:cb:8e:94:71:dd:dd:44:09:5b:5f:76: e4:30:83:73:30:f6:c7:24:13:e1:ad:c4:e2:b7:11:17:e2:7a: 19:2b:23:94:ee:75:c1:e5:27:3b:5a:b2:21:3d:54:d9:b7:21: 35:52:78:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFKCgTnanLGdrSCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDE1MTEwN1oXDTI2MDExMjE2MTEwN1owLzEtMCsGA1UEAxMk NzhkMzEzODYtZThjZS00NWE0LWFjZDMtN2I0YTg5NWViOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXg7OI095po8sAM7SNbZiHgp7RoLiQwLkp5n AKtJp6FMHJqfIzNPi+Ww/1VCTqyR1oqzrnjFjIOn/55B1+QNX2cNky6hY0yjo+yY ETRX4n8zwQLD99RLpu+tiCdu3cgrX2mBSWJQe8OQU8Wa7VaMvsxZR1wR7bFb0uAd 1Uo083cKAM7lmXTNSlbCVagJYEncwuf4E56DaI1eMrWZ4uRb3q4FGjJEUMh5Uqu5 /TyswAbFzmS75jPxix5vmQPMxgTLOEj1JFsc9YM+woNNcXy5R1lhdLEPZ+BWDqK8 4P30+rq9/zVEKqEIXP04hkmX+Z7rLK8MyL7DP7Kc275/Q2MfYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGze/W9K4jW4l8hhcWc1aKsSxU/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvMDBlOThlOGQtMGJmNC0z MjAzLWIzOTctYWIyOGNhZWNjYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE97DchYfkpPWYXrFSxZyYoFgLFrejjqOUMr3PJ3OM+YchNH4cbSAgE1 qxhQDGI+9u5h8C+T6f8MPMsaQ53PGP3ZhY7wiv2TucWfqGvO/wsJnNpxM8d2gzjs xb3D93YTCbEy/aBvVQ+sR/tUwz07T4+7yj/Ky03UD3vnZcx7wfkSXtNN/WFsFJYh 4Vkk+Fy7DWn138hJaH52vEhiIlUR3JEuMPV5x2M9sfSW5iNdMFnLru/SGTS978up 2ddSNxkgFPq5TKg7gf01HzlrbgvLjpRx3d1ECVtfduQwg3Mw9sckE+GtxOK3ERfi ehkrI5TudcHlJztasiE9VNm3ITVSeBw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:33:11 2025 by rpki-client