$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa File: 872945b3-fb01-3694-b07d-3956542f5ccf.roa (raw, json) Hash identifier: Y96g4OwczZxLtq3BKvPieolrxxOZ3cYmQYKaxvsv/OU= Subject key identifier: E6:D0:52:28:7B:8F:12:C3:A6:6B:F2:2A:0B:77:9B:AA:39:D7:B7:96 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B85C214C353791BFA59571A80 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa Signing time: Tue 14 Oct 2025 20:21:16 +0000 ROA not before: Tue 14 Oct 2025 20:21:16 +0000 ROA not after: Mon 12 Jan 2026 21:21:16 +0000 asID: 13511 IP address blocks: 192.155.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:c2:14:c3:53:79:1b:fa:59:57:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 20:21:16 2025 GMT Not After : Jan 12 21:21:16 2026 GMT Subject: CN=fb943c13-7992-4574-883f-69fc808e9158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:3a:02:18:84:b3:2b:12:50:4b:fc:b0:67: 65:97:5f:b5:b9:46:0c:98:35:6b:65:3f:9d:51:b0: bf:cf:1e:97:31:ef:b9:ff:64:4f:f0:32:d9:00:53: 97:98:47:23:62:f9:7c:90:ec:e9:de:b2:b7:e3:bf: f2:1e:26:d0:89:33:08:cf:52:c8:d5:7a:49:a5:1a: 13:b0:b2:e1:f7:65:09:ef:df:9e:09:e3:9a:11:73: 06:d8:00:33:23:a1:92:d2:15:6a:10:95:61:1f:03: a2:b3:a8:4c:be:b5:7d:f4:d0:eb:05:01:61:b6:9a: e3:8d:e0:1f:61:25:42:be:b5:3c:a6:51:ac:c7:4f: 10:e9:fb:03:b8:0c:d4:a3:fa:9d:31:10:bd:84:01: 84:d5:24:f9:fb:0e:b6:b8:8a:04:a8:be:26:9f:15: f5:b2:24:77:7b:40:7d:8c:8a:38:6f:af:78:36:87: 09:2c:89:37:fa:9d:fc:84:0f:17:f0:d3:35:a3:f6: 0d:aa:2e:4b:23:75:22:b8:1b:52:8a:5d:9e:09:0d: 08:e7:fe:b7:ef:83:7d:b2:0e:3b:bc:3c:04:b8:69: e6:21:2b:bd:53:a9:7f:90:64:e7:c2:33:1c:5c:ee: e5:cf:b0:03:31:e6:45:ec:a0:77:32:85:da:f3:9c: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D0:52:28:7B:8F:12:C3:A6:6B:F2:2A:0B:77:9B:AA:39:D7:B7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d1:f8:7e:40:8b:b4:23:91:5c:03:45:ce:fe:9f:e3:3a:a5: 60:df:00:c8:f0:52:1e:83:db:a1:83:3c:94:74:7c:29:2a:11: 50:5b:b3:96:79:ca:65:5a:b9:9a:50:70:d8:09:41:9a:56:2e: 56:73:e0:57:49:da:7f:d3:d8:53:3a:96:ec:63:70:ff:47:e7: e8:38:09:2c:7e:d8:06:7c:f2:d1:72:22:d7:d3:83:73:ba:82: f8:4a:01:ce:a9:86:bf:80:ec:66:0b:3e:01:89:d7:fe:71:55: aa:43:00:99:4a:ba:88:d2:97:20:db:a3:94:41:6e:06:d5:dc: f3:b4:c7:95:3a:98:58:58:69:7b:b8:a4:74:dd:8c:12:c5:8b: 91:6e:ae:14:48:7f:8e:99:66:22:ce:da:8a:27:02:b1:47:24: 58:ff:82:96:09:2e:d8:d9:44:8d:cb:50:6e:91:7e:5c:de:82: 56:90:68:00:f1:17:12:89:5b:b9:11:38:d4:5c:2f:3a:9a:65: 8b:90:6b:ec:14:db:2a:f9:eb:fe:d7:a7:83:fd:7c:8b:a3:ca: 36:3e:ae:cf:59:14:7b:ed:d4:eb:6a:80:9f:3d:bc:86:d4:b7: ca:9b:d9:8e:39:96:3c:41:00:94:b2:33:c4:76:53:73:5e:ed: 71:c8:0e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFwhTDU3kb+llXGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDIwMjExNloXDTI2MDExMjIxMjExNlowLzEtMCsGA1UEAxMk ZmI5NDNjMTMtNzk5Mi00NTc0LTg4M2YtNjlmYzgwOGU5MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgY6AhiEsysSUEv8sGdll1+1uUYMmDVrZT+d UbC/zx6XMe+5/2RP8DLZAFOXmEcjYvl8kOzp3rK347/yHibQiTMIz1LI1XpJpRoT sLLh92UJ79+eCeOaEXMG2AAzI6GS0hVqEJVhHwOis6hMvrV99NDrBQFhtprjjeAf YSVCvrU8plGsx08Q6fsDuAzUo/qdMRC9hAGE1ST5+w62uIoEqL4mnxX1siR3e0B9 jIo4b694NocJLIk3+p38hA8X8NM1o/YNqi5LI3UiuBtSil2eCQ0I5/6374N9sg47 vDwEuGnmISu9U6l/kGTnwjMcXO7lz7ADMeZF7KB3MoXa85z3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObQUih7jxLDpmvyKgt3m6o517eWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvODcyOTQ1YjMtZmIwMS0z Njk0LWIwN2QtMzk1NjU0MmY1Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfR+H5Ai7QjkVwDRc7+n+M6pWDfAMjwUh6D26GDPJR0fCkqEVBbs5Z5 ymVauZpQcNgJQZpWLlZz4FdJ2n/T2FM6luxjcP9H5+g4CSx+2AZ88tFyItfTg3O6 gvhKAc6phr+A7GYLPgGJ1/5xVapDAJlKuojSlyDbo5RBbgbV3PO0x5U6mFhYaXu4 pHTdjBLFi5FurhRIf46ZZiLO2oonArFHJFj/gpYJLtjZRI3LUG6RflzeglaQaADx FxKJW7kRONRcLzqaZYuQa+wU2yr56/7Xp4P9fIujyjY+rs9ZFHvt1OtqgJ89vIbU t8qb2Y45ljxBAJSyM8R2U3Ne7XHIDpE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:18 2025 by rpki-client