$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa File: a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa (raw, json) Hash identifier: 7+/ll70h9M0c0YUIjuTuxEemIR7u7oWn8E6p6lw2PlY= Subject key identifier: D8:B8:F9:A5:E9:EA:89:63:72:F6:E4:5F:34:4F:7E:09:14:CB:FB:33 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B852BAB2A7D548BC66EB56B60 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa Signing time: Tue 14 Oct 2025 15:18:12 +0000 ROA not before: Tue 14 Oct 2025 15:18:12 +0000 ROA not after: Mon 12 Jan 2026 16:18:12 +0000 asID: 13511 IP address blocks: 192.155.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:2b:ab:2a:7d:54:8b:c6:6e:b5:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 15:18:12 2025 GMT Not After : Jan 12 16:18:12 2026 GMT Subject: CN=011d6ea9-4303-489e-a31a-d7757cee9f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:fe:5a:eb:30:77:ff:30:76:fc:66:17:5e: 96:5f:7d:05:c4:44:c8:ac:9d:d4:18:db:b6:00:c2: 08:e6:15:6b:03:99:24:bd:0d:cd:e9:1e:8a:3b:59: 50:3c:05:a2:30:53:85:d4:e5:d1:34:e3:bc:d3:9c: 2c:60:b2:77:76:d9:1d:cd:1c:84:e3:ea:59:10:d8: 09:5d:e3:9e:21:43:01:d3:0c:10:3a:38:c9:fa:a4: b8:8e:42:d3:b4:fd:00:ee:30:e6:6d:fd:82:c2:f4: b9:7e:b7:88:a5:65:e8:e0:dc:ba:35:68:0d:c1:26: a7:2a:30:21:b1:72:34:90:0d:a1:65:07:44:48:74: 5a:a2:b7:58:50:cb:63:cd:f8:a9:eb:46:cf:d3:9d: f7:6d:da:69:56:2c:6f:23:b3:b1:e0:bd:6a:c6:3b: 04:e3:f2:be:2c:bd:3e:4a:78:67:64:59:97:17:29: 61:72:42:0e:15:c3:76:a1:9b:f8:b3:7d:2d:e1:e0: 21:5e:0f:37:52:51:5c:d1:02:71:4b:75:a2:51:8b: bf:d2:02:88:31:d9:3f:81:f2:9e:a1:4b:eb:49:9b: 26:9c:4e:e4:48:d2:c6:53:c5:c9:c7:5b:1a:44:50: f5:1e:4b:16:11:f0:59:e6:7a:0e:3d:e4:c8:42:d8: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:F9:A5:E9:EA:89:63:72:F6:E4:5F:34:4F:7E:09:14:CB:FB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:17:c4:1d:d2:b9:f1:96:93:e6:c0:28:ee:60:19:61:8e:1b: 56:d0:62:36:52:ea:12:74:ac:e8:2a:59:ae:af:41:ef:24:be: a1:7b:e3:b7:70:05:b0:d1:ac:8b:27:cf:bb:9c:04:fb:1d:b0: 4d:0e:91:74:74:22:a0:fa:c5:da:d5:c4:a3:33:ee:6c:19:6e: ee:b1:0f:7a:e6:d2:b2:13:e4:e2:6b:12:61:bc:1d:a6:38:5e: 80:da:c4:64:6d:aa:3b:14:ca:45:4f:6e:76:0b:26:4a:e9:29: 6a:fb:2a:46:0b:7b:5e:fc:19:bb:34:cc:67:d5:04:ac:92:af: 33:56:fb:a8:b7:4a:00:b9:b5:b4:97:bd:9c:e1:d2:52:4b:e4: a2:21:c6:b4:8f:e6:c7:04:bb:8a:f0:27:1b:88:5c:5c:1f:42: cb:5b:44:70:a3:45:03:d5:4f:98:44:20:71:ed:7d:ba:97:6d: b8:9c:40:5d:61:d7:87:43:80:a5:c4:36:b6:d1:7f:0c:ba:34: dd:ee:94:e4:81:16:fa:28:95:d3:01:22:b1:69:76:59:f7:e7: 2a:40:ba:ad:1b:a2:5e:b8:38:10:46:fa:69:a3:8a:ff:de:4a: 42:24:3d:83:a3:a7:15:11:03:26:28:07:6c:b1:d9:90:02:2e: cf:c0:38:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFK6sqfVSLxm61a2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDE1MTgxMloXDTI2MDExMjE2MTgxMlowLzEtMCsGA1UEAxMk MDExZDZlYTktNDMwMy00ODllLWEzMWEtZDc3NTdjZWU5ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIr+Wuswd/8wdvxmF16WX30FxETIrJ3UGNu2 AMII5hVrA5kkvQ3N6R6KO1lQPAWiMFOF1OXRNOO805wsYLJ3dtkdzRyE4+pZENgJ XeOeIUMB0wwQOjjJ+qS4jkLTtP0A7jDmbf2CwvS5freIpWXo4Ny6NWgNwSanKjAh sXI0kA2hZQdESHRaordYUMtjzfip60bP0533bdppVixvI7Ox4L1qxjsE4/K+LL0+ SnhnZFmXFylhckIOFcN2oZv4s30t4eAhXg83UlFc0QJxS3WiUYu/0gKIMdk/gfKe oUvrSZsmnE7kSNLGU8XJx1saRFD1HksWEfBZ5noOPeTIQtil3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi4+aXp6oljcvbkXzRPfgkUy/szMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYTJkMjUyODctYWM5Mi0z N2EzLTkxYTctYTA3ZjJlZjU5NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQXxB3SufGWk+bAKO5gGWGOG1bQYjZS6hJ0rOgqWa6vQe8kvqF747dw BbDRrIsnz7ucBPsdsE0OkXR0IqD6xdrVxKMz7mwZbu6xD3rm0rIT5OJrEmG8HaY4 XoDaxGRtqjsUykVPbnYLJkrpKWr7KkYLe178Gbs0zGfVBKySrzNW+6i3SgC5tbSX vZzh0lJL5KIhxrSP5scEu4rwJxuIXFwfQstbRHCjRQPVT5hEIHHtfbqXbbicQF1h 14dDgKXENrbRfwy6NN3ulOSBFvooldMBIrFpdln35ypAuq0bol64OBBG+mmjiv/e SkIkPYOjpxURAyYoB2yx2ZACLs/AOGI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:33:10 2025 by rpki-client