$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa File: 8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json) Hash identifier: HpqVL975qNkRM4flZDztO0iMvtN0oB21hIYCN1sq61w= Subject key identifier: 12:8A:36:76:F0:83:E8:9B:65:F6:7A:04:F2:69:FC:D0:9E:B0:87:76 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584B68FC9674AE8C554E7BB21B00 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 683 IP address blocks: 192.5.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:96:74:ae:8c:55:4e:7b:b2:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=ded111f8-24f9-4d61-997b-c31f288c6505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:a4:99:f0:6b:ab:3e:f7:72:a3:c7:6e:3e: 7e:d6:c0:d9:17:61:c2:7e:bb:0a:6c:dc:b0:d7:f1: 5f:26:c4:68:77:f4:a7:85:e4:ba:06:e4:89:38:80: e5:c3:58:15:f0:34:b2:1e:f5:d3:30:aa:50:5b:4a: 26:ce:98:3d:96:45:07:6e:9d:31:08:47:a9:5d:f4: a4:a4:23:07:4f:b5:42:81:24:c0:66:e1:8a:e0:bd: e0:2d:75:ee:fd:90:85:c7:9c:ed:8e:d3:4a:ad:68: f6:50:7e:df:f7:a4:bb:8f:1e:35:60:6a:56:5a:9c: 09:5f:17:5f:49:99:e6:db:be:6c:c6:8e:79:be:f0: 27:fb:2f:b0:c6:38:1e:a0:d6:d1:7f:6c:64:f1:e3: b6:ce:61:10:3b:02:f0:78:c7:f3:9a:99:29:ee:c0: 41:94:a7:d9:ac:2a:f1:52:bd:35:7c:51:ce:84:90: 5a:4c:e9:5f:29:d7:5a:31:f8:bb:68:fe:d0:a4:c8: 5e:8a:d9:95:86:23:9f:30:7b:8f:9c:1d:ce:e5:e5: 76:ed:f0:76:d1:3a:52:9d:1a:cc:d6:cc:c2:76:46: 8c:bb:e4:2c:90:f9:a3:27:5a:30:35:3a:7a:60:75: 6a:9a:31:d1:d6:02:30:90:e7:cd:68:b0:18:d8:0e: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:36:76:F0:83:E8:9B:65:F6:7A:04:F2:69:FC:D0:9E:B0:87:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 192.5.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:60:63:af:76:10:11:61:14:c4:3e:46:3a:09:66:69:07:9f: 60:d0:85:db:e7:5c:04:63:f9:ea:24:6e:6d:c5:3a:90:a3:ec: 92:c3:fd:d3:a3:b5:db:fa:07:41:20:a2:b1:de:f5:2f:2d:6e: f6:d7:ae:a5:9c:11:38:8c:1a:2b:23:ed:9a:4d:42:ae:7f:fd: 60:40:2c:0a:57:8f:9f:d7:00:19:25:50:0e:37:e1:1c:fb:5a: ac:e9:40:f6:26:65:0d:b2:07:36:09:e7:58:8c:ee:4c:8e:22: fa:60:17:c1:b9:15:1e:f9:be:dd:47:b7:3f:e3:d4:21:36:b1: 12:35:c4:af:e1:6b:de:c9:77:c0:0c:8e:52:f7:3b:05:ac:97: 00:1c:cd:4b:e4:b9:71:7e:03:10:86:45:18:c7:fb:54:fd:b2: 5e:2e:05:26:c9:0b:0b:3d:13:2e:d8:04:3c:f4:07:29:91:a0: f9:37:a6:67:fb:18:97:fa:9b:24:f2:f0:9d:b1:a7:0f:4d:ea: 5d:75:af:dc:ff:71:e5:77:6d:49:46:a1:ed:e5:50:22:0c:6d: 76:9b:27:b4:7c:9c:19:55:99:89:2c:73:cc:4f:be:dc:4b:60: 3c:8a:41:76:51:96:f7:53:1c:ad:9b:42:8a:0f:aa:58:e1:c4: 09:08:02:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JZ0roxVTnuyGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGVkMTExZjgtMjRmOS00ZDYxLTk5N2ItYzMxZjI4OGM2NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyKkmfBrqz73cqPHbj5+1sDZF2HCfrsKbNyw 1/FfJsRod/SnheS6BuSJOIDlw1gV8DSyHvXTMKpQW0omzpg9lkUHbp0xCEepXfSk pCMHT7VCgSTAZuGK4L3gLXXu/ZCFx5ztjtNKrWj2UH7f96S7jx41YGpWWpwJXxdf SZnm275sxo55vvAn+y+wxjgeoNbRf2xk8eO2zmEQOwLweMfzmpkp7sBBlKfZrCrx Ur01fFHOhJBaTOlfKddaMfi7aP7QpMheitmVhiOfMHuPnB3O5eV27fB20TpSnRrM 1szCdkaMu+QskPmjJ1owNTp6YHVqmjHR1gIwkOfNaLAY2A6sBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKKNnbwg+ibZfZ6BPJp/NCesId2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvOGNkNmM0YmMtOThhZC0z NzczLTk3NGQtY2E3YTFjMDMxZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZgY692EBFhFMQ+RjoJZmkHn2DQhdvnXARj+eokbm3FOpCj7JLD/dOj tdv6B0EgorHe9S8tbvbXrqWcETiMGisj7ZpNQq5//WBALApXj5/XABklUA434Rz7 WqzpQPYmZQ2yBzYJ51iM7kyOIvpgF8G5FR75vt1Htz/j1CE2sRI1xK/ha97Jd8AM jlL3OwWslwAczUvkuXF+AxCGRRjH+1T9sl4uBSbJCws9Ey7YBDz0BymRoPk3pmf7 GJf6myTy8J2xpw9N6l11r9z/ceV3bUlGoe3lUCIMbXabJ7R8nBlVmYksc8xPvtxL YDyKQXZRlvdTHK2bQooPqljhxAkIAmY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:36 2025 by rpki-client