$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa File: 479a1499-01f2-33d8-9fd0-4b709b1a8666.roa (raw, json) Hash identifier: q4edm+NhJM3m63V8uwdIxYRlxf6Pq4E++wsJD/XCwVs= Subject key identifier: 85:FB:FE:24:8A:31:D0:6C:15:B2:18:C6:5E:67:7D:C1:E5:7A:17:E1 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B85C16F5B3A7F929B276A45A0 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa Signing time: Tue 14 Oct 2025 20:19:57 +0000 ROA not before: Tue 14 Oct 2025 20:19:57 +0000 ROA not after: Mon 12 Jan 2026 21:19:57 +0000 asID: 13511 IP address blocks: 192.155.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:c1:6f:5b:3a:7f:92:9b:27:6a:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 20:19:57 2025 GMT Not After : Jan 12 21:19:57 2026 GMT Subject: CN=2b09f4bf-e568-4178-a276-5b64bbfcd8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:32:8c:c9:02:3e:48:cc:cb:d3:ae:0b:d7: 98:bd:aa:b7:5b:c6:b3:f1:98:26:2c:d7:0a:77:ad: 77:52:b5:6a:5a:dc:92:b0:f2:29:c5:be:c9:12:fd: 9b:6a:63:74:fa:cf:60:2d:80:fa:e7:15:e6:6e:73: e7:26:86:b4:1e:15:fe:8f:77:31:6b:b0:78:e7:b9: 98:5f:9b:58:01:48:65:f9:08:16:0c:a4:d6:7d:b0: dd:e6:aa:16:7f:cc:4e:1a:92:b1:9a:13:a7:b5:d5: 15:8e:fc:60:73:61:d5:8c:10:2f:ef:19:18:f2:e8: bc:3c:ec:43:89:75:33:50:42:72:e1:df:b1:e3:28: e1:29:9f:6f:e6:74:f1:4d:98:e7:96:ef:9b:99:35: 18:4e:3f:eb:4f:50:cd:8a:28:f6:28:79:30:d0:36: fa:ec:44:77:69:3d:f7:78:7f:b6:48:bf:d3:2e:cd: 3d:e4:0d:f2:28:45:66:c5:76:ab:db:c1:95:93:db: 30:3e:23:f3:b6:3b:62:c7:8e:86:d2:99:c1:68:64: ca:82:8c:56:ed:56:3d:79:7e:b1:f9:d9:9a:41:fa: 8a:09:f4:e7:7a:bc:72:db:a7:1f:d7:f3:81:3a:e4: 83:90:61:c7:5a:82:c3:a0:a1:75:24:db:6a:da:5c: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:FE:24:8A:31:D0:6C:15:B2:18:C6:5E:67:7D:C1:E5:7A:17:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:08:21:e1:f9:f2:d0:99:a5:4f:98:eb:02:1b:12:a6:aa:fd: ba:2a:f5:b9:c9:15:1b:91:18:fe:05:24:12:f5:48:7c:3d:82: 62:8d:0c:e9:1f:6c:8b:87:a9:d8:a3:6b:29:19:b1:b9:ed:be: e4:2c:f2:89:f9:be:e9:05:6c:f8:a2:8a:ee:02:67:d6:d9:bb: f3:38:c0:15:44:c8:8a:73:0b:39:f1:88:7e:ac:16:15:9d:2b: 45:3b:aa:8c:07:69:5e:72:8f:33:6c:85:42:c2:27:ef:f4:39: 1e:d2:fc:29:e7:54:e4:af:84:1d:ed:be:51:bc:14:39:0f:9b: 58:cd:1e:00:cc:ef:cb:55:50:76:62:f7:83:41:f4:54:f6:b4: 01:c8:20:4e:70:28:6e:c8:9b:d8:90:aa:03:3b:ef:5f:6d:b1: 82:5f:c1:d9:17:0c:1a:c1:08:d5:2f:a3:28:59:ef:2f:56:ae: 51:ab:89:55:3b:7a:2d:c5:32:68:c3:8f:90:20:79:53:ee:51: 33:63:c3:0f:f0:28:4b:56:06:0d:40:d5:10:51:7d:d0:bd:0b: ae:c1:4e:e1:cf:b4:5c:0f:60:0a:0b:7c:49:db:5e:95:e6:db: e5:30:46:32:11:ff:89:44:52:84:56:43:4a:5a:b2:ad:5c:99: 99:7f:76:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFwW9bOn+SmydqRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDIwMTk1N1oXDTI2MDExMjIxMTk1N1owLzEtMCsGA1UEAxMk MmIwOWY0YmYtZTU2OC00MTc4LWEyNzYtNWI2NGJiZmNkOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1royjMkCPkjMy9OuC9eYvaq3W8az8ZgmLNcK d613UrVqWtySsPIpxb7JEv2bamN0+s9gLYD65xXmbnPnJoa0HhX+j3cxa7B457mY X5tYAUhl+QgWDKTWfbDd5qoWf8xOGpKxmhOntdUVjvxgc2HVjBAv7xkY8ui8POxD iXUzUEJy4d+x4yjhKZ9v5nTxTZjnlu+bmTUYTj/rT1DNiij2KHkw0Db67ER3aT33 eH+2SL/TLs095A3yKEVmxXar28GVk9swPiPztjtix46G0pnBaGTKgoxW7VY9eX6x +dmaQfqKCfTnerxy26cf1/OBOuSDkGHHWoLDoKF1JNtq2lx6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX7/iSKMdBsFbIYxl5nfcHlehfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNDc5YTE0OTktMDFmMi0z M2Q4LTlmZDAtNGI3MDliMWE4NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMIIeH58tCZpU+Y6wIbEqaq/boq9bnJFRuRGP4FJBL1SHw9gmKNDOkf bIuHqdijaykZsbntvuQs8on5vukFbPiiiu4CZ9bZu/M4wBVEyIpzCznxiH6sFhWd K0U7qowHaV5yjzNshULCJ+/0OR7S/CnnVOSvhB3tvlG8FDkPm1jNHgDM78tVUHZi 94NB9FT2tAHIIE5wKG7Im9iQqgM7719tsYJfwdkXDBrBCNUvoyhZ7y9WrlGriVU7 ei3FMmjDj5AgeVPuUTNjww/wKEtWBg1A1RBRfdC9C67BTuHPtFwPYAoLfEnbXpXm 2+UwRjIR/4lEUoRWQ0pasq1cmZl/dqg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:48 2025 by rpki-client