$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa File: ae32667d-20dc-38d0-9173-85d343fffeae.roa (raw, json) Hash identifier: bJQw9WP7hUz5PSA+UPK7JrSWSTVtJPT2eBkUB4l1W8M= Subject key identifier: 1C:C0:5D:82:49:F0:8C:6A:5F:EC:57:E7:BB:7B:A4:74:A9:D9:BA:C7 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B85294913EC8A189B7B0F6680 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa Signing time: Tue 14 Oct 2025 15:13:24 +0000 ROA not before: Tue 14 Oct 2025 15:13:24 +0000 ROA not after: Mon 12 Jan 2026 16:13:24 +0000 asID: 13511 IP address blocks: 192.155.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:29:49:13:ec:8a:18:9b:7b:0f:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 15:13:24 2025 GMT Not After : Jan 12 16:13:24 2026 GMT Subject: CN=056b3dba-2fc6-48d3-a697-f886dc4b3344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:f6:26:41:33:56:82:a7:4f:76:d4:89:80: fc:b6:66:92:0d:77:b7:bd:da:40:56:da:56:25:ea: 72:bb:cf:ad:b5:a6:91:d2:fb:5f:7e:97:7a:30:38: 88:0b:c4:fc:54:74:59:49:f4:9c:be:80:02:47:21: e1:7a:31:c7:89:b9:fb:79:57:42:fd:8b:65:29:58: e4:f6:62:6a:67:99:19:f1:e7:ef:56:02:fc:c6:f7: 30:ba:e4:6a:b5:62:5f:6e:ab:56:6c:94:0d:f5:c6: 0e:af:f9:ad:1c:a4:46:0b:cd:fc:ac:92:e2:fb:d1: 73:da:92:fe:db:f6:b6:94:9c:80:7b:f3:fd:87:f5: 4d:77:87:76:e7:44:55:6c:b8:3d:89:df:d3:6e:db: 57:c1:f9:f3:f5:74:65:cc:e7:21:b6:11:48:22:b6: 35:ae:e5:0f:e5:7d:81:f0:d0:11:6a:0c:e7:37:6b: 44:91:3d:13:f7:07:7a:99:82:33:c4:78:e4:0a:9d: 11:d3:8a:9d:fa:1f:62:d2:6d:69:0c:18:3e:de:ce: 1d:cd:8a:dc:03:b0:19:23:7b:30:5d:a5:c1:2b:aa: 42:37:8c:d2:dc:a1:a2:3a:48:1b:08:ec:0c:e4:b6: 21:68:f9:1c:42:52:23:36:e9:71:2a:05:e8:e4:0a: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C0:5D:82:49:F0:8C:6A:5F:EC:57:E7:BB:7B:A4:74:A9:D9:BA:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:06:50:b8:bc:f2:da:5d:cb:7a:3a:d2:ea:c7:1e:82:94:61: 1f:36:2d:ae:0b:d2:40:51:3f:8e:8c:c8:91:ab:f4:1b:53:4b: fc:16:28:a7:f6:8f:ce:5c:36:9c:01:22:14:73:7d:46:2d:d2: ed:be:7b:09:c4:b3:ea:be:29:9f:95:22:18:8a:79:9b:dc:c3: 15:4f:1c:ac:4f:e4:af:40:cc:ac:e6:c4:6e:4e:7e:6d:d4:97: 63:f1:db:ba:f2:f6:d4:33:25:d5:eb:96:4b:bf:6a:05:a6:48: d0:22:f0:44:ea:70:2d:c1:04:a7:48:c1:59:ad:71:fc:e4:b1: bd:77:06:ab:2d:95:8b:65:24:4e:0b:c8:17:db:eb:65:5e:d5: ae:9b:5e:12:f3:d4:e0:6a:58:d3:c1:a1:82:f4:eb:a8:ec:3e: ec:db:5f:eb:71:98:79:e8:8f:d6:07:cb:0e:54:23:d6:d9:3a: 53:c0:1a:23:8d:fe:7a:21:be:83:e0:7b:e2:d9:04:e2:6c:51: f8:d5:e5:71:54:41:7c:05:8a:47:0b:bd:9e:5e:75:f5:ae:f5: e6:dc:1f:a2:87:74:81:b5:1b:43:3e:25:9d:14:b4:b6:b6:f3: 55:2e:7c:6a:4b:b2:73:40:10:56:5b:e8:c8:18:82:68:97:5c: 6a:d4:06:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFKUkT7IoYm3sPZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDE1MTMyNFoXDTI2MDExMjE2MTMyNFowLzEtMCsGA1UEAxMk MDU2YjNkYmEtMmZjNi00OGQzLWE2OTctZjg4NmRjNGIzMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl32JkEzVoKnT3bUiYD8tmaSDXe3vdpAVtpW Jepyu8+ttaaR0vtffpd6MDiIC8T8VHRZSfScvoACRyHhejHHibn7eVdC/YtlKVjk 9mJqZ5kZ8efvVgL8xvcwuuRqtWJfbqtWbJQN9cYOr/mtHKRGC838rJLi+9Fz2pL+ 2/a2lJyAe/P9h/VNd4d250RVbLg9id/TbttXwfnz9XRlzOchthFIIrY1ruUP5X2B 8NARagznN2tEkT0T9wd6mYIzxHjkCp0R04qd+h9i0m1pDBg+3s4dzYrcA7AZI3sw XaXBK6pCN4zS3KGiOkgbCOwM5LYhaPkcQlIjNulxKgXo5ApMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzAXYJJ8IxqX+xX57t7pHSp2brHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYWUzMjY2N2QtMjBkYy0z OGQwLTkxNzMtODVkMzQzZmZmZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0GULi88tpdy3o60urHHoKUYR82La4L0kBRP46MyJGr9BtTS/wWKKf2 j85cNpwBIhRzfUYt0u2+ewnEs+q+KZ+VIhiKeZvcwxVPHKxP5K9AzKzmxG5Ofm3U l2Px27ry9tQzJdXrlku/agWmSNAi8ETqcC3BBKdIwVmtcfzksb13BqstlYtlJE4L yBfb62Ve1a6bXhLz1OBqWNPBoYL066jsPuzbX+txmHnoj9YHyw5UI9bZOlPAGiON /nohvoPge+LZBOJsUfjV5XFUQXwFikcLvZ5edfWu9ebcH6KHdIG1G0M+JZ0UtLa2 81UufGpLsnNAEFZb6MgYgmiXXGrUBo4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:42 2025 by rpki-client