$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa File: dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json) Hash identifier: /hpLuBdXsF0iDvPF5Uai1Zd+2K4Aqn00DP1HOZ1QIWE= Subject key identifier: B7:FF:0F:5B:3C:60:E6:63:F3:04:AE:18:03:D8:0C:1A:1E:8B:2A:CD Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584B87B21C006493C4C91A5939C0 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 55178 IP address blocks: 192.230.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1c:00:64:93:c4:c9:1a:59:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=17af7668-b07f-45ee-9646-d5fea7d69311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:b8:52:96:f9:67:49:7c:34:14:ef:cd:18: f7:46:e0:8e:25:18:33:1a:6d:7e:4e:44:64:49:d1: 9d:ee:e1:f2:0f:e3:81:c5:30:93:a8:69:29:e7:57: 1e:17:f5:e0:08:5a:98:47:4e:c5:0e:0f:0f:f0:33: 16:5d:4f:e2:b5:b5:42:24:e1:1f:62:63:93:17:23: d7:ce:d6:3b:30:8e:5b:68:b3:a3:76:50:c9:de:40: c5:1e:37:80:2a:1c:b1:b6:7c:32:7b:2c:71:c9:9b: 72:85:5c:af:02:21:fa:13:cd:55:e1:5d:f4:38:c0: 61:2f:49:96:a6:9b:91:06:ed:f7:60:05:73:f7:19: 66:1a:10:4d:73:59:e0:80:34:2c:cd:43:b6:50:f6: b1:79:3d:8f:37:2e:c2:61:cf:25:2c:ea:0e:36:c3: 9c:d1:9d:6c:3d:c2:b3:d9:1f:ed:c5:ba:20:d5:02: 0f:77:44:fb:6a:7d:fc:9f:d4:6e:ed:1f:7f:ae:fe: 7a:b2:e8:49:cf:f6:7e:d9:f1:0f:78:71:c8:7f:ca: 17:1c:c2:37:c9:d0:91:38:7d:48:5e:84:c5:88:1a: 90:c2:f5:6b:eb:66:f1:83:de:3b:75:90:06:91:0e: 28:40:24:84:05:c4:d4:32:a4:46:08:de:3f:d7:40: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:0F:5B:3C:60:E6:63:F3:04:AE:18:03:D8:0C:1A:1E:8B:2A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:23:c8:18:1a:08:34:72:56:23:33:5e:17:ed:8b:d8:a9:cf: 8e:f4:8f:85:92:76:70:7e:a3:cb:9e:ec:15:fd:1a:b1:0b:d3: 0a:0b:2c:48:b1:3d:6b:74:b7:54:14:01:cf:7f:48:a0:ac:17: b9:fb:15:8a:4f:d7:b5:55:4f:0a:5c:99:af:bd:c9:df:63:12: 65:1f:7f:48:65:fa:19:0f:aa:98:bf:5e:60:07:30:b5:71:41: 0d:24:05:cc:b3:a4:3d:5e:44:3d:cd:da:f8:24:45:9e:26:c3: 48:40:3c:cc:83:b9:f6:42:b8:eb:ec:8c:d4:83:1b:c3:00:82: 4c:e4:42:86:5b:52:00:90:8d:42:cc:8f:c4:95:83:74:a5:c6: 2d:b2:bc:1f:7d:24:58:fa:ac:2f:f1:9c:bb:9d:ae:f3:41:a7: 6c:ca:34:6b:45:b4:aa:2b:02:32:60:2e:e6:44:18:b8:5d:b8: d8:ab:dd:8d:7b:37:a1:bf:73:ea:c1:25:f6:29:5c:a4:36:b2: 9d:8e:82:31:27:5e:fc:1f:98:ee:61:fc:cc:e7:11:0a:e2:7f: e3:41:08:b1:72:0c:2f:df:a1:42:3e:d2:62:16:fb:a3:4e:09: 8a:51:75:7d:78:75:32:ee:61:dd:e1:61:74:36:60:53:ce:95: 7f:d5:53:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshwAZJPEyRpZOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MTdhZjc2NjgtYjA3Zi00NWVlLTk2NDYtZDVmZWE3ZDY5MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig+4Upb5Z0l8NBTvzRj3RuCOJRgzGm1+TkRk SdGd7uHyD+OBxTCTqGkp51ceF/XgCFqYR07FDg8P8DMWXU/itbVCJOEfYmOTFyPX ztY7MI5baLOjdlDJ3kDFHjeAKhyxtnwyeyxxyZtyhVyvAiH6E81V4V30OMBhL0mW ppuRBu33YAVz9xlmGhBNc1nggDQszUO2UPaxeT2PNy7CYc8lLOoONsOc0Z1sPcKz 2R/txbog1QIPd0T7an38n9Ru7R9/rv56suhJz/Z+2fEPeHHIf8oXHMI3ydCROH1I XoTFiBqQwvVr62bxg947dZAGkQ4oQCSEBcTUMqRGCN4/10AFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf/D1s8YOZj8wSuGAPYDBoeiyrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvZGFiNzFmZmYtY2JhYy0z ZTI3LTlmYzctZjEyYjAxM2E3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYjyBgaCDRyViMzXhfti9ipz470j4WSdnB+o8ue7BX9GrEL0woLLEix PWt0t1QUAc9/SKCsF7n7FYpP17VVTwpcma+9yd9jEmUff0hl+hkPqpi/XmAHMLVx QQ0kBcyzpD1eRD3N2vgkRZ4mw0hAPMyDufZCuOvsjNSDG8MAgkzkQoZbUgCQjULM j8SVg3Slxi2yvB99JFj6rC/xnLudrvNBp2zKNGtFtKorAjJgLuZEGLhduNir3Y17 N6G/c+rBJfYpXKQ2sp2OgjEnXvwfmO5h/MznEQrif+NBCLFyDC/foUI+0mIW+6NO CYpRdX14dTLuYd3hYXQ2YFPOlX/VU5A= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:50 2025 by rpki-client