$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa File: 068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json) Hash identifier: ja2f34nm/avgTiGhkkBaQdTKiBhYsowRxC7Yn69j5Nc= Subject key identifier: 70:1D:D0:4E:55:E6:42:CE:D0:30:1A:FC:46:DF:2F:29:21:C0:2B:E2 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584B87B21C57B1B290134AD14880 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 55178 IP address blocks: 192.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1c:57:b1:b2:90:13:4a:d1:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=f45f1477-964f-4649-b8de-f5e34e5e51c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:ec:c4:c0:c4:2f:1d:59:83:43:f9:50:f6: 41:0b:df:1b:b0:66:c4:17:1e:df:b6:b5:b8:2c:45: e5:ed:72:20:ba:94:bd:82:6a:f5:3b:0f:a0:ec:45: 74:8c:7a:b1:8b:bf:bb:9a:74:a6:be:15:04:7a:45: ab:09:d0:e8:e7:08:89:26:df:77:ec:c4:08:7e:1b: 7d:cc:93:dc:9f:3f:87:f4:2d:8b:1e:e5:55:8d:0f: c4:d6:19:d6:4b:c1:15:a9:d8:31:5b:c7:5e:a2:e0: 27:1a:9b:17:36:0f:a6:38:ba:13:10:14:ba:ac:67: 16:22:f7:9c:78:a8:62:68:ed:d0:f4:f2:14:60:cc: fc:09:44:e9:83:22:af:75:71:df:3f:01:38:ab:b9: 10:34:99:7c:0c:3e:4d:6f:69:d6:cd:2e:a7:7e:33: b3:64:5e:67:b4:7a:ac:7d:a0:17:04:32:ee:17:77: 68:db:db:d0:1d:4a:4a:3f:6f:fb:f5:7a:f4:ef:17: bb:29:3a:a8:99:7a:ff:f4:d2:08:e0:9f:33:7f:23: ed:46:bb:c3:2f:1c:d1:a6:74:ec:c0:65:df:a0:7a: 9f:b0:c4:77:71:74:e1:d8:a4:2f:91:fd:a1:c4:90: f9:5c:9c:d6:ca:e4:2d:0c:95:6e:6d:8d:c5:27:84: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1D:D0:4E:55:E6:42:CE:D0:30:1A:FC:46:DF:2F:29:21:C0:2B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cf:4a:84:11:97:09:2b:fa:89:7e:32:00:49:63:6f:21:59: 0e:09:ea:1d:d0:02:b4:29:37:8b:12:f4:88:bb:97:e2:c8:7a: 88:07:94:9e:f7:c2:7d:da:8e:5b:4d:9e:5e:1d:fd:aa:69:9f: 6f:cd:9c:78:ba:84:b7:a7:43:af:86:ad:48:b1:50:fe:bd:8f: 51:b7:2a:94:9b:15:36:86:d7:08:d6:57:76:15:4c:39:11:74: 3a:d1:50:e9:4b:83:1b:c0:b4:78:ec:fe:cf:a6:60:dd:aa:b5: bc:e4:d0:3d:73:75:ce:2d:61:d3:68:c3:2c:f7:03:ad:e3:fc: 8a:5c:57:f0:65:18:b3:42:18:fa:4d:db:f3:a5:24:3c:8d:93: 08:93:fc:5c:0f:49:66:c7:e6:f2:cc:d9:63:b2:73:7f:69:20: 2e:c7:a4:42:ca:30:5b:3f:bb:b1:35:39:0c:13:c2:e3:5e:73: 0a:6f:13:29:52:79:b5:f3:ec:79:8c:76:62:6d:6d:70:c7:46: 9f:46:fe:5f:6a:23:6e:ab:64:59:14:b2:d0:9e:8d:43:ea:da: 23:61:0f:83:90:0e:af:20:b1:9f:cf:16:5c:1d:94:a1:26:52: 5e:19:81:82:d9:01:d6:f3:37:ae:1f:43:50:7f:75:b5:47:bf: cb:b2:20:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshxXsbKQE0rRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjQ1ZjE0NzctOTY0Zi00NjQ5LWI4ZGUtZjVlMzRlNWU1MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XjsxMDELx1Zg0P5UPZBC98bsGbEFx7ftrW4 LEXl7XIgupS9gmr1Ow+g7EV0jHqxi7+7mnSmvhUEekWrCdDo5wiJJt937MQIfht9 zJPcnz+H9C2LHuVVjQ/E1hnWS8EVqdgxW8deouAnGpsXNg+mOLoTEBS6rGcWIvec eKhiaO3Q9PIUYMz8CUTpgyKvdXHfPwE4q7kQNJl8DD5Nb2nWzS6nfjOzZF5ntHqs faAXBDLuF3do29vQHUpKP2/79Xr07xe7KTqomXr/9NII4J8zfyPtRrvDLxzRpnTs wGXfoHqfsMR3cXTh2KQvkf2hxJD5XJzWyuQtDJVubY3FJ4Sg5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAd0E5V5kLO0DAa/EbfLykhwCviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjPSoQRlwkr+ol+MgBJY28hWQ4J6h3QArQpN4sS9Ii7l+LIeogHlJ73 wn3ajltNnl4d/appn2/NnHi6hLenQ6+GrUixUP69j1G3KpSbFTaG1wjWV3YVTDkR dDrRUOlLgxvAtHjs/s+mYN2qtbzk0D1zdc4tYdNowyz3A63j/IpcV/BlGLNCGPpN 2/OlJDyNkwiT/FwPSWbH5vLM2WOyc39pIC7HpELKMFs/u7E1OQwTwuNecwpvEylS ebXz7HmMdmJtbXDHRp9G/l9qI26rZFkUstCejUPq2iNhD4OQDq8gsZ/PFlwdlKEm Ul4ZgYLZAdbzN64fQ1B/dbVHv8uyIHc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:34 2025 by rpki-client