$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa File: d458cc6c-96e8-376d-b714-a03dc2e3e288.roa (raw, json) Hash identifier: vN/AaLA6sl1rEC5XGHdmuMkdjwPFwjW9dw3jThy59Fc= Subject key identifier: CA:2D:BC:43:3A:B8:E4:BC:A9:9B:85:77:6A:21:62:8D:54:4A:A4:F4 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584B84E77CF2EB901C919FA41F40 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 55178 IP address blocks: 192.230.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:f2:eb:90:1c:91:9f:a4:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=856080a7-04c8-4731-87ca-db7e02acc989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:2d:31:69:74:33:52:ae:61:82:1b:d3:58: 0c:5f:06:de:03:81:e7:ae:b3:1c:ee:05:c5:e7:0e: 91:e8:70:8c:39:58:24:f2:f2:8a:a1:c9:13:ca:c2: c2:55:25:5a:ad:58:81:af:71:ee:1b:e5:ce:cc:64: 24:19:bd:2a:f8:2d:7f:cf:50:a2:79:9b:0f:e0:f0: 59:19:51:dd:4d:cb:b9:9d:83:7d:6e:cd:63:7e:8b: 90:5a:a7:94:74:24:21:66:81:f6:02:1a:a5:73:4c: 24:e5:0f:fc:75:e9:59:74:d3:03:5c:d3:78:d8:af: 3e:f1:53:e3:76:e0:a7:13:8d:21:9b:b1:7c:f2:0a: 33:c4:2f:87:a9:91:11:57:29:4d:80:03:62:d8:3d: cf:b8:59:75:7c:de:35:2e:cf:a4:aa:e9:5f:b9:6e: a5:ac:cb:2c:54:aa:57:57:37:5b:eb:8c:a8:94:55: 64:6f:a5:99:e5:c2:ad:71:24:a3:54:3c:8d:de:0a: cf:a7:71:0f:07:5f:f2:3d:82:25:6a:27:01:15:fc: 1a:bf:75:bf:27:4f:57:ad:21:c9:22:0e:c9:ff:b8: 85:6b:aa:36:b5:62:12:f1:a0:32:18:9b:24:94:e2: 25:38:aa:29:90:e3:08:ae:63:0d:88:1b:ee:78:f1: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:BC:43:3A:B8:E4:BC:A9:9B:85:77:6A:21:62:8D:54:4A:A4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:87:25:1a:88:f4:ec:d9:b9:63:3c:d3:8b:d9:be:99:59:8d: 13:ce:ec:8f:fc:b9:48:e8:80:f1:bc:bf:15:57:9e:fb:c0:98: a1:0e:9b:89:e4:aa:53:c9:b0:84:b9:40:0e:46:99:7c:7c:3e: 2a:d2:43:e5:60:33:94:b9:90:49:da:0a:e8:00:ae:2d:ba:52: d6:13:ef:3b:45:b8:51:55:34:51:3e:5b:c7:1a:36:bb:b9:dc: b5:e1:43:c2:e3:9d:fc:71:02:e2:fa:99:09:e3:d3:df:47:1a: b2:45:7e:55:4b:bd:e0:39:5f:eb:c8:92:5b:72:39:1d:dc:ca: f5:de:10:a8:3c:46:81:0f:9d:9b:1c:60:9d:c3:7a:03:fc:1c: a7:c7:da:a1:d0:f1:c3:ed:06:f0:54:1b:45:2f:5e:cb:2f:60: ab:72:bd:b8:0a:07:d6:5d:87:b5:ed:53:0b:ee:2e:d7:f3:bd: e5:f9:3c:a9:6b:82:3d:88:36:2b:c2:10:c9:99:53:f0:91:78: 6d:53:b2:b3:91:f6:32:64:22:96:c2:c5:5b:6d:b8:3f:8e:6b: a7:5a:85:49:8f:ee:84:7b:40:c2:9b:4c:7e:59:b2:c0:f9:2e: 1d:f2:39:22:30:80:ab:e5:31:28:cb:70:30:00:f4:5c:c9:2e: 18:d7:94:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53zy65AckZ+kH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODU2MDgwYTctMDRjOC00NzMxLTg3Y2EtZGI3ZTAyYWNjOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKctMWl0M1KuYYIb01gMXwbeA4HnrrMc7gXF 5w6R6HCMOVgk8vKKockTysLCVSVarViBr3HuG+XOzGQkGb0q+C1/z1CieZsP4PBZ GVHdTcu5nYN9bs1jfouQWqeUdCQhZoH2Ahqlc0wk5Q/8delZdNMDXNN42K8+8VPj duCnE40hm7F88gozxC+HqZERVylNgANi2D3PuFl1fN41Ls+kqulfuW6lrMssVKpX Vzdb64yolFVkb6WZ5cKtcSSjVDyN3grPp3EPB1/yPYIlaicBFfwav3W/J09XrSHJ Ig7J/7iFa6o2tWIS8aAyGJsklOIlOKopkOMIrmMNiBvuePHY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMotvEM6uOS8qZuFd2ohYo1USqT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvZDQ1OGNjNmMtOTZlOC0z NzZkLWI3MTQtYTAzZGMyZTNlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOazMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyHJRqI9OzZuWM804vZvplZjRPO7I/8uUjogPG8vxVXnvvAmKEOm4nk qlPJsIS5QA5GmXx8PirSQ+VgM5S5kEnaCugAri26UtYT7ztFuFFVNFE+W8caNru5 3LXhQ8LjnfxxAuL6mQnj099HGrJFflVLveA5X+vIkltyOR3cyvXeEKg8RoEPnZsc YJ3DegP8HKfH2qHQ8cPtBvBUG0UvXssvYKtyvbgKB9Zdh7XtUwvuLtfzveX5PKlr gj2INivCEMmZU/CReG1TsrOR9jJkIpbCxVttuD+Oa6dahUmP7oR7QMKbTH5ZssD5 Lh3yOSIwgKvlMSjLcDAA9FzJLhjXlEY= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:56 2025 by rpki-client